Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e7140afb-bd73-35aa-8d8e-5f7b1c24f473.roa
File:                     e7140afb-bd73-35aa-8d8e-5f7b1c24f473.roa (raw, json)
Hash identifier:          4fobZyMHkywfKBBHRrQUf/EcPpF/n3TYDjeZeiJvD5g=
Subject key identifier:   BF:2E:0B:43:03:AE:19:0E:89:4D:6E:5E:5D:FB:43:AD:8E:CB:B5:25
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A84701AC3204BD8BB63142D90
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e7140afb-bd73-35aa-8d8e-5f7b1c24f473.roa
Signing time:             Mon 14 Jul 2025 16:13:20 +0000
ROA not before:           Mon 14 Jul 2025 16:13:20 +0000
ROA not after:            Sun 12 Oct 2025 16:13:20 +0000
asID:                     3477
IP address blocks:        137.75.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:70:1a:c3:20:4b:d8:bb:63:14:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 14 16:13:20 2025 GMT
            Not After : Oct 12 16:13:20 2025 GMT
        Subject: CN=dc936da6-957d-426a-9b10-012aa227321f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:29:5f:78:95:8f:3d:eb:85:fa:8b:df:8c:
                    53:31:1c:e8:25:bc:1c:7e:21:9c:b4:58:8c:b1:96:
                    75:1c:4b:b9:49:12:f8:af:1f:67:1f:d2:c6:5f:d4:
                    3a:a4:bf:df:92:25:d4:e6:3f:0a:f1:6c:68:73:48:
                    be:aa:4f:48:6c:22:bf:36:f4:b9:58:a6:8d:4f:0b:
                    d5:f1:c5:31:c5:43:fd:e9:cb:f1:b3:d9:ca:81:71:
                    aa:d6:fc:08:0d:81:01:00:7e:b8:7b:32:c2:d5:2a:
                    6a:a6:e0:82:35:cd:87:bb:e5:fc:9e:98:44:2a:ad:
                    bf:6c:e4:bb:aa:63:eb:5d:d2:93:48:ab:3e:a0:e5:
                    8c:5c:05:3d:a9:bb:05:5b:ff:67:75:3e:a9:38:0b:
                    4f:57:fd:07:25:51:b5:93:d2:2f:f9:5a:c6:de:3c:
                    a6:1b:03:6e:4a:5e:4e:d8:81:c9:89:f9:6b:62:55:
                    22:64:7b:6d:6e:4d:57:9f:cc:97:49:70:7c:65:f7:
                    ef:c8:dd:89:92:9f:45:b9:fc:bd:79:fa:c2:2b:11:
                    0d:fa:45:79:ac:fd:07:bf:dd:ef:f5:95:21:95:a1:
                    cc:46:03:9e:ce:7d:46:d2:4d:83:b5:5b:2f:d7:eb:
                    a6:57:48:00:49:6c:7d:7e:5e:07:d5:6f:09:b0:19:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:0B:43:03:AE:19:0E:89:4D:6E:5E:5D:FB:43:AD:8E:CB:B5:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e7140afb-bd73-35aa-8d8e-5f7b1c24f473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:43:10:fc:12:c1:a8:a9:85:ce:cf:17:41:0a:ba:b2:17:
         d8:8f:d5:bd:5e:e8:d9:5b:98:a7:f3:12:48:2e:fe:b1:d0:36:
         14:5e:1a:1d:0c:26:57:6f:32:1e:a7:db:59:5d:11:43:c0:09:
         c0:6f:db:32:50:6f:06:33:49:18:6a:4c:3a:1d:d1:24:1e:ff:
         0e:de:66:0d:e3:52:c3:51:7d:84:5c:be:a8:b9:a6:25:84:00:
         ea:6e:ee:b7:f8:6d:71:9b:04:73:33:e3:24:17:27:29:3c:5f:
         df:5d:5c:a0:ca:30:99:ad:50:8c:26:46:07:02:31:32:0a:7d:
         d2:a4:c9:58:d9:42:f8:52:b0:7a:b0:5c:25:b0:aa:e1:3c:8d:
         31:19:f7:72:5a:52:bb:fa:fc:08:dc:06:8a:0f:54:0f:47:39:
         dd:0c:a8:c0:22:a2:e3:aa:0f:a8:a8:d7:f2:55:97:e8:ca:cf:
         c3:5b:61:17:8f:e4:0c:dd:c3:6a:b9:41:14:4f:94:b6:33:b5:
         30:2b:b1:52:7b:d7:b4:9e:5f:a8:d3:6f:a4:67:b2:de:e4:82:
         7a:da:11:46:3c:6e:3a:72:39:fb:b6:11:4f:cc:a5:af:9b:35:
         1e:57:7c:7d:ef:2d:26:93:14:99:76:07:62:18:a5:5f:5f:28:
         76:5d:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:56 2025 by rpki-client