Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff5151b3-4bad-36d7-b518-6f389b3a2c25.roa
File:                     ff5151b3-4bad-36d7-b518-6f389b3a2c25.roa (raw, json)
Hash identifier:          uS1bh4L9YXKcMPO1j5u9kF4MyDIYgQT2xODH1MKsTIQ=
Subject key identifier:   8C:79:DC:6F:F7:F7:60:AC:0B:91:6C:62:6B:92:59:D7:CD:5E:D5:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2D256E65D8C35700E000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff5151b3-4bad-36d7-b518-6f389b3a2c25.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.249.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:2d:25:6e:65:d8:c3:57:00:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=abf54469-9214-4d2a-a231-926e5f63e47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:68:9b:cd:9e:17:f1:ee:bc:b2:41:a5:e1:
                    c1:46:2d:df:42:59:8d:b6:b9:ac:95:61:cc:52:59:
                    a7:c4:33:3a:c7:e1:74:f7:f9:73:01:b7:47:36:49:
                    4b:ba:50:72:00:9e:b2:02:f0:bd:fe:80:28:2d:50:
                    29:42:72:bc:16:3b:2b:e8:6a:ce:f8:c0:97:bb:af:
                    62:17:b6:06:d2:42:4c:1f:ac:d1:dc:5f:94:80:c1:
                    22:4b:e6:b6:b4:8b:e2:c6:eb:87:67:f5:da:e0:e9:
                    74:50:b7:0b:ca:29:14:06:6e:36:e2:27:74:6e:f3:
                    f1:6b:94:ae:e0:8a:cf:10:a5:39:f7:7d:c2:48:66:
                    ab:f0:ea:3c:c7:96:7e:af:95:39:77:85:31:6a:3d:
                    0a:f6:26:a5:3b:af:8b:8b:30:f1:47:b2:cb:93:01:
                    3d:77:8e:9f:ad:cd:f9:20:d5:8f:15:46:82:23:8f:
                    18:88:4c:bd:3c:35:f4:88:45:17:4a:71:0c:a1:6d:
                    f8:b3:77:e3:6f:8a:05:fd:99:7e:af:e0:8c:77:48:
                    98:ec:5b:28:61:7c:b5:d7:e2:af:53:1b:32:4f:30:
                    e0:f7:04:d0:19:57:ce:0c:34:77:9b:0e:5f:ae:0d:
                    da:fb:bf:5f:6c:fc:67:6b:69:d9:90:d9:f3:e6:a4:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:79:DC:6F:F7:F7:60:AC:0B:91:6C:62:6B:92:59:D7:CD:5E:D5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff5151b3-4bad-36d7-b518-6f389b3a2c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.249.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:f3:e4:3e:ee:c8:27:36:bc:ee:91:52:3d:18:f4:9c:d1:
         95:f2:33:62:cc:c0:f2:5d:54:ab:6d:10:b7:ea:93:dd:c4:2a:
         1d:1a:2c:03:95:3e:65:5d:e4:c3:2e:6c:b0:7f:0d:e4:1c:9c:
         ff:a2:80:9c:d2:ff:eb:4f:d6:df:88:0f:fb:bd:d2:64:b5:13:
         75:64:16:38:e3:43:ec:68:e5:85:92:f0:1c:61:93:6e:96:d5:
         9c:1d:ff:59:e0:3d:fe:f1:ec:7a:44:7b:89:a7:09:a3:4a:c7:
         2a:bb:49:55:5a:66:bb:80:f3:4e:6f:2e:cd:46:24:fd:97:b5:
         b3:41:11:2b:6c:98:fc:4a:2e:43:d4:3d:ba:36:f5:58:17:a8:
         e0:18:a7:53:29:97:0d:0f:09:f4:c2:f0:cf:6c:12:a7:d0:8e:
         d6:be:52:24:2c:3c:55:ee:c1:c1:46:0f:61:7e:02:53:76:b3:
         12:fc:5f:ea:91:9e:fe:d4:b9:ff:9f:b7:36:c5:65:06:5c:93:
         58:39:0f:e5:92:5e:76:17:fd:e4:40:08:ae:10:4a:cc:d1:f6:
         6d:14:15:74:10:f5:74:01:f9:cc:1d:33:f5:a6:6e:ab:f6:03:
         0c:8a:f2:18:62:b9:35:36:69:c0:4d:fc:77:3e:18:91:d2:e1:
         5b:7a:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:54:16 2025 by rpki-client