Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f425164-b69b-31ba-9426-0735820c6e0e.roa
File:                     5f425164-b69b-31ba-9426-0735820c6e0e.roa (raw, json)
Hash identifier:          p4V66p26tUXWZrao/3UmlqHyP4jSgaQNlTX5mBDULgQ=
Subject key identifier:   67:99:71:C1:81:2E:FB:9F:FE:C6:E0:F9:C7:4E:6D:4D:90:71:70:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB24823AD212D53CDB9A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f425164-b69b-31ba-9426-0735820c6e0e.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.213.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:24:82:3a:d2:12:d5:3c:db:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=85941180-9601-4ccd-914b-5aff452a2ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:01:67:5a:29:1b:47:37:a3:9b:39:97:0b:
                    40:95:1d:21:af:60:29:78:67:22:bf:6b:4a:6e:bd:
                    8f:f6:14:0e:c9:84:32:9c:e1:a6:31:0b:c3:9e:76:
                    5d:57:aa:c9:25:83:a4:9d:38:2e:c4:cc:af:63:5e:
                    1a:8c:c3:36:28:ce:f8:dd:4a:f5:57:07:05:82:33:
                    17:33:80:2f:46:d1:db:ae:46:45:20:b5:45:c9:75:
                    62:60:66:ec:6f:5a:3f:09:a1:99:57:d2:a7:89:72:
                    f7:c6:68:b0:0e:8c:a3:38:00:66:eb:f2:1b:7f:5e:
                    0c:67:03:a7:1e:c1:e8:a9:ab:c4:c4:44:f5:f1:17:
                    5a:93:e6:ed:f8:a4:17:76:4d:9f:9d:43:fb:95:bd:
                    b5:ae:e2:96:d6:1f:54:cc:43:f9:d9:19:0f:64:78:
                    36:13:a6:da:0b:26:9e:54:c1:c6:e1:94:3f:92:74:
                    cf:ec:bf:df:78:4a:09:91:a1:d9:ef:39:ea:4f:65:
                    1d:08:80:3f:b4:46:9e:9e:7f:dc:b8:87:e4:1d:95:
                    22:11:fe:7f:7d:17:e9:87:ec:33:bb:4a:a8:1f:ce:
                    1b:b6:e9:19:7c:3b:eb:d2:2e:40:14:38:58:56:c5:
                    eb:fc:36:f9:09:a2:eb:f0:70:2a:b9:0f:a9:e4:db:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:99:71:C1:81:2E:FB:9F:FE:C6:E0:F9:C7:4E:6D:4D:90:71:70:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f425164-b69b-31ba-9426-0735820c6e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.213.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:cc:d6:91:c6:dc:f5:12:14:3f:fb:b4:85:e9:47:66:ef:
         d8:ba:8f:2c:20:8a:4b:1c:65:13:9e:48:24:68:7b:f2:20:22:
         fa:59:97:a1:1a:dd:62:0d:22:be:57:1d:38:12:6d:77:78:e4:
         27:50:d4:eb:69:dd:e5:d6:9e:e2:d8:70:0e:2f:5f:47:25:ce:
         f2:85:20:18:01:df:d5:f6:e2:3c:f5:b1:e9:0d:13:e5:9c:0f:
         9d:7d:ed:c9:cb:da:b7:65:be:62:e3:3c:6c:fe:48:ad:c7:36:
         c9:6c:3d:54:5a:11:b9:21:b8:3f:86:92:11:33:d9:6a:11:5c:
         b0:c0:83:57:e0:c1:f2:31:91:3a:25:55:ff:40:8c:2d:1e:12:
         cf:47:81:7f:4e:b7:2e:0e:b4:c2:4c:c8:73:bd:2d:b6:1a:3d:
         a1:2f:60:73:73:f6:89:4c:5c:7c:0a:a2:83:55:e4:ba:dc:a5:
         64:a3:b6:8e:5b:72:1f:c6:8c:96:e9:8a:09:27:30:c8:70:c7:
         1b:f3:61:fa:d9:ab:8b:52:c8:01:3a:2d:80:ca:4e:bf:c9:78:
         22:3e:4e:37:0e:8a:8c:5a:bd:a8:ef:cf:e9:48:d6:02:45:23:
         c6:42:24:e9:ca:cc:69:93:5c:fb:b3:ed:2e:09:ab:1c:7d:79:
         00:a5:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:37:25 2025 by rpki-client