Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa
File:                     14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa (raw, json)
Hash identifier:          RVspYMAvzhBvYeJd0L3bySU1OsMP7/goYZ+78WWan50=
Subject key identifier:   66:E1:AF:0A:F0:DF:F4:6B:18:B5:BB:D5:1C:A2:A3:7D:E4:15:C2:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FC7A1EFB46D49EC1D980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.233.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fc:7a:1e:fb:46:d4:9e:c1:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=c7b3aac5-0542-4337-91db-ac5202feba29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:1e:32:1b:05:95:09:fe:03:84:75:c6:1a:
                    33:6f:4b:79:d9:8e:56:97:34:6f:ad:b7:4a:d6:33:
                    35:c9:2a:dd:64:52:e0:eb:46:ab:09:0b:8f:bd:09:
                    69:25:e9:20:b9:99:0c:6d:fa:17:bf:25:f3:dd:06:
                    26:a1:9f:4a:7f:3e:58:23:b1:b0:77:b0:29:a2:1e:
                    e1:c7:6f:5e:27:90:94:6e:86:47:c5:f2:05:3c:eb:
                    78:c1:4e:9e:37:30:f6:2d:bc:3f:04:48:54:d3:16:
                    2a:f7:38:59:3b:66:89:87:b7:6c:e7:63:aa:de:12:
                    3d:a9:ce:28:07:c1:84:e2:af:75:d6:66:bd:d5:37:
                    a2:54:8d:45:7a:43:20:cd:b6:55:d8:2a:5a:6c:a0:
                    40:36:01:c1:b8:a6:1a:c6:43:23:d3:4f:51:23:12:
                    95:14:e9:d5:b7:d6:02:62:12:26:7a:6f:ef:f2:a1:
                    ef:44:3c:89:d8:ea:25:bf:24:7c:ae:5f:7e:2e:bc:
                    c0:b3:d0:27:53:af:ec:8b:d4:9f:44:56:a8:74:97:
                    00:40:b8:45:81:db:a9:ea:be:e0:40:87:89:3e:82:
                    b6:c9:30:97:7b:58:e8:62:b0:dd:d9:50:51:a5:98:
                    c5:a4:9c:5a:7e:f8:fc:8c:d5:97:5d:bc:eb:07:c0:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E1:AF:0A:F0:DF:F4:6B:18:B5:BB:D5:1C:A2:A3:7D:E4:15:C2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14a7e56f-23c6-32e7-9ccb-6ab6c46b7260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:13:f9:1b:18:84:58:78:53:e4:aa:a3:5c:e4:37:01:e3:db:
         8b:8e:0d:6f:b7:1d:53:b2:e4:79:df:47:f9:c7:22:b0:75:13:
         46:ee:a9:99:97:b1:e3:26:95:7c:1d:16:a8:8e:7a:b4:4f:84:
         a2:02:04:b4:27:22:fd:6b:ea:1f:9b:b6:4a:46:83:fc:06:f2:
         da:d0:de:a9:8a:af:38:84:65:d1:b8:ac:2a:96:7a:ef:e7:99:
         73:a4:1e:57:fb:11:65:a4:8b:63:65:db:17:70:3b:52:b7:6c:
         73:63:df:6b:b2:29:c8:3a:aa:16:b9:93:a3:ee:70:ce:59:e1:
         ff:bf:57:2f:b9:c3:63:67:2c:1f:38:7f:15:98:9f:4d:b7:36:
         a3:84:66:70:17:da:f3:11:cd:6d:8b:8e:b9:85:d5:ec:37:48:
         62:fd:58:fc:b4:08:72:c5:6f:05:23:12:ad:3e:74:1d:1c:69:
         88:17:be:1f:3c:cc:44:bf:fb:07:16:64:e5:90:78:13:59:af:
         52:1d:de:0d:0b:79:72:94:43:6b:67:5e:54:3e:0c:70:75:9c:
         31:0f:be:42:ab:be:ca:0e:71:65:b0:11:0b:c0:6c:07:d2:7e:
         d0:f9:d7:9b:80:7f:e6:77:e0:15:24:d4:6a:47:d4:b4:ec:05:
         83:32:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:14:44 2025 by rpki-client