Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa
File:                     7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa (raw, json)
Hash identifier:          3K7MzjHMg7djwWawEY+jP3GJBQhCrJ5PPVD3wEOuxOo=
Subject key identifier:   A2:E4:7B:FD:F4:76:32:4C:0A:A7:1B:9E:A6:A5:FD:51:FA:28:C3:A7
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A8B0B63E2F009BB0537F24480
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     7764
IP address blocks:        148.129.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:63:e2:f0:09:bb:05:37:f2:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=a70da94c-ef53-4307-a79d-7c4a17ea34b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:42:2d:1d:3c:c8:9e:dc:3a:c6:85:49:66:
                    1b:c1:5d:93:35:d5:24:d4:a7:60:9b:23:0a:20:13:
                    03:70:7d:68:2c:0b:27:99:b1:66:30:6d:f5:ab:e9:
                    13:23:ca:85:ed:b8:0a:31:b0:c0:d0:9e:01:80:33:
                    a1:9c:25:2e:a7:a5:3b:93:04:5c:fb:04:7e:5d:e9:
                    2a:cd:ae:70:5b:8d:0d:5c:2b:14:a4:2c:d0:ca:29:
                    40:a3:f6:44:01:86:6c:6c:ed:64:20:09:e0:f7:0f:
                    79:0c:ba:1e:92:7c:bb:76:5b:b4:78:1c:34:8e:05:
                    9d:c6:95:1c:10:06:6d:e2:a9:df:3c:75:a7:a9:57:
                    68:bf:a8:25:5d:3e:a2:af:dc:2e:b4:76:2a:75:6d:
                    c1:55:31:83:5f:f6:7b:cf:c0:0f:f4:4e:d6:ce:3f:
                    9f:d9:bd:4a:1d:0b:c7:cc:4a:f8:27:a3:01:85:8f:
                    d5:07:d7:e8:9b:f1:29:4f:8d:80:39:4b:ed:8a:c5:
                    31:6f:58:31:da:3d:fe:f5:4d:97:a3:c6:57:74:d8:
                    af:0d:47:be:29:c1:30:2a:6e:e4:03:c8:c3:e9:c7:
                    07:96:cd:27:b7:77:8b:f2:9b:b5:62:59:e9:58:13:
                    7b:06:36:8c:45:07:54:68:75:b3:54:2e:68:93:46:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E4:7B:FD:F4:76:32:4C:0A:A7:1B:9E:A6:A5:FD:51:FA:28:C3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:e1:9f:97:7f:a5:05:e9:6e:50:68:da:cb:83:5a:df:e3:
         41:ea:9f:be:72:e1:37:08:30:f1:fe:22:6f:06:bb:22:ad:cd:
         de:76:b7:90:07:8d:75:56:5b:a4:16:e3:d9:82:07:ce:db:29:
         7f:32:04:5d:f4:72:3d:52:e7:ff:48:19:5e:f7:dc:b7:33:97:
         f5:df:c5:0c:ca:a0:80:b0:47:29:e7:ee:52:5b:6f:53:7d:b6:
         8f:33:76:35:3d:9e:e9:82:b3:ee:6a:ad:57:c5:a3:26:48:72:
         66:80:c9:e4:7f:9c:cf:74:a8:b7:03:12:68:41:f6:3b:0d:80:
         9e:f3:03:93:92:41:9d:37:38:00:14:34:07:d0:0d:1b:f5:eb:
         6c:28:6f:1c:f4:2b:9b:7e:91:99:23:ee:bc:d1:c3:fa:fc:93:
         58:e5:e7:61:0b:53:e4:9c:d8:5c:dc:90:5e:14:0a:ff:24:fd:
         c7:58:37:7f:08:90:5b:6c:0c:d6:16:cd:43:8f:ea:4d:c7:1a:
         da:b4:3f:92:f5:87:32:3b:a2:d3:d3:ba:dc:b3:6c:01:a3:be:
         9f:3e:c3:ea:ff:82:a7:79:0a:73:05:b2:cf:63:43:db:2e:44:
         55:b3:7b:66:0d:6b:a6:7b:6d:92:eb:15:d9:59:30:fc:37:1b:
         49:bb:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:20 2025 by rpki-client