Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa
File:                     712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa (raw, json)
Hash identifier:          kD4+fpTgCVmGD5cYuUUeKQMYUf1VjH5i8PkoxMLVjTg=
Subject key identifier:   CF:D6:29:E8:68:3E:87:5A:D4:2A:F1:7B:96:EC:59:5E:2A:39:76:A4
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A84702FF6182FC954FC2E0238
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa
Signing time:             Mon 14 Jul 2025 16:13:30 +0000
ROA not before:           Mon 14 Jul 2025 16:13:30 +0000
ROA not after:            Sun 12 Oct 2025 16:13:30 +0000
asID:                     3477
IP address blocks:        137.75.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:70:2f:f6:18:2f:c9:54:fc:2e:02:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 14 16:13:30 2025 GMT
            Not After : Oct 12 16:13:30 2025 GMT
        Subject: CN=09c34465-1873-4865-a68f-14b58308b71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:68:41:34:4d:e7:f3:80:ff:37:77:1b:ea:
                    c6:dc:ed:87:73:23:a8:ca:8a:64:fc:88:cd:f1:c6:
                    87:af:de:91:69:c2:2f:31:71:a4:2c:c5:92:85:13:
                    d9:0c:73:e4:e4:bc:07:64:cb:79:ae:45:5b:6a:9f:
                    fc:ad:96:d4:00:65:80:07:18:08:08:ed:fd:53:e7:
                    e9:35:dd:e9:57:53:bf:15:c0:fb:aa:a0:3e:a1:fc:
                    61:4b:25:40:2c:1f:3e:ba:7d:85:9f:e1:63:13:84:
                    64:c6:14:a2:18:f0:78:d9:0e:26:84:d2:b4:cd:37:
                    8a:e8:eb:50:ca:56:15:b1:e6:aa:ac:e9:dc:80:f4:
                    42:e6:7f:7b:c9:5b:ce:00:28:22:37:7c:1b:1c:86:
                    e7:59:f9:f8:ef:0c:f9:79:4d:23:c7:45:57:9f:16:
                    2c:1b:62:ce:c9:a1:1d:c2:91:07:4f:70:7d:4f:10:
                    35:41:f2:e7:42:fb:95:d8:1d:43:30:a9:66:ad:89:
                    88:8b:0b:89:c7:be:a5:0d:69:3e:d4:9f:20:e4:1d:
                    e6:0a:7b:98:a7:55:f8:33:d3:91:35:9c:39:eb:3b:
                    2e:27:2c:52:26:8d:f6:0e:ca:d6:42:b8:8b:16:c2:
                    8b:74:f1:8d:8a:db:05:46:61:af:87:26:28:55:4c:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D6:29:E8:68:3E:87:5A:D4:2A:F1:7B:96:EC:59:5E:2A:39:76:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/712c4f53-eb4e-3bbf-875f-dc639fe1bb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:0e:d4:51:9a:f3:3b:bb:e0:74:e2:c9:6c:0d:7c:a4:55:
         9e:f5:8c:8c:1c:97:40:23:b9:26:1f:74:b0:9f:67:af:3f:1f:
         ca:37:0b:15:df:06:e1:51:e8:51:91:b0:67:ea:33:7f:f6:2a:
         08:ec:66:15:b6:63:ad:f9:b6:52:cb:e3:90:0f:09:f8:a8:00:
         c1:38:d7:f7:11:16:88:07:6e:46:e4:04:f3:ed:c5:16:bd:34:
         05:9e:19:e6:fb:41:d0:fe:02:30:4f:08:7c:a0:66:3c:d3:7c:
         53:f6:37:e7:50:80:78:7a:fa:84:94:ce:84:1f:18:80:e5:8b:
         4f:e6:71:8c:c0:8a:12:4b:8c:1f:6a:95:16:ca:93:d4:b7:dc:
         6e:ff:fd:9e:92:48:dc:fb:7e:1e:c5:0e:98:41:f4:30:cf:23:
         28:97:6a:a0:d3:fa:3a:53:ad:54:62:f4:4f:64:00:b9:0b:5c:
         db:bd:f5:7d:b2:f1:2a:bb:26:85:f8:00:e3:a5:3a:67:05:e5:
         2a:c1:e4:1d:b3:f9:6c:13:49:69:8c:23:6b:0a:67:01:60:3e:
         47:39:e3:12:07:28:9d:bc:2d:fc:eb:4b:9b:1e:65:fe:d1:3f:
         b0:e5:57:46:1a:52:71:c5:ea:4d:8f:93:2b:d2:58:9f:3b:41:
         83:8f:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:37 2025 by rpki-client