Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa
File:                     11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa (raw, json)
Hash identifier:          MGM2+Zz9dIAC+dXFKjAvQbg0m+pCIOXfApWx747sQxU=
Subject key identifier:   71:D7:8C:BA:90:35:6D:5E:EF:19:B1:48:36:DD:70:6F:D4:4D:09:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B663209F7CBB6637ABEE50E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     6167
IP address blocks:        174.220.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:09:f7:cb:b6:63:7a:be:e5:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=8b152729-8b62-47a5-9f08-b1d5b35a1721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:b3:3e:5d:48:43:c5:3d:06:75:71:ac:e3:
                    0c:1c:74:fe:51:ed:65:8e:60:76:9a:62:7e:04:06:
                    7d:68:59:5b:a3:d5:68:57:aa:de:06:37:34:ed:71:
                    25:c4:46:b4:bc:e9:45:e1:f7:a0:4a:fe:34:4c:33:
                    78:87:8a:09:05:dc:39:e3:ad:9b:a3:fc:4c:19:bc:
                    81:d7:9e:dd:94:97:49:cc:48:86:f8:9a:b3:3e:fb:
                    d7:2b:03:cf:4a:c1:59:53:46:b7:c7:b0:8f:e5:a6:
                    1c:ca:a9:4c:ca:8e:89:29:18:c8:26:ff:a3:e6:3f:
                    79:39:ae:2d:13:3a:81:41:29:c0:9e:94:2a:1f:b2:
                    39:cf:90:9a:36:40:26:8e:72:19:4e:dd:30:a6:05:
                    be:2d:b4:bd:99:1f:3d:bc:05:61:71:f6:3b:bc:5a:
                    7b:a1:cc:a5:00:85:76:3d:e4:0e:b1:0d:71:97:6f:
                    b6:06:d8:45:4d:86:c3:57:6b:af:2c:e8:fe:49:70:
                    da:b7:8c:ff:1d:0b:84:80:0e:ef:8d:8a:ef:09:0c:
                    ae:9b:f7:ce:d0:77:62:ae:ef:5e:9d:6a:dd:c2:11:
                    2d:36:b7:2f:e1:ce:63:4b:2a:26:8a:ab:f0:3a:3b:
                    5c:2b:7f:9e:82:07:1b:fd:ce:1f:8c:24:7f:16:35:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D7:8C:BA:90:35:6D:5E:EF:19:B1:48:36:DD:70:6F:D4:4D:09:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:31:d9:6f:57:38:cb:a1:46:7e:88:6c:b5:8e:47:43:3f:
         49:00:d6:f6:dc:4d:b1:af:6c:80:6a:82:39:a0:9e:c5:e1:8c:
         61:b0:13:8c:1e:e9:3c:b0:a9:3f:ba:41:2b:f1:c8:bf:1a:50:
         5a:d2:bf:3d:60:56:e5:d9:77:73:51:5c:8c:8a:09:ee:0e:42:
         88:86:bb:8c:ad:0f:40:4b:43:83:94:fa:3e:01:ea:34:1b:5c:
         dc:e6:d0:0b:2a:45:f3:c6:56:43:37:85:18:dc:7f:1d:55:29:
         79:97:8c:41:de:8f:02:6d:a1:ee:45:b9:29:f6:bc:f3:16:09:
         20:0f:3e:0d:21:63:6d:93:82:69:08:ae:fd:d2:45:13:a5:84:
         bd:d4:ec:85:9a:89:e5:f7:15:45:fd:fe:1a:b2:fd:8b:b5:45:
         d5:8f:29:a0:72:54:95:06:41:a6:41:27:4e:84:ab:99:a6:1b:
         79:ed:a5:21:93:86:da:95:42:63:29:3b:6d:ee:27:8a:62:2a:
         71:06:f8:f7:5b:28:10:ca:70:77:25:af:fc:bf:ac:91:d2:35:
         10:35:ed:aa:4f:3b:98:8a:93:8f:3d:e2:19:df:4a:a2:48:d4:
         47:bb:25:be:bd:d5:31:71:e0:52:87:17:ad:db:93:da:3f:da:
         56:32:84:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgn3y7Zjer7lDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
OGIxNTI3MjktOGI2Mi00N2E1LTlmMDgtYjFkNWIzNWExNzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZuzPl1IQ8U9BnVxrOMMHHT+Ue1ljmB2mmJ+
BAZ9aFlbo9VoV6reBjc07XElxEa0vOlF4fegSv40TDN4h4oJBdw5462bo/xMGbyB
157dlJdJzEiG+JqzPvvXKwPPSsFZU0a3x7CP5aYcyqlMyo6JKRjIJv+j5j95Oa4t
EzqBQSnAnpQqH7I5z5CaNkAmjnIZTt0wpgW+LbS9mR89vAVhcfY7vFp7ocylAIV2
PeQOsQ1xl2+2BthFTYbDV2uvLOj+SXDat4z/HQuEgA7vjYrvCQyum/fO0Hdiru9e
nWrdwhEtNrcv4c5jSyomiqvwOjtcK3+eggcb/c4fjCR/FjWrlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHXjLqQNW1e7xmxSDbdcG/UTQm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTFkOGEzZDAtOThjMS0z
N2ZkLWI2NjYtNmUwYWYzYjIyOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACg+MdlvVzjLoUZ+iGy1jkdDP0kA1vbcTbGvbIBqgjmgnsXhjGGwE4we
6TywqT+6QSvxyL8aUFrSvz1gVuXZd3NRXIyKCe4OQoiGu4ytD0BLQ4OU+j4B6jQb
XNzm0AsqRfPGVkM3hRjcfx1VKXmXjEHejwJtoe5FuSn2vPMWCSAPPg0hY22TgmkI
rv3SRROlhL3U7IWaieX3FUX9/hqy/Yu1RdWPKaByVJUGQaZBJ06Eq5mmG3ntpSGT
htqVQmMpO23uJ4piKnEG+PdbKBDKcHclr/y/rJHSNRA17apPO5iKk4894hnfSqJI
1Ee7Jb691TFx4FKHF63bk9o/2lYyhII=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:09 2025 by rpki-client