Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/467b031e-b189-3b66-b4cd-93dcaf5eb9b5.roa
File:                     467b031e-b189-3b66-b4cd-93dcaf5eb9b5.roa (raw, json)
Hash identifier:          nP3973Jh0hO2XNDk5VTzUJCUpDOCFQdlVINqn5aRvI0=
Subject key identifier:   AF:8D:A0:2C:6D:51:9D:5A:55:9B:53:D6:2E:CC:6B:0D:BE:BD:17:23
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A8470129FDAF6862D4FA65B00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/467b031e-b189-3b66-b4cd-93dcaf5eb9b5.roa
Signing time:             Mon 14 Jul 2025 16:13:17 +0000
ROA not before:           Mon 14 Jul 2025 16:13:17 +0000
ROA not after:            Sun 12 Oct 2025 16:13:17 +0000
asID:                     3477
IP address blocks:        137.75.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:70:12:9f:da:f6:86:2d:4f:a6:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 14 16:13:17 2025 GMT
            Not After : Oct 12 16:13:17 2025 GMT
        Subject: CN=af73a264-b1db-4e72-b604-4b60bd0171ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:1a:a4:92:4f:70:cf:47:07:5f:7c:3a:b1:
                    8b:8d:ea:26:86:1d:8c:04:02:65:b7:05:d1:25:78:
                    eb:3a:fa:1f:7f:58:66:e2:24:dc:e1:cf:34:85:fb:
                    9f:ef:7b:b2:cc:15:20:6a:ab:95:3a:43:d9:90:51:
                    0b:6c:71:c1:3c:09:8d:e0:1d:e1:08:f2:13:60:10:
                    85:4e:32:32:e5:e6:66:5b:ec:3a:05:74:34:b9:20:
                    24:17:d3:43:d6:5e:94:39:c9:d1:91:73:60:55:be:
                    b7:88:e1:db:41:8b:27:7a:86:fa:43:de:a9:8b:be:
                    9a:6e:cf:3f:a4:ee:d0:c8:03:bd:e3:4e:1e:0b:b7:
                    83:47:e7:05:f3:ec:3e:24:db:86:ee:3f:36:a2:08:
                    38:92:f1:ae:32:2f:9e:0a:0f:40:83:0c:dd:68:33:
                    11:58:c7:df:ec:7e:21:c2:ee:3c:5f:60:7a:a6:0a:
                    52:7b:4c:db:8e:bb:17:b1:50:7a:1d:9e:0d:5c:15:
                    27:60:8a:9f:d8:cb:59:2c:40:04:1b:07:55:6e:c4:
                    2d:7d:76:87:4a:ae:04:fb:fa:1f:95:65:8b:28:85:
                    7b:ad:20:c5:40:9a:06:0d:ec:29:cf:ab:ae:e6:99:
                    3a:06:44:58:a9:08:d4:db:02:6b:4c:e8:81:35:f7:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:A0:2C:6D:51:9D:5A:55:9B:53:D6:2E:CC:6B:0D:BE:BD:17:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/467b031e-b189-3b66-b4cd-93dcaf5eb9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:36:f8:d5:62:23:c1:75:33:81:da:56:37:fe:25:e5:40:
         e3:28:4c:87:26:26:95:27:7b:ec:d7:09:89:bf:47:11:fe:8c:
         80:0f:df:be:12:b5:b3:32:a4:d0:be:59:dd:c8:ca:a6:45:51:
         97:5b:e0:3b:b1:b0:06:96:07:04:55:5b:03:27:29:bd:18:28:
         07:6e:b7:a0:80:bb:1f:31:c9:a5:7b:93:b0:63:fb:6d:d5:b4:
         fd:c4:b9:d6:d3:37:84:bb:33:6d:6c:ed:0b:aa:4c:f5:13:03:
         a6:4a:b1:65:16:d6:52:9c:1e:c2:0a:21:bc:88:b1:80:1b:04:
         a9:24:b3:f8:8f:ea:9d:72:73:41:18:1c:f3:f9:ab:5c:50:23:
         52:3e:ed:c3:33:70:e5:27:fc:80:fc:87:d5:d3:6a:75:14:a0:
         a2:24:9b:c6:50:e2:56:f2:82:78:95:42:f9:e5:39:aa:68:da:
         b6:96:87:7c:80:96:00:d2:0d:cf:83:0a:68:1f:56:67:6f:e5:
         de:23:fa:11:cc:7c:77:2e:fc:1c:82:06:1f:14:7c:45:3b:9f:
         a4:16:07:1a:f7:70:89:51:10:5f:eb:7a:4d:5f:a1:43:46:2e:
         1e:07:e3:46:21:c2:8b:e4:b3:e7:31:1b:43:b5:85:11:b4:e7:
         fe:66:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:14:34 2025 by rpki-client