Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f320107-dcb1-36c1-a99e-575d2c6369f2.roa
File:                     2f320107-dcb1-36c1-a99e-575d2c6369f2.roa (raw, json)
Hash identifier:          6ooQw0muMfD4xdlezCQtyn9M6RG/AVcTjqEib+WXt0E=
Subject key identifier:   8E:38:9A:7F:92:3F:53:1D:AA:A0:81:29:3A:66:09:43:7E:77:24:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D5F1001BC034074933A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f320107-dcb1-36c1-a99e-575d2c6369f2.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.128.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:5f:10:01:bc:03:40:74:93:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=62654fc9-88f0-402a-b9e5-850629d2f15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:ac:b8:a4:6b:46:b3:e4:aa:8c:4e:4b:6a:
                    07:c4:02:fc:98:1c:1d:e5:28:0e:12:e5:eb:7b:dc:
                    99:02:2c:70:94:77:20:26:ff:70:a9:bc:7e:bc:47:
                    9c:9a:09:d4:2e:c3:a6:ff:e6:c4:7a:72:c3:57:5a:
                    6c:3b:70:e7:99:f6:8e:c8:84:e8:40:ff:c5:6f:18:
                    1d:ab:57:e4:3d:f6:14:dc:e9:2c:50:a2:e0:3d:12:
                    08:2c:24:24:75:82:de:90:a2:b0:45:33:09:8d:05:
                    62:f8:c2:0d:79:1c:24:89:45:00:30:72:aa:b6:dd:
                    9a:79:e4:dd:8b:80:b9:d3:84:ee:91:41:fe:a2:90:
                    27:7d:9a:1e:0c:8e:47:ce:01:22:95:45:10:be:85:
                    67:98:2b:82:e5:b1:2a:ec:20:35:21:dd:ea:df:36:
                    00:0a:45:45:eb:42:94:46:dd:ee:6d:f4:4a:e4:f7:
                    d0:59:78:cc:9a:76:1d:e3:b4:df:de:9a:e0:9c:a9:
                    76:c1:ae:ce:6c:3f:f9:75:2f:97:d1:12:e5:63:46:
                    0c:c4:35:47:cd:97:cd:22:f4:c1:87:ad:49:0a:4e:
                    6f:da:96:04:7c:f6:4a:0b:da:de:56:2a:45:56:71:
                    e1:42:86:24:e6:0b:8b:d8:63:3f:49:32:54:5a:d4:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:38:9A:7F:92:3F:53:1D:AA:A0:81:29:3A:66:09:43:7E:77:24:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f320107-dcb1-36c1-a99e-575d2c6369f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.128.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:7d:3d:72:ce:12:db:aa:c3:0f:d8:00:c7:42:99:44:c5:21:
         fe:4e:0c:fb:cb:ac:aa:10:f7:a7:38:ec:8e:46:13:5f:95:f1:
         de:10:f4:2d:03:f4:78:93:f2:e6:94:c9:0c:d0:5c:76:19:d2:
         2a:25:0e:78:04:7e:ec:c4:04:96:fb:82:e4:c6:7d:0b:6e:ec:
         e2:60:f4:c2:e3:26:dd:c4:4f:95:b1:1f:99:db:1a:92:73:12:
         d8:ca:21:65:b9:7a:6f:8e:5a:54:36:4f:1e:35:81:e6:75:09:
         14:03:ba:f1:e7:71:34:93:fc:24:19:25:ac:4d:a7:5e:a3:1e:
         b6:e2:6b:cd:8d:13:f6:43:80:58:ea:a5:6f:83:b8:45:c2:43:
         3c:a8:7b:6f:bd:a3:be:7a:f3:5e:69:ca:4c:6f:a2:42:59:dd:
         de:61:a5:f0:84:b3:df:45:96:ab:a6:c0:6e:b2:2e:6b:83:3c:
         8f:b6:d1:1d:90:3c:08:d1:7c:d2:b5:f4:b5:af:99:6d:31:a4:
         57:ad:99:dd:82:0d:ca:71:91:9f:05:84:5d:21:cf:ec:1e:9e:
         a7:07:9d:97:5f:a6:1c:c2:3f:5d:3f:bb:9c:9f:0a:f3:f9:70:
         38:9f:2e:8f:e7:f6:21:33:91:12:e7:7d:a3:c9:b5:21:57:f9:
         45:f5:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:48 2025 by rpki-client