Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/209f7ddb-9973-302e-86bd-48ddccfd4213.roa
File:                     209f7ddb-9973-302e-86bd-48ddccfd4213.roa (raw, json)
Hash identifier:          r9v9J0oYtBwuv5ckuqbS7kVmippsjdQtla5SwhmSAAI=
Subject key identifier:   FC:0E:E4:73:8D:86:DB:98:0B:41:92:5C:14:63:A2:BD:84:BF:D8:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496FBCCA30374D8CE9D3880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/209f7ddb-9973-302e-86bd-48ddccfd4213.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.231.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:fb:cc:a3:03:74:d8:ce:9d:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=295e9776-d186-4152-829c-b57e7a2c524b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:1e:21:59:c5:fd:95:1f:90:6d:e3:3b:a2:
                    8c:c2:f5:6b:aa:81:3e:68:fc:47:f3:f8:08:02:34:
                    48:c6:10:ed:e5:5e:94:eb:8d:7e:a1:f3:4c:c9:52:
                    9e:8d:2f:2c:35:91:ef:57:ca:1f:77:13:5e:77:19:
                    04:f2:29:8b:0c:30:f1:07:25:2f:94:e5:c6:fe:03:
                    44:a9:58:a9:a4:89:9c:ad:6c:58:2d:af:2f:f3:81:
                    31:8b:1c:0e:6a:85:bc:88:3f:98:2e:91:c2:72:b8:
                    f8:84:73:90:c5:9d:b1:a4:76:d5:52:8e:fa:93:8f:
                    13:8d:8d:f5:e4:15:32:13:37:32:a1:ce:e2:01:03:
                    a9:a1:44:29:8d:04:df:4a:f9:ff:61:50:29:40:84:
                    e4:ca:f0:7b:a4:2e:81:05:be:23:c6:11:5a:a3:72:
                    1a:74:28:ea:63:94:09:5b:bd:29:31:93:86:c0:0d:
                    ea:74:d5:c7:2d:a3:c6:99:52:08:46:f7:0b:5c:89:
                    a3:73:2b:7c:ab:99:e1:3c:d6:61:6c:e4:59:54:1d:
                    5a:8c:f0:9e:6a:ed:dd:0f:e6:7e:08:83:21:cf:a6:
                    3a:9e:7f:b5:28:0b:38:3d:4a:60:88:cb:aa:2d:9a:
                    a4:a7:da:88:a7:3c:9b:05:fc:14:ff:fe:f6:dd:af:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:E4:73:8D:86:DB:98:0B:41:92:5C:14:63:A2:BD:84:BF:D8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/209f7ddb-9973-302e-86bd-48ddccfd4213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.231.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:63:7a:10:cd:7e:4e:d5:79:5b:3a:64:27:5f:bb:8f:08:b5:
         05:8a:e5:f2:9f:ac:4f:69:a8:62:44:84:bf:84:41:f3:52:07:
         b0:ab:78:71:86:c4:12:62:94:94:97:02:ca:d4:ac:98:f8:b2:
         28:73:44:20:b3:9b:c9:5e:c6:4d:8a:17:69:45:0f:b1:1d:85:
         5d:aa:b8:3c:d1:3b:a3:ff:f8:fe:1f:c7:46:6a:4c:f2:1d:8b:
         95:83:27:68:49:ef:94:ff:8d:54:46:b4:90:bd:5b:80:49:5b:
         bb:2c:9e:f1:26:63:a3:64:d8:b0:fb:1d:42:3b:1f:3a:cc:67:
         6e:ce:ab:ea:a9:52:60:3c:9f:ba:57:ca:4e:6d:d6:ef:4b:5d:
         c6:88:dd:32:c0:dd:2d:94:ca:60:9f:ee:b7:ca:e9:be:65:33:
         93:75:35:c2:36:af:40:a5:a0:97:d7:c8:41:2b:3b:cb:dd:fc:
         89:6f:ea:c7:2e:98:72:7b:11:1e:f8:e0:6b:85:63:ce:bb:08:
         9f:da:70:93:1c:0d:6b:41:c8:ab:58:9d:be:c8:dc:eb:d2:ab:
         3d:88:c1:40:13:2d:64:0e:aa:15:cb:c7:2f:c9:ea:aa:64:65:
         9a:e7:4b:26:9f:e1:3e:a9:29:4a:7e:6f:20:8f:6e:97:6e:9d:
         1b:3a:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:47 2025 by rpki-client