Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f409517-70f1-35f7-8674-d8b76eaef76f.roa
File:                     4f409517-70f1-35f7-8674-d8b76eaef76f.roa (raw, json)
Hash identifier:          2MEdCd0XfaAq9w+vaOHGqa/2iI0dsIS4V7P1oGHlSS4=
Subject key identifier:   38:8E:3F:A2:86:11:20:16:27:AB:0A:8C:0B:FF:A6:3A:91:BB:06:AD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA162079302DB8DD377E21000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f409517-70f1-35f7-8674-d8b76eaef76f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        75.130.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:07:93:02:db:8d:d3:77:e2:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=765c322c-4b49-48d7-b7d3-088dc39011e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:52:d9:18:36:ad:66:01:67:13:5c:3b:ba:
                    d1:ee:d9:8d:eb:e0:d7:ae:db:12:d3:3a:bd:81:1e:
                    ba:b1:8b:6a:cd:ed:d5:d7:2e:80:91:74:d9:0d:1a:
                    91:8a:0c:c8:da:2d:dc:3b:bd:cc:67:7c:8b:86:e7:
                    c5:9c:ef:b7:78:ad:5d:b8:c4:5f:26:d8:64:27:81:
                    c8:8e:9d:90:7b:cb:54:12:56:5d:3d:3d:9c:3c:30:
                    0e:75:3f:27:36:ea:14:96:4a:21:92:ee:34:2b:a9:
                    c6:ee:40:72:c5:b1:ce:92:c9:b1:ed:3e:5f:1d:98:
                    98:89:45:2a:3d:8f:c2:47:1d:b0:c5:48:27:de:10:
                    ce:d3:78:24:fe:df:94:f5:4e:87:79:a1:e3:21:fb:
                    0a:f0:f0:71:6e:f7:59:04:1b:98:de:c9:8c:3f:87:
                    26:81:8b:bb:3c:d1:20:50:13:59:66:2f:23:7b:a5:
                    bc:46:82:68:cb:e6:30:12:d9:d0:3c:e2:5a:f0:f4:
                    47:c2:2a:07:3d:e2:5d:42:9b:00:fc:ca:22:1b:0d:
                    c4:fa:52:65:32:3e:fd:2a:26:52:09:d1:b7:6b:1a:
                    91:6e:23:c4:95:80:75:12:b1:d3:a8:1c:43:04:1d:
                    b1:14:e5:02:e1:66:76:a7:a1:af:06:3d:38:6f:03:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:3F:A2:86:11:20:16:27:AB:0A:8C:0B:FF:A6:3A:91:BB:06:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f409517-70f1-35f7-8674-d8b76eaef76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.130.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:27:71:37:23:0d:10:2b:98:30:de:84:cf:b6:a0:e2:c7:
         86:22:2a:1c:68:b9:44:1b:69:a6:5a:40:d8:ca:36:c3:bc:ff:
         81:6b:2d:c1:9e:60:51:8a:b9:7a:aa:47:bf:3b:93:1d:48:12:
         ef:36:83:a6:8a:d5:eb:a0:23:1f:ad:c2:d3:3c:33:e8:0c:2e:
         fd:9a:ae:29:a0:bd:6b:8c:86:c3:f9:04:05:bc:de:54:de:b9:
         cf:de:87:34:f3:fc:ef:49:2d:19:a9:af:6a:f0:52:fb:7d:24:
         7d:cc:ee:61:d3:86:f9:08:0d:a3:11:aa:8a:a6:e5:f3:77:57:
         33:79:a5:89:8c:02:64:55:a9:1e:71:ec:7e:c3:81:f1:e3:72:
         b9:ba:76:6b:e4:21:23:c8:c9:17:f7:13:d8:4f:01:ed:c0:87:
         f1:a8:f6:db:04:9b:7e:3a:e0:e4:49:2b:48:ce:e1:bb:68:af:
         45:8e:68:10:be:8a:9b:7a:1d:f3:a3:4a:7b:8d:50:f9:1e:d3:
         5f:00:ec:be:5b:fb:ba:9e:da:b9:b1:2c:6d:43:62:be:ce:51:
         8d:c9:bf:50:50:6c:7d:c1:b5:9c:9b:53:32:05:d5:94:ea:c7:
         2e:ff:eb:3e:d2:a2:ed:9e:cb:8b:f3:cf:a2:7e:20:c9:ce:2d:
         3e:be:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:13 2025 by rpki-client