Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/895edb69-35d6-3f35-887c-fe5498eb4ef2.roa
File:                     895edb69-35d6-3f35-887c-fe5498eb4ef2.roa (raw, json)
Hash identifier:          ySpNCs6Yv41cqLsbg1It3Lj5Luw9hYS0rNmbiIpXuJY=
Subject key identifier:   A5:77:15:14:CF:00:86:4F:BA:86:C7:F4:4C:8E:2F:68:DD:E2:56:7B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161619F105A9630A04A9700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/895edb69-35d6-3f35-887c-fe5498eb4ef2.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        75.137.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:61:9f:10:5a:96:30:a0:4a:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=c2134220-4ae4-4a3a-92e4-e3bc9695556c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:ad:e5:ff:46:b9:d3:5a:81:e7:a7:a9:1b:
                    08:0a:a9:ac:d3:22:da:8f:2a:2f:ae:ed:a3:0a:a6:
                    d2:c4:80:e7:d5:2a:3a:cd:85:b2:cd:9f:71:1f:4a:
                    73:43:9d:fc:85:3c:dd:be:98:a7:db:bb:d0:9b:12:
                    64:b9:db:db:79:27:f5:38:f6:a0:ff:ce:4e:64:59:
                    39:07:44:cb:3f:7d:d2:0c:11:b7:9c:15:a6:63:2d:
                    26:ee:2e:44:4e:d6:8d:90:69:7e:0d:bd:0d:c2:35:
                    3f:a3:12:d3:a6:4a:9d:d7:2a:fa:fa:98:23:9f:43:
                    eb:83:0f:10:c3:56:96:8c:5b:eb:8e:f1:1f:d3:30:
                    e5:17:fd:b3:8f:53:61:62:44:10:2b:9d:0b:af:bd:
                    9b:08:cd:e3:b4:ec:50:5f:85:ab:8f:c1:38:ca:f1:
                    8e:c2:49:e6:48:7b:f0:5c:85:a2:36:8f:e8:37:ed:
                    12:06:55:2b:56:e8:03:57:33:7a:b9:2b:d0:3e:13:
                    3b:24:f5:df:06:c0:2c:17:ef:0c:ae:de:ef:fd:c7:
                    96:7d:f8:9f:87:49:c9:7c:18:c3:19:ce:87:3a:ea:
                    41:58:2e:72:ce:30:90:1e:16:cc:74:9b:2e:b7:d2:
                    90:32:31:cb:60:1b:bc:67:29:81:00:21:46:d7:25:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:77:15:14:CF:00:86:4F:BA:86:C7:F4:4C:8E:2F:68:DD:E2:56:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/895edb69-35d6-3f35-887c-fe5498eb4ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.137.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:e7:45:c3:2e:ce:1a:f3:06:59:ce:d9:ec:33:5f:a8:fc:
         a0:50:7b:92:41:ab:db:c8:e1:c2:a9:b0:b8:be:49:6e:fc:7e:
         d0:31:d7:79:43:ed:43:7f:0b:e8:9c:2c:20:2e:b1:c0:2c:a1:
         20:14:54:32:d1:0d:53:1f:2f:05:ff:bb:91:73:66:0a:00:65:
         76:28:23:bf:97:c2:03:85:2c:72:5f:f3:30:43:11:c1:ca:cf:
         8c:20:b6:4e:aa:6d:33:6c:83:bd:97:56:48:5d:61:20:72:9b:
         6e:ce:c1:6e:f7:cb:b3:b8:76:13:d0:48:5a:b9:8f:8d:46:bf:
         75:98:c0:c7:e1:a9:8a:d4:df:7a:6f:e7:bb:a1:d6:6a:83:0a:
         be:82:7c:60:27:89:d2:b0:3a:9a:fa:85:b3:6a:7d:76:7f:09:
         cb:1f:48:fa:e7:60:8d:4e:25:bb:48:a8:ca:69:f8:d5:a7:f4:
         da:e5:7a:b6:98:9d:fb:c7:8b:97:8f:40:d2:7d:1c:ac:95:48:
         4a:06:e9:cd:05:32:2e:07:0b:4b:61:89:f5:4a:bf:31:7c:77:
         fb:0a:2d:cf:81:ac:ff:84:70:d2:40:80:53:7d:32:db:c8:f6:
         4d:64:0b:8e:9a:40:5a:2f:60:f1:17:14:2c:4c:dc:8a:f7:ff:
         0d:8e:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:00 2025 by rpki-client