Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3087cda9-63e5-3aca-8a6d-7c08a3769eff.roa
File:                     3087cda9-63e5-3aca-8a6d-7c08a3769eff.roa (raw, json)
Hash identifier:          QW00NPZOltK0KTlrDhetzO9WEapwk5BfheKIPvw2Kcc=
Subject key identifier:   F4:59:C3:A5:81:AC:3D:03:8D:8A:21:A2:86:7E:FB:68:8C:5A:43:2D
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A84701382FA61027829106E40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3087cda9-63e5-3aca-8a6d-7c08a3769eff.roa
Signing time:             Mon 14 Jul 2025 16:13:17 +0000
ROA not before:           Mon 14 Jul 2025 16:13:17 +0000
ROA not after:            Sun 12 Oct 2025 16:13:17 +0000
asID:                     3477
IP address blocks:        137.75.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:70:13:82:fa:61:02:78:29:10:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 14 16:13:17 2025 GMT
            Not After : Oct 12 16:13:17 2025 GMT
        Subject: CN=3e35653c-3c05-4641-a509-8e6ed2152da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:93:88:3d:a5:70:68:3b:40:9a:4f:16:d3:
                    21:f7:5b:70:5e:59:b3:ca:1f:e3:e2:ab:cb:bc:60:
                    21:3a:83:ef:29:98:6f:b3:5b:e9:2d:63:9d:f3:c6:
                    d6:6e:be:2d:38:4a:05:22:13:2e:8f:ec:ed:0d:20:
                    14:81:14:1f:52:ee:19:57:38:fe:fe:00:01:a0:96:
                    0d:d6:ed:62:f6:b7:79:8d:45:fc:d5:4a:91:0f:07:
                    27:92:b9:1d:82:4f:04:e5:69:c0:d9:a3:c6:a1:68:
                    48:26:b8:7b:34:1b:96:22:03:5f:f5:d6:6a:98:7d:
                    63:a5:41:33:e5:1d:dd:5d:05:5b:c0:85:f0:0a:2b:
                    65:47:99:fc:79:2c:54:c6:50:77:51:97:a4:1b:22:
                    85:ba:a7:54:9c:53:f3:fb:de:8c:7f:d2:6a:37:73:
                    9a:8c:bf:7f:6d:51:2b:52:7a:e6:a8:25:df:60:7d:
                    57:86:86:cc:e6:fb:e3:9c:d0:7d:71:0a:66:0b:35:
                    93:a8:d6:73:09:ef:a6:e0:18:9f:d2:c2:ae:5d:cd:
                    ce:54:34:c4:e3:58:93:04:a0:69:f8:04:22:c8:9e:
                    9e:b3:a4:9d:a8:a9:4e:79:0d:6c:0a:c3:9f:3a:42:
                    f8:46:52:a1:08:c4:75:8f:29:4d:e3:5e:59:93:6a:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:C3:A5:81:AC:3D:03:8D:8A:21:A2:86:7E:FB:68:8C:5A:43:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3087cda9-63e5-3aca-8a6d-7c08a3769eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:c9:37:80:e9:ef:36:92:5b:b1:00:9a:3d:15:35:cc:e4:
         cd:90:0f:54:57:a7:12:ba:f9:bf:19:ec:3d:eb:83:fa:ce:d9:
         98:5c:bb:0f:6c:d7:19:68:31:81:51:02:63:67:60:a3:b5:18:
         69:da:af:64:cb:4c:39:b2:86:f4:5c:23:d6:23:ed:9c:30:e9:
         26:7f:a7:0b:66:4f:b2:62:c8:30:3a:bd:f1:96:ba:f4:a6:62:
         f7:fe:c2:61:8b:fe:fc:c7:d8:6e:6b:de:31:6e:65:92:7b:4f:
         fd:eb:1e:2f:55:ce:e5:eb:57:a0:f8:20:e1:32:fb:91:8c:2a:
         b7:97:50:25:53:36:d1:19:14:26:bf:03:01:9c:64:31:bc:bd:
         ef:6d:9e:4c:af:6c:1a:78:fd:b6:de:b4:8d:71:f7:04:fb:ed:
         95:bf:cc:35:4a:e9:ed:95:25:7c:19:76:11:02:09:4b:0c:b6:
         c0:40:3e:49:de:50:f0:45:5a:47:8b:11:20:26:89:14:cb:cc:
         7b:2c:07:cb:71:9c:f1:38:2c:5e:32:16:dc:0f:cb:fe:de:6c:
         d4:0e:5f:c2:25:c9:10:e9:d7:20:6e:e9:0c:ef:d3:a5:98:d4:
         fd:7b:3b:70:e7:8f:61:96:a4:7e:ae:1f:af:ce:b1:86:8d:74:
         d6:04:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:39 2025 by rpki-client