Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/663a96aa-b1fd-3d6d-83a9-6c96c7003489.roa
File:                     663a96aa-b1fd-3d6d-83a9-6c96c7003489.roa (raw, json)
Hash identifier:          iawFaUoqqBtTWHd7T3yFX6KBXpPfkoQoYKabwKfp2bI=
Subject key identifier:   BA:E0:0F:31:83:52:41:1A:ED:7B:CA:F3:4C:7A:DC:E9:EA:F5:07:35
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E08097B6104686A52B440
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/663a96aa-b1fd-3d6d-83a9-6c96c7003489.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        75.138.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:08:09:7b:61:04:68:6a:52:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=170554d7-cbe5-4ef0-8c61-f5cd399d832a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:7f:62:25:12:07:76:74:99:a0:61:2f:40:
                    ae:c4:90:46:8a:39:8c:94:85:50:8f:3b:e0:57:09:
                    ea:6a:74:0e:bb:9f:a4:18:de:23:3d:97:93:f5:20:
                    c2:71:0c:ab:61:e8:29:71:c7:20:ca:c4:e7:4e:d5:
                    2a:26:26:5d:fb:fb:2f:df:6e:a4:84:14:d7:5b:58:
                    00:b6:67:8e:3d:54:e9:b6:06:ba:a8:c3:0c:17:35:
                    3f:b5:33:c0:12:54:de:a4:91:de:3c:91:f1:57:ad:
                    ec:55:bf:44:91:2b:21:04:c2:33:b1:72:c8:b9:72:
                    81:40:22:a2:1d:b6:d3:3a:db:51:38:fc:2e:1c:dc:
                    02:5b:70:58:e2:f8:27:ba:5f:69:a1:0d:de:18:92:
                    a2:11:af:a1:6c:06:f1:8d:c6:ad:87:36:e2:42:04:
                    bf:52:1b:f9:86:75:74:83:ae:8a:14:30:f5:b3:7e:
                    d7:9b:98:49:c4:dd:88:38:20:83:80:09:20:c5:ad:
                    43:3b:cb:23:93:34:c3:3d:d3:da:4d:b8:7e:c9:d2:
                    f8:c9:51:da:41:e1:d0:9b:4c:32:6d:82:8a:b3:8f:
                    f5:57:d5:cc:9e:b8:ec:9e:10:3e:17:77:6f:ba:98:
                    2a:eb:14:7b:0f:f1:7c:ec:19:04:eb:6b:eb:c2:fb:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:0F:31:83:52:41:1A:ED:7B:CA:F3:4C:7A:DC:E9:EA:F5:07:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/663a96aa-b1fd-3d6d-83a9-6c96c7003489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.138.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:23:6b:71:c8:b6:e3:46:e9:8e:a1:96:87:d2:9a:ba:e3:
         11:05:00:46:11:bb:a6:25:c8:5d:ae:00:e0:22:2d:5f:0a:9b:
         e8:97:ff:f5:bf:86:54:f2:ad:c9:e1:5a:b0:3e:a8:8f:90:1e:
         1e:eb:78:c5:80:87:42:31:de:de:14:43:fe:3f:f5:0b:a3:ff:
         61:1c:4f:03:d1:f2:ac:7d:74:24:6a:eb:14:f8:ba:46:80:ae:
         57:65:b0:a5:4b:39:73:f3:dd:14:09:67:8a:b1:c5:1d:18:65:
         5b:0d:9f:03:20:c8:94:27:ae:72:09:e7:fe:c0:49:ed:42:5b:
         80:41:85:8b:63:91:66:6e:10:50:ff:49:0a:4e:eb:c3:b5:73:
         75:1a:84:a9:ea:04:5c:5f:45:53:60:d3:11:b8:74:41:b8:c5:
         ec:d2:7d:45:48:89:16:c5:f9:4e:27:75:8e:cc:8b:df:5f:30:
         4f:19:36:83:e6:32:2f:e5:94:ad:29:ca:e0:3b:5b:6a:c8:1d:
         f0:7d:3d:c2:b0:57:4b:37:32:3f:bf:80:67:f8:fe:32:ae:73:
         95:b8:db:7d:ea:af:63:2c:6e:7f:ad:80:e1:5e:8e:e4:bb:e9:
         f9:65:20:dd:85:79:b7:dd:8a:24:76:e5:39:06:1c:ad:28:40:
         e6:b8:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:02 2025 by rpki-client