Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3be8087-5758-3cd5-b9be-d90794a9584c.roa
File:                     f3be8087-5758-3cd5-b9be-d90794a9584c.roa (raw, json)
Hash identifier:          YGYcnZioYv+aMGNoeHMPsac9rfm3WL+9F5EtgM+j3JI=
Subject key identifier:   A0:F3:C5:14:40:EB:78:AD:03:E9:42:3A:40:81:02:46:EF:1F:F8:E1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6C6D4892B4CEB8DA5480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3be8087-5758-3cd5-b9be-d90794a9584c.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        75.113.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6c:6d:48:92:b4:ce:b8:da:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5a362dee-bac7-47a4-b8a7-7993181c5189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:31:41:42:a7:34:d0:45:82:6a:fe:f9:2e:
                    d6:0f:a4:1f:c9:03:b7:62:01:c2:15:00:54:5f:f1:
                    69:05:b2:81:db:10:9f:83:72:7f:ee:a3:f2:64:c5:
                    68:9d:1c:f5:02:a0:6f:f1:84:1b:8d:c9:8c:29:e8:
                    1a:0a:8c:68:35:34:e5:88:be:ab:17:d4:ad:7d:73:
                    5f:40:ad:65:68:fe:e1:b3:3a:aa:fb:bd:1a:2d:57:
                    73:ea:26:cb:a5:25:1e:17:d5:37:a5:54:8e:57:19:
                    3d:25:5a:bf:61:09:ca:c7:45:98:07:a1:11:b8:23:
                    ef:f2:87:6c:95:bb:d5:94:a5:32:d5:70:6f:a7:09:
                    3e:99:09:64:9f:52:8c:6f:76:30:dc:fa:57:1b:13:
                    75:06:7d:fd:45:27:65:d8:69:fa:c0:94:49:0b:b5:
                    46:20:3a:c6:a9:da:d6:56:c7:f8:37:6b:ec:4f:04:
                    f9:60:9e:f6:40:68:6e:6a:c0:16:38:f6:4d:f0:5e:
                    bc:f0:7d:9c:1e:f9:f9:78:b5:c0:c1:84:f9:2b:88:
                    1d:23:f6:fb:bf:2c:4a:e0:93:5e:44:2f:d2:7e:db:
                    57:f6:b7:91:ec:17:3b:a8:22:2d:5a:1f:e6:dd:63:
                    95:e7:48:5d:30:1a:a6:1f:ce:30:97:2c:37:42:15:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F3:C5:14:40:EB:78:AD:03:E9:42:3A:40:81:02:46:EF:1F:F8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3be8087-5758-3cd5-b9be-d90794a9584c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.113.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:14:de:9f:ea:14:9c:c6:c9:d5:98:db:22:7c:59:6b:63:37:
         94:14:59:b5:d9:dd:ea:e7:2e:58:82:48:f3:3e:0b:77:2a:3b:
         1f:2c:cc:3c:54:71:85:3a:35:f3:e9:ef:3a:1a:c9:d3:f8:3a:
         b4:d9:32:c1:42:7e:cf:49:39:e0:c1:e8:9f:88:1b:91:31:87:
         27:47:26:79:d2:d5:18:a7:c4:4e:9d:a9:4f:34:61:9c:6e:44:
         a4:41:0b:8d:89:47:fa:20:12:15:c7:16:1e:d2:bb:11:7a:5c:
         e6:12:cc:50:44:65:c7:8f:66:65:fc:67:0a:33:0d:1f:66:e7:
         d5:25:58:4d:52:c2:47:36:8e:6e:20:d3:15:f8:91:4d:f6:fa:
         2e:f2:52:00:d3:82:6b:8f:01:ab:1b:07:87:a3:91:81:0e:3a:
         72:13:3c:f1:3d:dc:ea:7c:23:24:c8:13:c3:07:bb:5a:0b:c0:
         9e:0d:60:4c:18:89:2a:3d:8a:e1:ae:eb:1d:80:0c:69:18:f8:
         e2:97:2c:7b:b9:11:02:a1:e8:af:55:4e:04:e5:f6:b6:5c:40:
         aa:e6:4c:db:30:6c:e2:e6:07:b8:57:ab:08:33:bf:a3:ee:f9:
         d8:51:e0:d6:23:26:c4:81:b1:34:14:8e:1e:04:20:29:8d:62:
         73:07:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:18:23 2025 by rpki-client