Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44b5aae4-556d-36c3-9d2e-43c1adb46c6b.roa
File:                     44b5aae4-556d-36c3-9d2e-43c1adb46c6b.roa (raw, json)
Hash identifier:          CAuwyGLV+IXwtHwrUJ5ozK4p2WZegQzLecMc4V3wlWw=
Subject key identifier:   E0:26:67:C8:4D:DB:5D:AF:BD:61:76:1F:BB:C8:28:3F:B1:A7:CD:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B95A94B985ABE99D1E44708C8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44b5aae4-556d-36c3-9d2e-43c1adb46c6b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        75.232.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:4b:98:5a:be:99:d1:e4:47:08:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=ca75db77-02ed-4509-9e95-0b7367981224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:74:62:7e:8f:b5:27:95:e8:8c:93:e3:65:13:
                    db:03:33:1e:6f:04:05:e3:db:a6:47:8b:10:cd:1a:
                    39:cb:31:23:c2:9b:d1:bd:21:e5:3a:a6:19:11:9b:
                    02:9a:19:e8:40:06:17:53:9b:ae:a5:d5:24:f8:b7:
                    31:e2:13:ff:63:1e:97:1c:67:55:55:56:d6:dd:81:
                    e9:7d:bb:c1:68:a8:d4:ed:20:e5:ff:da:8a:57:83:
                    03:74:c3:d9:c3:93:10:00:f0:b1:9e:cf:fa:21:48:
                    e1:1d:3f:fc:ec:e8:d3:43:a6:1a:9a:5c:24:19:70:
                    5a:90:69:d0:4e:e0:a5:24:bf:41:dd:af:23:53:90:
                    9d:b9:29:36:06:96:e3:5a:15:e7:5b:b6:2f:4e:4a:
                    21:92:a1:e2:dc:f9:50:1a:73:3d:77:34:91:a4:77:
                    61:75:7f:72:c0:38:84:98:4d:80:2f:ff:92:d9:3a:
                    a4:6b:ad:80:b9:08:77:7c:db:84:ef:44:91:a9:f6:
                    7e:72:49:c6:a5:b8:6d:e5:1e:d5:a6:c6:c0:03:6a:
                    90:c1:91:89:0e:aa:60:b1:31:8d:cd:fa:82:55:ee:
                    45:94:f0:6d:d8:af:11:9b:c2:12:a0:82:df:7d:ca:
                    34:f2:c6:c3:f9:b2:c2:0c:cd:f0:42:05:85:82:da:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:26:67:C8:4D:DB:5D:AF:BD:61:76:1F:BB:C8:28:3F:B1:A7:CD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44b5aae4-556d-36c3-9d2e-43c1adb46c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.232.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:ac:6c:73:74:9e:2f:89:6b:55:b9:1c:92:7e:cb:08:a0:
         99:56:4a:8c:65:aa:2a:58:56:5f:85:c3:fd:bb:50:65:45:71:
         48:9f:2e:12:4d:cc:ee:38:96:01:ed:fe:6a:05:49:79:40:45:
         cd:66:af:a0:8e:24:de:83:b0:b0:5f:b3:ed:16:93:52:7f:68:
         6e:a7:48:04:dc:b1:e9:6a:4b:ea:9e:96:15:15:08:b0:57:26:
         8a:d0:cb:74:fc:e7:95:b7:56:7a:3b:0b:d7:7d:3b:db:a3:06:
         af:9e:51:66:3f:c7:60:83:04:89:f8:a1:35:6d:ec:1d:59:da:
         9c:ce:60:32:36:41:bc:6e:f6:bc:1b:b4:a7:90:a1:74:5a:50:
         3d:f8:e6:b1:1a:c8:ec:4f:8d:02:07:35:9e:15:ef:f2:47:1f:
         fb:cc:87:85:9e:cf:b3:de:47:09:98:e5:96:6b:27:d9:a3:5c:
         19:fd:df:45:5b:d8:61:c8:52:c6:7f:85:a4:3a:22:66:f9:74:
         40:fc:33:9c:e0:be:4d:5b:17:c7:51:53:ea:87:43:b1:c4:c1:
         eb:0e:a2:bd:31:d6:1e:9c:9a:00:a0:33:ec:c6:75:4f:08:76:
         2a:bf:04:08:0e:26:4c:49:f6:2a:88:87:e4:3a:ab:f2:b3:1d:
         c9:ba:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:00:36 2025 by rpki-client