Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa
File:                     34356240-b9ca-32e3-ba11-33750e597e1e.roa (raw, json)
Hash identifier:          Z3kHlE7ysOG+EjorwNHl5bqDQRJYXG8bJpj1taMQhfM=
Subject key identifier:   71:E5:58:9A:AF:EC:F2:61:F6:5E:21:BA:BC:F2:95:BC:A7:7C:B5:16
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A8B0B63B2B1BAA1A9280F5A80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     7764
IP address blocks:        148.129.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:63:b2:b1:ba:a1:a9:28:0f:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=60bf6049-3ab2-4747-ac7d-c10e23059f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:a6:0f:b4:c7:72:b7:d2:be:c1:56:29:07:
                    ac:db:5b:0a:54:82:bf:c4:a0:40:4e:62:51:77:03:
                    01:f9:81:71:f7:66:6e:dc:be:58:20:4e:ba:7f:39:
                    95:06:cc:fb:f8:33:b9:6c:71:2a:aa:95:8b:a3:8b:
                    bc:8b:40:e9:e2:3c:67:1a:df:b3:da:5c:40:e6:19:
                    f9:6e:1f:7e:f0:2b:93:78:34:e0:81:c1:5e:d4:79:
                    34:11:eb:06:c2:b4:02:f7:8a:d8:0e:db:82:4a:2e:
                    30:8e:27:06:cf:14:9c:9b:1a:03:c5:97:e6:2a:3e:
                    35:e3:b7:47:7e:c3:fd:61:95:96:e1:6b:e7:51:02:
                    b9:b1:cb:79:e5:aa:bd:80:50:48:11:76:44:1b:d4:
                    2a:0f:75:19:5a:50:35:29:45:0a:2a:99:89:b2:29:
                    79:a3:67:a2:48:e3:29:fc:29:46:ec:26:fa:9b:4d:
                    b2:a7:ba:4c:09:b1:5b:c7:52:87:62:76:79:cd:3e:
                    54:13:0e:27:e7:d5:c6:cd:b5:46:97:f2:61:15:e4:
                    a1:ec:54:c3:df:5d:96:11:a0:e0:68:f3:4b:cd:d4:
                    98:64:03:be:b8:f8:98:17:0b:63:06:d0:13:c5:31:
                    1d:05:04:ae:a6:dc:55:bd:f6:b1:c2:33:ec:d2:70:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:58:9A:AF:EC:F2:61:F6:5E:21:BA:BC:F2:95:BC:A7:7C:B5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:79:14:6c:72:7f:50:c6:b7:05:c8:69:07:c6:b4:2e:85:e0:
         63:52:1b:2c:15:7a:19:56:62:20:65:70:38:0f:4d:e6:cc:3f:
         cd:6f:21:84:31:7e:2b:25:4d:06:01:15:fa:bc:4b:e8:75:2d:
         7a:30:40:49:29:0b:1a:ba:f8:3e:c0:d2:cb:fa:72:6b:35:b3:
         4a:be:81:b4:61:c2:df:37:d4:95:52:de:2c:84:6c:88:b0:55:
         08:32:87:c4:6c:66:05:4e:e2:44:36:b6:29:a3:1a:1b:63:02:
         c2:29:ac:a5:e2:a9:98:3f:52:ab:d6:8e:39:4b:3f:10:32:fc:
         1e:81:e2:76:8f:09:91:e4:7c:b7:6c:ee:e7:69:5b:19:8c:8d:
         28:82:3c:82:1c:62:13:74:bb:5f:4a:1b:f7:b6:bb:bc:6e:d8:
         22:e5:b4:8f:80:24:bf:a1:ff:4d:5c:04:5e:59:45:5b:ec:b5:
         dd:17:36:f2:aa:e8:01:13:79:f2:e9:60:56:ba:8b:ab:c8:22:
         5b:03:4b:14:87:ca:49:8e:52:f8:db:ec:f8:7b:ae:5d:94:ed:
         ff:df:23:d1:53:4f:01:5c:8d:72:83:57:49:12:a7:10:6c:f7:
         98:88:ab:9c:01:5d:09:bc:69:49:94:55:e9:03:77:24:aa:9b:
         fc:4c:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:46 2025 by rpki-client