Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa
File:                     4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa (raw, json)
Hash identifier:          ZUBElMv8VRZgA3vYvrrVDu67RZ6gDxtpILf8l+pDCb0=
Subject key identifier:   08:27:40:13:2F:3F:8F:18:55:AF:17:BD:85:B5:03:00:5F:38:6A:7B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584BC2704738ED4D9FC7E2345BC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     36522
IP address blocks:        67.69.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:47:38:ed:4d:9f:c7:e2:34:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=8f4deb2a-a290-410e-bf7b-278d17d81217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:da:40:c8:5e:ff:be:14:c9:19:8e:ec:0d:
                    01:df:34:64:54:ee:f6:a6:5b:f7:5a:72:e2:29:67:
                    9c:ed:0d:08:51:59:03:0b:83:c8:34:e5:b7:4d:1e:
                    58:39:e9:b0:c8:78:e5:aa:ef:bb:0f:b4:d0:3b:87:
                    ea:57:fb:32:78:7c:20:1e:ae:b8:36:84:22:c9:ec:
                    f9:e4:aa:e6:0d:b1:62:3b:a6:86:05:78:ed:fe:5f:
                    d5:7c:bc:1e:75:11:83:d8:20:38:74:69:70:49:db:
                    81:e6:51:cf:0d:58:16:aa:8c:f3:17:95:e1:a7:9b:
                    a9:d6:99:9c:cc:48:3d:b2:b5:fa:58:45:3c:4a:84:
                    c7:7f:34:a1:f4:3c:18:a9:0c:c4:03:c1:da:b8:d1:
                    e1:b4:51:c7:c1:85:25:12:06:a5:36:db:7e:ed:34:
                    3a:37:ec:f9:40:e7:e9:bd:a7:39:11:84:32:bb:5a:
                    d6:65:78:7d:02:f2:83:ee:b1:0e:e3:6d:50:26:06:
                    d6:c0:d1:50:5b:3b:fc:07:b7:69:cb:c7:fa:72:5d:
                    d7:e4:18:ad:76:ad:a1:a5:a7:08:ba:e5:28:d8:7f:
                    bd:db:a5:92:c5:a5:b7:76:16:53:92:8b:c3:94:fd:
                    ee:36:ba:22:34:8c:45:10:a3:66:a5:6f:32:a4:d4:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:40:13:2F:3F:8F:18:55:AF:17:BD:85:B5:03:00:5F:38:6A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4f5f6c0f-9aa0-38a4-9373-8713ea5076e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:8c:7d:5e:7a:40:66:e4:b7:0d:3f:b3:78:fc:bf:e5:99:
         b6:37:39:f0:0f:f2:3b:ce:f8:52:6e:3d:9a:41:f9:c0:2e:93:
         42:a3:03:e6:41:56:44:f0:76:58:4f:4f:8f:67:b7:69:56:38:
         63:33:35:2e:59:44:56:94:ee:43:3d:a2:7a:62:87:29:74:53:
         e3:51:f2:95:5c:51:fa:f2:2d:63:8e:2e:38:cb:e8:f2:7d:8a:
         3c:95:dd:70:46:66:df:98:2c:04:03:9b:31:b5:c7:25:59:2e:
         df:bf:45:ff:12:6c:7b:d7:52:8c:1e:ab:2a:16:48:02:0d:b6:
         06:99:1d:70:06:81:0f:f7:11:f8:e7:db:31:a5:e6:0e:a9:af:
         69:3f:e3:ad:92:4e:e1:dc:08:51:40:5f:8e:cd:52:7e:cd:b8:
         64:44:ce:6d:b1:22:1f:75:d1:57:e9:3e:2a:e9:18:51:84:9f:
         48:64:4e:0e:b4:a3:a9:e6:79:25:b0:fc:9d:bc:c7:33:ec:5e:
         b5:8f:44:eb:d4:84:e3:d1:d2:6a:83:89:f4:69:66:69:05:27:
         60:99:8f:50:5e:44:87:fe:29:a0:bd:36:b4:c5:21:f2:0f:b3:
         17:86:be:b4:c6:53:0a:7c:4f:e0:84:61:93:04:0e:9c:c0:54:
         17:c4:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:19:31 2025 by rpki-client