Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93ef1fea-e4c8-3709-9f2b-10d69b604e05.roa
File:                     93ef1fea-e4c8-3709-9f2b-10d69b604e05.roa (raw, json)
Hash identifier:          WaJRQSe8qAu+iSFX4CDipNy2ClS3sKPUVbLg8Lxj9ZM=
Subject key identifier:   AF:8D:02:15:44:08:6D:2B:C1:03:80:F3:77:7F:4A:81:6E:67:EF:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC05AD8943E0B3F3ADD4B9E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93ef1fea-e4c8-3709-9f2b-10d69b604e05.roa
Signing time:             Tue 04 Nov 2025 20:05:57 +0000
ROA not before:           Tue 04 Nov 2025 20:05:57 +0000
ROA not after:            Mon 02 Feb 2026 20:05:57 +0000
asID:                     6167
IP address blocks:        75.249.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c0:5a:d8:94:3e:0b:3f:3a:dd:4b:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 20:05:57 2025 GMT
            Not After : Feb  2 20:05:57 2026 GMT
        Subject: CN=b6bd1fa5-33fe-4d50-8207-8a01daa95170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:31:66:67:12:41:3f:6a:c0:ce:23:7f:d6:
                    0e:56:da:af:78:bb:39:f4:d4:b0:b7:e1:65:35:02:
                    5b:5d:6b:81:d9:50:a5:a1:77:18:31:ea:cc:95:99:
                    3e:7f:0d:49:22:68:62:b7:73:f4:e2:7b:c9:73:d0:
                    e3:21:16:68:fd:56:26:2a:f3:f5:b0:ec:6a:7e:1f:
                    9f:6a:69:bb:ba:d6:a2:0b:fd:e3:88:6a:08:62:23:
                    f8:3d:0e:0d:85:41:cf:f7:35:e9:22:56:b6:8b:cc:
                    25:f8:95:44:27:7c:a2:d3:0a:00:e4:db:2a:08:28:
                    19:ba:16:87:7c:f4:91:73:91:4a:7e:18:e0:3f:73:
                    9d:94:98:15:a7:4c:58:49:61:45:1d:25:0c:38:08:
                    b5:e7:a4:74:7b:1d:cc:d9:b6:73:ce:06:1e:31:cc:
                    99:f6:31:cc:20:af:d7:0f:eb:13:7b:84:93:d8:95:
                    9c:45:3b:16:40:6c:df:45:02:cc:3d:aa:b8:6d:4c:
                    e6:cd:fc:d0:3c:01:33:89:ef:5d:4e:18:15:a2:07:
                    6a:90:5f:33:9d:e9:d5:33:dd:fb:f6:6b:9a:f0:31:
                    90:77:3a:ee:12:fe:5f:8c:10:3e:2c:34:46:cf:5c:
                    e4:5b:02:95:2b:32:21:00:f3:80:09:e5:c5:60:13:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:02:15:44:08:6D:2B:C1:03:80:F3:77:7F:4A:81:6E:67:EF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93ef1fea-e4c8-3709-9f2b-10d69b604e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.249.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:da:bc:70:2d:2f:a0:ff:24:51:46:cf:87:38:04:d5:45:de:
         eb:51:4a:a1:3f:25:85:f0:1e:31:e3:45:b6:5b:62:ce:7c:b4:
         65:f1:4b:31:a6:6c:19:13:95:e2:9a:ac:fe:01:aa:8f:77:c5:
         ee:a6:cc:22:de:6c:b2:7b:e0:14:75:ee:17:a3:6f:1e:88:a6:
         01:e0:db:5f:6f:98:9c:9b:37:e5:14:72:ca:30:79:35:73:ad:
         5c:37:0b:57:2e:60:b9:1e:02:27:2b:75:7c:8f:db:36:92:66:
         f5:95:17:65:23:d0:37:73:32:64:08:21:75:79:ae:7f:b5:30:
         29:9a:01:73:4c:6d:5d:23:05:12:12:b9:35:3d:2f:0c:5b:d2:
         82:9d:cf:0d:ed:1d:8d:56:7a:c7:a0:38:e0:fd:af:73:67:d3:
         51:2f:d5:a8:a2:5d:1f:05:7a:8a:38:b6:ff:33:c0:c4:8b:cf:
         81:0d:1d:23:5c:c9:b2:50:6a:43:7f:22:9b:82:91:ff:f9:bb:
         99:22:39:df:82:13:e4:95:5a:fa:af:b8:c7:fb:b8:05:1b:7f:
         09:55:73:6f:22:5d:88:04:d2:c3:65:b5:f3:d8:6a:ef:d1:a6:
         c4:5a:70:dd:1e:56:59:82:21:d2:a1:0d:bd:3b:0e:71:43:e4:
         f8:de:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:16 2025 by rpki-client