Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efeb088b-f16e-3d81-be3c-37ec2e0c86d5.roa
File:                     efeb088b-f16e-3d81-be3c-37ec2e0c86d5.roa (raw, json)
Hash identifier:          P7LX/CgKmwScFrnuXyVPH9NDC1QzRUZkA7w2j9aRqj8=
Subject key identifier:   15:AA:AE:CC:E9:D4:31:AE:99:60:C1:D6:91:BA:42:C0:79:B2:23:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2B2A9332B664B4041D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efeb088b-f16e-3d81-be3c-37ec2e0c86d5.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.245.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:2b:2a:93:32:b6:64:b4:04:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=73d81a76-efde-4701-82d6-91b57048aab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:89:0e:d6:ee:ee:a2:07:18:f3:b8:08:42:
                    0b:0f:da:15:b5:6a:89:94:76:98:6f:26:ec:13:60:
                    c8:22:42:5f:a2:42:1c:b8:96:2c:41:97:6e:b6:db:
                    a8:2a:50:b0:bc:e6:07:6e:82:4c:3b:11:5a:5c:8f:
                    16:e3:b3:a7:da:66:2a:c4:25:0d:60:b1:89:a5:cf:
                    56:6e:9e:b2:e7:11:5a:d6:75:a1:30:24:ee:a6:dd:
                    9e:89:3a:ea:f1:a5:5b:03:d2:16:b8:39:81:fd:bf:
                    de:1c:d1:ad:8a:1e:40:ca:c5:e6:f3:06:fc:aa:1d:
                    74:8a:5f:4a:a4:01:8a:aa:52:8e:ba:f3:f4:a5:81:
                    ca:f1:f2:b4:94:e0:08:d8:bd:36:85:24:e2:4e:d8:
                    3a:a4:26:40:47:6a:18:56:e8:e9:46:da:cf:7c:b9:
                    07:b2:8d:56:43:95:e0:08:35:be:30:c7:5e:34:4f:
                    72:be:67:8d:4e:db:ce:4d:61:fc:d3:80:75:97:f4:
                    5d:18:14:0c:d9:82:6f:59:c9:64:03:d7:fe:86:d6:
                    74:97:c9:66:83:49:04:1d:3a:1e:14:61:e1:7e:f2:
                    65:a9:fd:89:9e:15:52:83:c1:47:82:54:92:1c:85:
                    d9:1b:00:41:a3:e3:44:42:d3:bc:79:62:9b:28:3c:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:AE:CC:E9:D4:31:AE:99:60:C1:D6:91:BA:42:C0:79:B2:23:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efeb088b-f16e-3d81-be3c-37ec2e0c86d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.245.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:29:6b:1d:df:61:99:33:7b:5a:f6:82:b8:11:28:ac:bb:4b:
         88:0e:28:b7:fe:ae:ea:41:60:20:9b:8c:4e:77:45:0c:e5:c0:
         0e:0f:01:d1:39:95:b7:40:7e:84:1e:eb:2e:5a:fd:d8:1d:14:
         2f:09:b6:b0:47:62:90:11:76:33:a8:87:c7:4c:f6:96:48:96:
         1c:bc:77:33:e4:12:79:13:86:aa:64:3c:8f:8e:e2:ef:7e:c3:
         ca:88:c0:81:99:50:08:fe:69:b0:03:77:38:04:d0:9f:b5:fe:
         17:db:54:9e:01:cd:a7:02:4f:80:3b:3c:5f:fd:bb:26:b9:82:
         76:8b:e5:ec:76:17:fe:d6:33:c5:98:b2:ee:70:8a:28:1f:7f:
         ab:83:6c:35:67:46:43:3c:da:f0:6b:5f:be:2f:27:e0:45:da:
         93:22:64:32:4f:20:0a:73:2b:8c:9a:08:b5:c8:71:ec:ff:ac:
         b6:4a:32:2d:b1:e8:b1:e2:92:81:15:0f:0a:a7:48:3c:1d:d8:
         1d:df:07:50:58:a0:7c:44:8f:1a:d5:49:82:28:44:88:7a:17:
         a5:fb:b3:e7:9a:de:e4:1c:e2:60:6b:08:a1:2e:95:df:67:fd:
         c7:91:c0:f9:68:95:d2:49:74:b2:a6:36:64:23:fe:c1:8b:50:
         10:c8:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:35:23 2025 by rpki-client