Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a388489-6dcb-33d9-b43e-d7a33b5da222.roa
File:                     7a388489-6dcb-33d9-b43e-d7a33b5da222.roa (raw, json)
Hash identifier:          UXXEhRUXTf+FO8GAKYuDQKWlME5R0bpszuxPrgioohw=
Subject key identifier:   F2:B4:E4:6E:7F:99:88:1E:24:0E:4E:98:54:92:C5:BB:7E:C3:06:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2968A547CC31FB048180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a388489-6dcb-33d9-b43e-d7a33b5da222.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.241.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:29:68:a5:47:cc:31:fb:04:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=36a28120-d759-45e0-9def-d594b10f5047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:6e:d1:b0:0c:5a:b8:3a:54:da:2a:ca:16:
                    20:51:d1:66:9e:b1:0a:9d:3e:df:cd:d4:b8:a5:a7:
                    92:9e:69:3f:55:4b:e1:f2:dc:bb:16:50:5e:b3:d7:
                    4c:f7:c4:aa:a7:75:a4:df:7b:24:ef:2a:28:35:1d:
                    31:52:a8:c0:97:10:fb:e2:98:14:7d:86:c2:bd:9e:
                    3d:72:dc:78:9e:47:62:be:aa:fa:06:ca:5b:0b:3b:
                    29:ad:cc:56:64:71:67:74:1c:4c:57:ea:3f:1a:0b:
                    8f:48:de:16:ad:14:20:99:c8:ae:d5:8f:33:db:8b:
                    0a:b1:79:42:0b:d1:44:38:b5:42:bb:43:34:88:f0:
                    fd:66:3a:ee:22:44:74:44:8c:f3:f1:ab:f9:af:86:
                    85:6a:ba:9e:43:41:4b:f8:1d:d1:4d:05:60:a1:de:
                    7b:0e:06:7b:41:b2:81:3e:bc:0d:9b:11:b6:bb:c4:
                    ed:d0:cd:cb:15:40:26:ef:46:37:b9:6f:94:97:f9:
                    23:08:7b:40:d8:ab:1d:3c:27:1d:65:4b:ea:4b:79:
                    b7:30:f6:31:d0:ee:bb:3f:24:f1:58:c8:a1:fd:98:
                    25:c3:74:1b:30:c1:dd:2c:7d:1d:5d:84:46:81:0d:
                    95:47:a8:a2:18:c4:4d:44:f3:5c:b8:b0:35:3f:b8:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:E4:6E:7F:99:88:1E:24:0E:4E:98:54:92:C5:BB:7E:C3:06:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a388489-6dcb-33d9-b43e-d7a33b5da222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:07:89:5a:e4:99:b3:7e:0a:18:00:f2:f6:23:44:35:ed:
         3a:04:c3:50:32:f6:60:75:05:f1:f8:da:3b:63:e6:80:f3:86:
         1d:9b:da:6b:f7:31:50:44:d5:08:06:8e:6a:45:a7:2b:0f:cd:
         89:ab:44:7e:5c:8b:57:18:b3:4c:f1:ad:d5:9e:7a:c2:82:55:
         33:cc:ce:7a:d1:6c:f1:eb:62:ab:0b:33:44:39:b2:13:b1:0b:
         ab:e8:36:69:00:e3:22:6e:8b:51:df:7d:24:de:a7:3a:61:c0:
         fc:80:5f:13:1f:3c:92:d9:db:b9:6d:fe:37:5c:74:bb:44:39:
         67:4b:ba:be:f5:da:df:14:c7:b0:bd:85:c8:0e:2b:84:af:57:
         fa:f3:20:ea:f8:49:28:b4:34:19:d9:25:89:04:43:05:71:c3:
         df:37:4f:0c:1f:db:d0:e2:73:46:e5:ec:90:ed:8a:eb:a1:f2:
         37:4c:06:94:d1:53:92:2c:bd:53:7a:88:53:1d:1d:90:fb:77:
         c4:e1:0a:6b:b7:8a:10:81:e2:01:b2:9f:93:a5:3b:d5:29:40:
         3e:8c:34:8c:5e:a4:13:fc:b5:74:72:35:a3:98:9f:8e:8c:ae:
         20:98:b1:56:bf:45:fc:86:e3:c6:08:69:3c:1d:3e:f7:a0:37:
         25:a5:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:55:30 2025 by rpki-client