Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae55cbfc-c875-3f83-8440-4f2aca8a3b9f.roa
File:                     ae55cbfc-c875-3f83-8440-4f2aca8a3b9f.roa (raw, json)
Hash identifier:          R9uaf5ECrfNBr37vGl2e0bPak2Rp9xhWcY74x+hg5DU=
Subject key identifier:   AE:35:3B:3E:3D:1E:EF:D1:4B:33:30:1B:07:DE:18:B7:BA:AF:0A:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB103D3751E6E712060100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae55cbfc-c875-3f83-8440-4f2aca8a3b9f.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.226.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:10:3d:37:51:e6:e7:12:06:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=639c41bc-6c7c-41c9-8e2a-795ec0d7146a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:8a:a5:cc:23:fc:4f:c7:eb:81:8d:3e:34:
                    db:4e:ef:5f:83:e7:06:b9:7c:11:bc:e8:f0:a4:2b:
                    e7:62:81:c7:20:55:f6:74:1a:c1:ec:a9:22:25:40:
                    62:27:cf:f0:60:80:f7:ce:6b:ef:88:f8:c3:2a:02:
                    5d:d4:38:9d:85:6b:4f:1b:f6:af:12:23:da:1d:e5:
                    0e:b9:9a:ce:91:11:e0:b7:40:41:e6:df:4e:69:e4:
                    4a:a6:54:87:af:1c:a1:4b:43:f9:28:f0:a6:81:f0:
                    0c:e3:a3:6e:44:18:63:73:3f:97:4e:2c:24:61:b5:
                    5b:57:fa:93:14:40:97:66:69:e6:62:39:28:a0:db:
                    b7:46:5e:cc:df:e0:25:fb:2b:f9:dc:19:8e:96:34:
                    27:49:4f:40:d2:2a:e9:a2:76:2a:3e:b0:5d:9c:79:
                    66:08:28:e1:c7:bd:f8:64:0f:84:35:c3:28:66:5c:
                    e4:80:13:fb:85:c2:79:c7:18:b5:0f:5d:e8:94:d5:
                    1f:7b:ba:87:5d:a2:e0:56:f9:06:0d:d8:87:c8:94:
                    63:5d:36:b5:aa:e2:4e:bc:c9:22:7f:fd:3a:d8:0e:
                    07:8d:0c:d8:4f:30:4a:6b:ec:3a:82:16:47:3e:26:
                    8d:9a:8a:f2:30:13:33:f9:77:47:bd:54:ca:2e:54:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:35:3B:3E:3D:1E:EF:D1:4B:33:30:1B:07:DE:18:B7:BA:AF:0A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae55cbfc-c875-3f83-8440-4f2aca8a3b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.226.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:ee:96:93:87:ab:49:dc:e0:b4:8d:76:17:50:54:f1:75:
         10:46:c2:33:d3:87:29:12:f3:19:12:69:3b:66:7e:f1:e2:a5:
         6d:47:ea:28:cc:6b:c8:e9:e6:fe:4f:a7:9a:1f:0b:dc:47:40:
         2b:6b:48:06:0c:65:1a:83:33:f8:46:fe:0c:0c:08:f0:32:97:
         3d:bb:d4:60:6b:ec:08:5f:1b:07:41:99:96:fa:e0:16:e5:57:
         bb:38:35:1a:78:80:00:1e:fa:7c:a3:6d:1f:1c:f2:a3:e5:af:
         9b:b0:16:b9:d4:2e:d0:e2:66:32:e8:fd:12:ba:1c:90:35:af:
         f1:9a:d4:ce:4c:05:45:73:49:d8:89:9b:38:f1:43:3d:a7:17:
         de:19:8a:cf:3d:1c:95:7a:6b:72:11:63:68:e3:41:75:ca:b7:
         f8:14:33:53:4a:df:27:0c:ce:71:48:50:b6:3b:68:f2:60:a5:
         24:df:ff:99:f5:b9:e0:5a:5f:4d:e2:3d:c2:05:91:8e:04:3a:
         8f:49:af:32:a3:0b:df:eb:97:02:bf:b6:f4:cb:e7:b8:61:8b:
         b6:2f:8e:49:c9:d0:7b:4d:80:e2:c6:75:a8:03:d3:8c:93:72:
         c6:5b:7b:29:e7:95:62:da:a3:e5:6a:8e:74:e0:8b:f0:53:74:
         44:30:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:50:34 2025 by rpki-client