Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbff6f4b-9f0a-3eff-a772-ace561335c60.roa
File:                     dbff6f4b-9f0a-3eff-a772-ace561335c60.roa (raw, json)
Hash identifier:          3k+fT7mYHsZzS/UAh3p61wL76v3kJ8vGqRxf4kcgsW4=
Subject key identifier:   E9:8A:8A:EA:C2:31:B9:D9:B2:F3:E0:03:6E:94:B1:44:54:87:B4:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2003DC241C3369BD4FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbff6f4b-9f0a-3eff-a772-ace561335c60.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.201.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:20:03:dc:24:1c:33:69:bd:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=bd912a09-46a1-4b18-832c-1ea053c9f599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:8e:ef:b8:f4:1c:62:02:dd:d5:aa:8a:95:
                    83:c4:9d:10:32:34:fa:7a:87:d8:44:97:46:2c:d7:
                    cd:ef:be:4d:42:22:4e:9d:89:7f:10:0d:40:c1:31:
                    6a:c9:44:cb:80:a3:2e:3c:f2:e0:a6:d2:02:a9:50:
                    b6:0c:3a:3e:ed:55:d2:d0:22:cc:fb:a0:7d:67:ca:
                    b4:52:12:b8:cd:f2:91:b9:75:90:d1:be:45:72:fa:
                    61:18:76:7e:72:9d:40:46:12:f2:30:59:76:69:fe:
                    7d:d2:e3:f1:9e:7e:cf:b9:6b:da:b8:3f:03:a4:06:
                    f1:75:01:d5:ae:e8:b9:9d:8f:0d:2d:ed:77:26:a2:
                    85:47:90:ec:49:4a:e6:2f:41:78:32:11:95:59:81:
                    0b:77:f2:98:36:0b:a9:3a:94:d1:bb:c7:25:0a:fe:
                    bb:93:35:bc:ac:ad:d4:b1:a9:a9:fe:f0:bb:93:af:
                    2d:12:6b:4c:69:22:ec:cb:ad:21:34:cd:6c:d5:bd:
                    53:27:ed:e8:7c:82:48:b4:19:99:c6:e5:1c:22:3c:
                    c1:96:1d:43:f4:ff:be:99:54:ce:26:2f:14:ab:dd:
                    45:74:ce:6b:cb:29:be:11:ac:12:f4:c0:72:f1:1f:
                    2d:e6:58:ef:aa:b3:10:84:50:78:54:32:73:d5:42:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8A:8A:EA:C2:31:B9:D9:B2:F3:E0:03:6E:94:B1:44:54:87:B4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbff6f4b-9f0a-3eff-a772-ace561335c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.201.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:bc:f1:8a:82:7c:d4:88:1a:7e:bf:68:5f:59:8e:60:b5:20:
         39:5c:68:1a:73:6b:aa:a3:42:5e:31:93:4c:8f:0c:92:54:94:
         0f:52:71:ae:09:ab:65:15:bb:f8:e7:59:a2:4c:df:41:97:fc:
         83:f0:73:fd:d6:d1:24:b4:cc:b7:bb:32:c3:5e:d7:20:10:22:
         2d:2f:48:95:1f:30:f3:3a:dc:39:86:e5:63:c5:4b:89:96:b1:
         86:2e:77:7f:bb:2b:80:ca:11:95:60:c7:01:e1:d4:37:30:74:
         bd:5b:00:0a:0b:f5:24:ac:4b:47:e4:48:87:1f:71:4d:32:2c:
         ac:79:af:75:dc:4a:51:31:f6:b6:0d:d3:7e:05:0f:a7:ad:22:
         5b:03:6a:d3:67:97:d6:9e:0a:ba:f6:7b:f6:f2:03:99:b3:ff:
         9e:d6:6d:37:6c:e6:19:6c:7f:94:81:da:b2:ed:92:07:71:0a:
         1b:8d:d6:7e:a9:79:03:51:33:13:fd:1e:4e:9b:5d:01:a1:42:
         6c:6f:41:7e:80:3e:f4:b6:04:4e:45:8b:d9:72:f7:ab:73:dc:
         c8:a5:93:a6:88:61:05:a1:9d:b6:af:06:2e:6a:22:8c:6d:7e:
         90:06:f4:8c:c6:ad:8c:30:7e:6c:32:26:ab:e7:d2:1a:1b:17:
         06:b3:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:07:29 2025 by rpki-client