Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e68fe358-3e3d-3ee3-bb0b-8c5c374eca1d.roa
File:                     e68fe358-3e3d-3ee3-bb0b-8c5c374eca1d.roa (raw, json)
Hash identifier:          De6U+MDfqQZtWN21h3isml17Ma7J/zXIpsj5S5xO2tg=
Subject key identifier:   C2:AF:14:7A:CB:A5:FA:CB:03:C2:93:6E:89:56:60:C6:8C:B5:EF:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2DA109A197E9A0409B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e68fe358-3e3d-3ee3-bb0b-8c5c374eca1d.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:2d:a1:09:a1:97:e9:a0:40:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=fac6e36f-eea7-4c3f-b4c7-3176b43e3863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:1e:83:b3:aa:f3:dc:c5:49:bd:48:25:e5:
                    52:75:ac:8e:98:e0:3a:96:70:f0:cc:5c:b2:bc:93:
                    5d:a6:0d:7f:27:de:b1:6a:a1:e2:04:a4:bb:18:14:
                    a4:83:8f:16:b5:ac:77:8d:fa:29:e4:26:7c:1a:29:
                    63:59:08:38:5d:7a:fd:22:34:92:fc:12:df:2a:29:
                    9e:e0:13:dc:43:99:32:ee:a7:69:c9:2e:e2:e1:48:
                    7f:d4:24:72:c1:ed:71:f1:6d:ac:fe:bd:ec:47:ac:
                    92:0d:52:be:2f:6b:0d:7d:f8:d3:38:80:ce:4f:e3:
                    ae:7e:79:cd:cc:4a:e6:d7:03:69:75:7f:84:b3:48:
                    b7:22:a3:88:d3:9f:18:c1:93:47:87:67:2c:d2:c6:
                    3c:25:27:6d:f4:81:63:ee:44:05:21:2a:7c:ab:ce:
                    e2:50:5e:6a:02:46:86:17:74:64:6f:b0:5d:d1:e0:
                    c8:30:7a:99:d5:57:79:90:27:dd:dc:19:77:11:63:
                    0c:e9:39:65:08:23:22:b0:58:3f:29:ee:4a:00:83:
                    e3:5a:ad:0e:56:04:b7:e2:99:b0:2e:b7:e6:e2:b6:
                    f0:14:cf:3f:aa:a6:8b:b5:b7:30:0e:c7:0c:b0:28:
                    76:eb:f5:47:17:df:07:f1:e7:9e:93:0f:a2:b8:0a:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AF:14:7A:CB:A5:FA:CB:03:C2:93:6E:89:56:60:C6:8C:B5:EF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e68fe358-3e3d-3ee3-bb0b-8c5c374eca1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:34:5e:6f:a3:1c:7b:49:a3:d6:dc:36:d0:b3:1c:94:e3:cc:
         e4:e2:3a:cf:e4:01:fa:58:ca:4a:b5:c9:76:ad:a1:9a:45:7c:
         92:b0:53:50:6a:a0:a4:61:a7:d2:2e:d1:0a:5d:4e:41:91:d1:
         89:8a:b8:29:ca:d6:3f:98:e9:88:c7:a8:83:9e:81:16:4e:3c:
         89:b6:9c:b6:37:4e:97:7d:6c:1a:96:b2:a5:e2:6e:3c:dc:ac:
         61:cd:09:32:0e:5c:75:2e:c9:ab:3c:c0:a0:21:c2:12:7f:e5:
         dd:d8:34:6a:d7:b5:77:49:19:1e:4d:00:f0:98:60:f2:b1:d5:
         2e:70:1b:b1:55:ce:94:8d:a2:aa:4d:d3:19:20:b2:07:56:85:
         dd:f5:c4:0b:41:3d:9a:39:c3:62:fa:26:8a:e4:c1:53:f3:27:
         02:ab:ce:23:47:d6:28:42:a9:8d:62:4d:e7:eb:69:cd:9e:a7:
         f1:70:49:5e:c6:60:fb:80:4d:3a:73:23:e4:c2:1b:f6:b9:e9:
         53:81:1d:b5:bd:f1:e1:63:45:eb:52:92:f1:0a:ad:12:b8:de:
         8c:76:f9:ad:0f:70:9d:c7:26:f3:f8:03:ca:d2:9d:9f:cf:82:
         66:7f:ec:6e:de:54:64:ce:a2:c9:9b:f4:40:6c:c4:49:5c:af:
         ab:be:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:08:39 2025 by rpki-client