Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa
File:                     a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa (raw, json)
Hash identifier:          IiQy92bSMT3TgD6ZfMTcgeKpXXyeVfi8VYhctYKZYYQ=
Subject key identifier:   A1:60:FC:48:5A:70:95:BF:CF:80:A5:1D:F9:46:29:20:63:6C:07:60
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F43285849FCAA83DDB111C5F9AD8746C0
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     6509
IP address blocks:        208.75.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:83:dd:b1:11:c5:f9:ad:87:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=7ea5a8bf-fb56-4d3c-aa5a-90a013c83c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:07:85:90:9f:19:98:df:f8:3d:d9:4b:61:
                    f8:74:ce:b6:6f:35:f3:9e:e2:31:3d:6a:38:1e:05:
                    88:1e:c5:d7:81:14:fc:0d:55:00:99:88:c2:38:dd:
                    02:6b:e5:6e:8e:29:c3:72:d9:94:d4:f6:89:5c:e6:
                    02:57:77:cd:5d:f6:91:d3:6f:ef:ea:b6:42:e5:04:
                    33:30:6b:24:d1:8f:42:9b:f3:79:fa:11:f5:ce:38:
                    c0:d1:6d:e1:e0:68:2b:a6:77:a3:4a:fe:2d:ca:7f:
                    31:d0:a1:7e:dd:0a:44:7a:9e:78:57:5d:3f:f9:24:
                    8b:32:ba:a0:bd:62:fc:e2:8d:c3:34:00:bc:cc:c7:
                    93:87:1a:66:2f:4c:13:2c:04:1a:ba:56:8f:14:42:
                    21:b7:e9:4b:00:71:24:05:27:3c:1d:87:62:c2:11:
                    ef:0f:0d:f7:55:47:a5:02:16:16:bc:b7:89:4b:07:
                    6f:2f:7a:3f:cb:7b:f1:b0:18:4d:9a:bd:57:02:c3:
                    5e:cc:27:da:d1:2f:5d:74:af:6b:a6:b3:70:f3:05:
                    fd:8a:15:17:99:a5:67:32:99:97:52:12:56:75:59:
                    7e:a7:51:28:f3:90:bc:68:86:a1:95:76:55:86:ee:
                    22:2a:3b:14:f7:9e:4a:fc:2b:8e:d1:02:48:6d:70:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:60:FC:48:5A:70:95:BF:CF:80:A5:1D:F9:46:29:20:63:6C:07:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:24:bb:dd:67:5a:64:c4:9d:0c:8a:a4:47:15:6d:39:00:
         06:f4:b5:1c:23:69:54:c8:27:82:19:6c:2f:26:95:70:54:48:
         13:e2:bb:99:45:ef:db:f7:e3:82:f3:a7:64:b9:c1:30:32:d9:
         4c:3d:1b:a4:f8:8f:2f:fc:83:c5:c8:5a:70:c6:fc:7a:43:86:
         da:ae:a0:75:ec:a7:c7:cd:63:20:97:8a:05:fd:8f:17:69:82:
         db:db:34:98:55:d7:b6:a6:ed:81:c4:03:eb:32:28:bf:2b:9a:
         d8:bd:d5:bd:3a:43:0b:68:90:48:ef:26:76:12:df:23:a5:9c:
         8f:5f:05:3f:44:22:3a:b2:01:b3:1a:7f:50:b4:90:b8:72:61:
         07:97:a3:62:0b:b9:cb:1e:47:cd:3a:1b:0e:5f:33:f1:05:94:
         5d:e3:d7:56:70:37:98:d4:a0:7e:62:b9:e0:40:d2:e4:8b:42:
         ca:16:34:8d:5d:84:02:10:ee:53:f5:85:73:63:ae:bc:ee:87:
         b5:0a:1f:5a:40:8a:39:ae:78:44:57:d2:7f:69:ac:f3:68:b4:
         c8:f6:69:62:3a:fc:f6:89:7f:d8:1b:6a:ad:4b:f8:cb:e5:65:
         1b:e2:aa:21:23:f7:8a:ed:e9:1b:07:09:8f:03:f0:69:61:ef:
         33:2c:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:58:48 2025 by rpki-client