Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fde59b9-9cfb-3bec-801d-923c08cdce93.roa
File:                     0fde59b9-9cfb-3bec-801d-923c08cdce93.roa (raw, json)
Hash identifier:          V3y+1Csc5sBwlkg5KPDA2fvesrxia03Nq+hrW2NqUVM=
Subject key identifier:   DC:11:F8:59:4B:6B:5A:9F:F7:45:16:55:FB:57:F4:C2:88:DD:DB:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AB4ED3C9F6CCADA1CED285D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fde59b9-9cfb-3bec-801d-923c08cdce93.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     6167
IP address blocks:        75.241.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:3c:9f:6c:ca:da:1c:ed:28:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2488812e-4713-4af6-a4d0-94f74d7e2bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:ea:aa:11:81:43:54:a3:bd:d8:e7:0a:c8:
                    28:5f:60:22:bd:33:21:ba:58:92:dc:1c:af:ea:09:
                    1f:46:7b:aa:bb:80:97:f6:b3:dd:51:8f:22:ca:fe:
                    af:cd:94:9f:22:30:b4:77:0b:e4:51:d1:1f:23:40:
                    23:00:26:77:28:2c:d0:2b:ca:5f:5d:89:8c:25:5f:
                    5a:31:20:4d:e5:2e:9a:ac:48:d0:b2:97:e7:8b:44:
                    bd:6c:8d:1f:0c:b0:b4:63:2c:92:4f:b0:9d:6f:b1:
                    99:29:12:df:c4:15:ab:b4:42:83:50:18:33:a0:47:
                    20:a7:f2:8c:6d:92:23:48:12:05:37:75:6a:f1:a1:
                    59:b1:2f:2a:2e:ab:a0:4a:e7:4e:e2:90:99:36:f6:
                    7c:40:63:47:42:60:d0:4a:b7:f4:2e:c4:f0:5d:cf:
                    f2:a4:8e:ab:80:f0:c3:67:51:b5:58:91:32:f5:36:
                    f6:fe:08:3b:21:5b:47:6d:d9:17:35:13:9c:f3:34:
                    d0:7c:cb:55:ca:31:d9:a2:72:54:43:27:4d:7b:2f:
                    19:66:0b:53:bf:d6:ef:3d:a4:10:7f:1f:c2:93:1c:
                    86:d3:ca:48:d6:0c:12:a5:1e:22:86:b6:76:f4:4e:
                    e0:33:b6:df:01:db:b8:f3:ce:44:fc:50:17:b1:f4:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:11:F8:59:4B:6B:5A:9F:F7:45:16:55:FB:57:F4:C2:88:DD:DB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fde59b9-9cfb-3bec-801d-923c08cdce93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:59:61:01:a3:1e:a6:9e:bc:90:48:d0:8b:22:8a:bd:e6:
         5a:cf:94:e4:8e:70:42:78:3a:bd:b9:c2:90:3c:fd:57:c6:dc:
         06:29:5d:33:05:08:d1:87:b6:65:42:16:f3:96:d4:a8:05:c8:
         74:35:30:58:77:e7:79:37:db:88:16:27:39:cd:5b:59:12:59:
         be:fd:3e:65:5e:82:bb:e1:3c:01:c1:54:25:4f:92:fd:3a:63:
         d1:5d:1f:d1:f5:0b:48:ef:e1:d6:a9:04:f5:b7:43:b1:dd:da:
         f3:f8:b1:e4:d4:3e:46:78:66:43:39:a7:6d:9c:a4:7c:a0:6c:
         ae:f8:98:56:b9:f3:db:14:ad:3c:d7:d2:b9:ab:8b:a1:a7:af:
         dd:ea:b3:43:6b:da:28:49:f8:89:24:49:8c:fb:24:7d:b6:81:
         70:e4:e4:27:0a:45:11:76:df:3f:0c:24:31:2e:c0:9b:a0:55:
         87:7a:7a:a1:d0:e1:f8:d5:4d:6f:ad:30:22:f7:fe:07:3d:96:
         2c:6d:e0:6a:3e:74:08:94:fc:23:d2:71:c9:64:ce:91:79:92:
         81:b9:77:d6:14:b8:84:86:bb:8c:7f:ce:bc:52:34:45:95:9b:
         af:35:88:0a:ec:93:d0:1f:b4:f7:c1:71:38:11:c3:a8:20:46:
         5b:ee:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:39 2025 by rpki-client