Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b6bad4-1eee-35de-bce2-27266ba87f20.roa
File:                     95b6bad4-1eee-35de-bce2-27266ba87f20.roa (raw, json)
Hash identifier:          myv0eDFNhySUzcnX+M84BuIuiTwAuiWJqeqwDmQGZY4=
Subject key identifier:   10:BF:3F:02:59:7F:6C:FD:AA:38:FF:38:85:BC:96:82:6C:5B:D4:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB29F1C765B3F17084FEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b6bad4-1eee-35de-bce2-27266ba87f20.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.241.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:29:f1:c7:65:b3:f1:70:84:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=f0729a84-c15a-44c0-b57c-7f4957fe7b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:aa:ae:43:a6:78:38:e4:cf:0d:06:8e:e0:
                    fc:ed:36:f4:5b:c8:ae:96:81:73:50:5a:ba:1b:92:
                    f0:9e:87:91:bd:7b:93:b8:88:3f:90:f6:cb:a4:d9:
                    6c:bc:3f:ab:54:ec:42:79:0c:79:64:5c:46:4f:e2:
                    a2:75:88:e6:b4:f1:81:57:ff:af:b6:66:48:69:c3:
                    32:8c:0b:d4:a8:6d:f2:9c:e2:30:a6:aa:4c:b9:b1:
                    16:fa:c9:d6:13:f4:ad:1f:9f:14:4e:20:57:04:9b:
                    5f:6e:19:2b:dc:55:cf:8a:0d:07:b5:99:c4:0e:51:
                    8f:e0:d1:69:a5:70:52:76:e1:a8:09:dd:22:0c:b1:
                    82:90:41:74:c1:57:fa:39:73:c1:92:70:68:b4:0e:
                    38:eb:46:fe:cf:ce:75:14:c2:da:0d:3b:63:61:a6:
                    91:04:98:6c:95:5d:b7:24:60:9c:cd:6e:60:6f:3a:
                    0b:a6:e7:41:4f:44:1c:00:43:10:91:a5:55:62:42:
                    d2:79:04:e0:04:cb:18:1c:f8:de:53:85:ff:40:34:
                    cc:8f:36:1a:b7:d7:ff:3c:11:ed:c3:6e:0c:9c:16:
                    d3:b2:20:77:ad:7f:15:c9:9b:64:51:9b:be:0b:0d:
                    36:a3:1a:0f:48:92:ab:fc:77:3f:4a:c5:58:36:c6:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BF:3F:02:59:7F:6C:FD:AA:38:FF:38:85:BC:96:82:6C:5B:D4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b6bad4-1eee-35de-bce2-27266ba87f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:49:c4:a6:1c:19:63:72:66:4e:12:b7:45:9c:9c:9b:9c:24:
         23:94:7d:02:b9:ce:ec:b0:10:cd:14:6e:ec:dd:6f:b4:a9:84:
         92:06:72:71:d4:cf:69:8c:f0:62:ce:f1:53:5a:06:27:82:02:
         99:a5:31:cc:c4:45:4c:69:86:ad:f4:bf:bf:d9:8a:c8:e3:39:
         97:8b:d9:47:7c:d2:4f:50:97:11:a6:27:1c:14:11:50:36:d7:
         95:67:22:04:ac:d7:24:dc:c1:25:c5:8f:bd:32:a6:53:d0:88:
         42:5f:99:0f:27:d1:88:8f:5b:af:76:cc:de:ac:3c:52:41:48:
         17:f4:24:93:2a:60:2c:18:6c:f4:fc:a1:6d:e3:77:83:f1:1f:
         0f:9b:b9:db:a1:20:90:5d:d7:46:8c:4d:8b:19:79:54:2b:65:
         37:7f:29:f3:03:0b:34:e6:0e:06:79:34:ae:63:50:3e:62:a1:
         2e:4a:75:13:8c:d3:47:b6:a6:f9:5b:9a:51:0d:0a:44:b5:de:
         bb:b8:de:24:45:3e:40:e5:f1:21:c2:af:e2:74:97:e9:41:0d:
         f7:b8:6e:e3:7d:9d:7d:d7:7d:84:90:ba:1a:63:0e:8f:ae:f3:
         65:62:1e:56:63:57:e2:11:5f:24:d5:93:40:1f:8d:13:27:a2:
         99:99:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:45:17 2025 by rpki-client