Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/331d283e-5d31-38da-be25-3827884f063f.roa
File:                     331d283e-5d31-38da-be25-3827884f063f.roa (raw, json)
Hash identifier:          uv/0yxYfDekcOLGFnCDuqW+u71+BmFUT6ZSfzAHdbUY=
Subject key identifier:   FC:4F:75:B0:94:A8:99:BF:AE:8F:B6:9E:15:BF:6B:06:C8:B8:A6:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EAD0D2C994C8AD594709D20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/331d283e-5d31-38da-be25-3827884f063f.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        75.241.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0d:2c:99:4c:8a:d5:94:70:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=35dbd6ef-4e4d-463c-8e01-b03722e2ef23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:b4:93:d4:29:8b:ff:a5:56:44:f0:01:95:
                    8e:fe:4c:68:2c:87:ce:2d:63:d7:b7:df:0c:ef:b3:
                    bd:ce:62:f9:76:91:3c:73:b1:b0:ce:8d:84:a4:f9:
                    68:5e:7f:f8:ff:56:a0:5d:68:54:96:12:a1:27:f2:
                    e9:39:af:40:4d:dd:f6:93:2f:c7:00:4b:31:ae:08:
                    dd:ef:ee:eb:f8:7b:54:37:ee:98:7e:1b:09:f1:ff:
                    10:98:9f:09:e0:d3:c3:22:35:23:bf:d3:ba:51:31:
                    a5:7f:b3:c0:77:5a:49:6e:90:f6:a1:f3:53:ff:6d:
                    1b:32:25:33:0e:ce:4e:23:4a:f8:fe:a4:6a:37:63:
                    7b:56:79:b8:5f:32:93:d8:1f:03:bc:de:60:53:4e:
                    ac:21:71:e9:e9:cb:66:dd:af:1c:de:37:17:c1:73:
                    95:45:6e:10:3a:19:5c:c3:20:04:ed:2b:c6:e1:da:
                    d6:5c:9e:2e:02:64:15:0b:42:4e:75:79:b7:be:f3:
                    bd:90:be:82:cc:0b:47:8d:46:d3:ca:13:51:fc:6a:
                    80:53:a2:78:21:62:26:94:f1:57:7b:24:62:03:11:
                    59:24:e6:e8:3a:ab:19:b9:b0:21:b2:c5:0c:46:fb:
                    0a:3f:2e:62:4b:9f:05:c3:06:53:e4:49:28:07:34:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4F:75:B0:94:A8:99:BF:AE:8F:B6:9E:15:BF:6B:06:C8:B8:A6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/331d283e-5d31-38da-be25-3827884f063f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:3f:33:a0:f5:8d:95:dd:0b:19:67:af:23:7e:7a:bb:d2:
         b4:c5:60:61:d4:ee:87:80:8f:2c:66:43:05:1c:11:4f:a6:25:
         1b:35:4a:29:ed:87:8e:83:62:7f:ac:ee:e0:a4:16:39:61:47:
         cd:7f:bf:7d:d0:6d:b8:91:56:d8:6e:53:9f:1d:14:ab:b0:bc:
         40:5f:e0:9c:23:11:02:35:a2:45:ac:24:82:ee:f5:1e:f1:ef:
         2c:b7:90:9f:95:64:56:9e:4f:a9:ef:27:ef:18:e1:81:1d:63:
         8c:ca:4b:3b:c0:57:12:a4:f8:c0:75:07:36:7a:43:b0:75:4d:
         33:b9:90:b2:2b:48:59:c5:d4:89:a2:b7:e5:3c:36:a6:ef:32:
         98:18:0f:9c:2b:26:ad:6c:2a:2e:39:2b:45:3a:c5:ad:b0:ef:
         bb:d4:74:57:f1:28:20:51:7f:07:5b:58:62:6f:c7:a2:29:31:
         74:70:77:42:1a:fc:58:b4:b1:67:ca:60:b1:51:75:21:52:c9:
         65:a3:ae:81:77:5e:4f:e5:dc:0a:2a:67:16:c6:ee:cc:3e:b4:
         8b:b6:bc:20:0d:4f:dc:cb:9e:38:b4:8b:1a:d8:24:d2:ae:45:
         85:d8:b3:23:b8:a2:bb:a2:c7:ab:ad:42:5b:1f:1b:7d:ec:6d:
         36:8b:1f:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQ0smUyK1ZRwnSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
MzVkYmQ2ZWYtNGU0ZC00NjNjLThlMDEtYjAzNzIyZTJlZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouy0k9Qpi/+lVkTwAZWO/kxoLIfOLWPXt98M
77O9zmL5dpE8c7Gwzo2EpPloXn/4/1agXWhUlhKhJ/LpOa9ATd32ky/HAEsxrgjd
7+7r+HtUN+6YfhsJ8f8QmJ8J4NPDIjUjv9O6UTGlf7PAd1pJbpD2ofNT/20bMiUz
Ds5OI0r4/qRqN2N7Vnm4XzKT2B8DvN5gU06sIXHp6ctm3a8c3jcXwXOVRW4QOhlc
wyAE7SvG4drWXJ4uAmQVC0JOdXm3vvO9kL6CzAtHjUbTyhNR/GqAU6J4IWImlPFX
eyRiAxFZJOboOqsZubAhssUMRvsKPy5iS58FwwZT5EkoBzR4ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxPdbCUqJm/ro+2nhW/awbIuKbYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzMxZDI4M2UtNWQzMS0z
OGRhLWJlMjUtMzgyNzg4NGYwNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS/GAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoqPzOg9Y2V3QsZZ68jfnq70rTFYGHU7oeAjyxmQwUcEU+mJRs1Sint
h46DYn+s7uCkFjlhR81/v33QbbiRVthuU58dFKuwvEBf4JwjEQI1okWsJILu9R7x
7yy3kJ+VZFaeT6nvJ+8Y4YEdY4zKSzvAVxKk+MB1BzZ6Q7B1TTO5kLIrSFnF1Imi
t+U8NqbvMpgYD5wrJq1sKi45K0U6xa2w77vUdFfxKCBRfwdbWGJvx6IpMXRwd0Ia
/Fi0sWfKYLFRdSFSyWWjroF3Xk/l3AoqZxbG7sw+tIu2vCANT9zLnji0ixrYJNKu
RYXYsyO4oruix6utQlsfG33sbTaLH5o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:02 2025 by rpki-client