Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b95f79e-5480-37f9-9b93-a2eaac177f3b.roa
File:                     1b95f79e-5480-37f9-9b93-a2eaac177f3b.roa (raw, json)
Hash identifier:          z0vkCQ7WVY1GDi03zFZb3lr7/G9FBF3Z9v3pmO7/Gik=
Subject key identifier:   1A:1C:3D:3F:4D:31:C1:18:70:7B:D3:CB:AA:A9:8D:D4:D9:9B:28:5F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1615FF723F2F53A0C2796C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b95f79e-5480-37f9-9b93-a2eaac177f3b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        75.133.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:5f:f7:23:f2:f5:3a:0c:27:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3faac5c0-e513-420b-862b-86f90ff75a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:23:05:60:42:b4:2b:2c:d6:f2:3e:27:e2:
                    9b:90:02:f2:80:cc:23:2c:7d:78:b6:dc:3a:b9:44:
                    61:6e:5b:f7:4f:47:dd:7b:66:e8:21:49:85:56:a4:
                    a5:de:cb:2c:c1:74:bc:a7:3e:e1:39:bd:fb:f9:c9:
                    d9:bd:9e:f7:01:6b:c8:71:be:bd:d4:13:c7:fc:03:
                    79:e0:4e:26:c9:81:e9:e1:f4:37:63:23:96:d3:6c:
                    f7:c8:14:7d:1c:c6:52:43:cc:2c:f2:f3:ac:cf:e2:
                    ae:43:2a:02:b6:49:49:55:9c:ae:e7:43:a7:70:20:
                    97:5a:df:00:7d:96:1e:72:f4:2d:25:da:21:66:77:
                    3b:1b:13:f4:f8:a4:75:d1:f7:6e:ab:21:75:7d:77:
                    f3:b9:68:78:40:61:6a:04:90:69:01:0d:1a:bd:15:
                    1c:d8:c8:a0:83:4e:e0:5d:ee:78:09:19:3b:58:fd:
                    9a:06:27:dc:99:ff:b6:3e:31:00:fe:65:57:1e:9a:
                    1d:3e:3b:df:c3:1b:d6:4b:9a:e7:33:ef:b4:af:b1:
                    b1:89:18:1b:70:b8:41:a4:50:13:24:68:37:dc:56:
                    1e:4a:0b:ee:77:4f:c3:68:5b:bb:52:57:a8:d4:89:
                    bc:49:f2:86:95:e0:42:ec:f6:c9:36:4a:66:22:e9:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:3D:3F:4D:31:C1:18:70:7B:D3:CB:AA:A9:8D:D4:D9:9B:28:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b95f79e-5480-37f9-9b93-a2eaac177f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.133.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d7:94:cb:21:3c:51:aa:79:bf:87:27:34:b6:fb:13:6f:31:
         ef:5c:c3:af:88:67:bf:7d:08:ce:52:90:5b:99:83:f4:18:15:
         a1:59:2e:49:15:92:ca:54:f8:9c:77:60:a4:df:9f:27:07:fb:
         2d:3f:73:06:e0:f7:31:b5:b8:e8:91:f1:a8:18:f1:a5:cf:cf:
         29:a8:6a:e5:60:71:28:57:e2:6f:aa:24:1d:03:d3:cf:8e:11:
         99:94:2d:43:db:93:1f:cf:d7:af:b6:57:9f:b6:ab:de:1c:9c:
         96:d0:ab:64:67:09:79:9e:96:53:b7:67:eb:e1:f0:13:32:22:
         87:f9:0b:0f:13:01:b1:28:57:79:e1:d8:7b:2d:cb:e0:4b:bf:
         0e:78:8c:a8:eb:09:0b:b2:d9:c4:7a:e8:24:96:55:8f:bc:21:
         6d:23:78:bb:9c:95:45:58:0b:0a:57:10:8b:7c:28:24:0e:3a:
         d7:11:ce:f1:1c:ec:0b:33:9c:09:a7:60:c9:eb:21:a6:58:57:
         67:35:64:69:85:cf:71:f0:07:b0:4c:f0:36:d7:df:bc:da:ab:
         03:61:aa:c8:11:a9:a5:1b:84:8f:18:ea:1f:92:27:c8:2c:24:
         d4:4f:e2:71:a1:26:4f:bf:8d:df:12:a6:7d:b5:81:25:1e:4b:
         f9:b3:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:47 2025 by rpki-client