Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91a1ef4e-a437-30fe-80f1-7bb1fce4aec4.roa
File:                     91a1ef4e-a437-30fe-80f1-7bb1fce4aec4.roa (raw, json)
Hash identifier:          fxtz6FOlWZQuWnxWsU3QzROeGypjJCeDRXfmH7cPyiE=
Subject key identifier:   03:9B:B0:53:4B:B6:C1:F5:FF:B9:E0:A4:7E:F6:1D:A8:D1:9F:38:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB20BA8C5C6FEF67D18B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91a1ef4e-a437-30fe-80f1-7bb1fce4aec4.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.204.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:20:ba:8c:5c:6f:ef:67:d1:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=79921988-ea34-49c7-93d9-98e2015fc572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:b9:51:96:d1:45:46:97:8c:f9:0b:30:12:
                    7c:f5:a4:4d:aa:92:a4:81:6e:86:89:c7:24:6c:9e:
                    3f:ac:b7:cc:d6:a6:7e:cc:a5:d3:3a:a0:70:3c:01:
                    3f:f4:c4:40:26:1b:6a:72:8e:11:b7:2a:b8:2b:08:
                    01:8b:83:8e:78:18:50:3b:a8:dd:f5:8b:4d:47:40:
                    69:6c:50:5e:93:61:9c:96:7d:c8:04:d8:fb:c5:05:
                    22:e5:96:6d:cb:4d:e6:1b:0c:23:51:23:48:19:be:
                    40:07:7e:d4:6c:d6:24:4b:d7:63:99:f7:97:90:8f:
                    63:98:17:ec:95:f2:7f:92:0a:e7:6b:46:84:13:a0:
                    54:ba:20:71:da:3e:10:ea:f5:64:24:bb:f9:15:0f:
                    e6:95:56:e9:2f:bd:31:e0:08:5d:0b:0f:f8:6d:cd:
                    c1:57:29:2b:a0:3a:90:83:28:d5:b5:59:a1:53:90:
                    ba:d9:87:1d:5e:00:49:e3:8a:69:8c:dd:a3:7e:89:
                    fa:63:7c:2d:4a:94:1b:ce:c6:a0:e7:3d:cd:5b:20:
                    c7:66:df:93:81:ee:b5:38:ac:3e:a1:fd:86:dd:13:
                    25:b7:c3:b2:8b:16:46:b5:75:16:5e:b5:fa:26:77:
                    9a:1e:37:9f:3c:bf:a3:6e:45:10:b5:8a:e2:57:ca:
                    86:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:B0:53:4B:B6:C1:F5:FF:B9:E0:A4:7E:F6:1D:A8:D1:9F:38:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91a1ef4e-a437-30fe-80f1-7bb1fce4aec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.204.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:2a:b9:37:c1:bb:73:89:34:ec:3b:22:1d:e0:a5:d2:a7:e1:
         73:a5:29:d9:a6:98:e7:6a:cb:e9:6a:89:43:5f:a9:0f:b8:cb:
         bd:45:eb:55:bb:21:07:ce:fd:06:f4:aa:88:97:40:2c:20:b0:
         0d:41:ef:e7:cf:bd:56:c9:fe:ec:93:53:a2:1f:4d:69:50:c3:
         d1:67:b0:ad:8f:cf:21:2a:5b:16:22:4c:5a:ff:07:f8:2b:11:
         d0:82:ca:d4:27:e0:66:80:8f:a4:0a:10:68:69:ae:6d:3e:c8:
         1b:4f:45:b5:55:8b:ad:58:6b:cf:27:4e:f1:69:cd:8e:df:0f:
         08:a2:78:07:80:aa:1b:ef:47:92:1f:fb:bb:d5:a9:2d:c9:81:
         65:04:21:df:3e:11:34:94:b7:ac:66:0e:6e:7a:41:f2:56:55:
         af:53:55:9f:97:2f:1e:1e:37:48:e5:ea:f1:63:83:6f:bf:bb:
         ef:56:ee:d7:ac:a8:cf:3d:0d:0f:db:91:c2:88:6a:27:0f:89:
         35:a7:ac:3b:27:b3:4d:9f:8f:93:27:cb:0d:8e:a9:4f:b6:c0:
         58:b3:8a:05:b2:78:e2:d5:75:a9:f6:27:97:93:b9:f5:c2:63:
         1c:57:ba:fd:a5:0e:2a:45:f0:51:bc:2e:8a:f2:f5:bb:ee:f6:
         c8:b9:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:44:05 2025 by rpki-client