Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e8040e0-7c02-3498-ae13-1fea92d8dab3.roa
File:                     2e8040e0-7c02-3498-ae13-1fea92d8dab3.roa (raw, json)
Hash identifier:          3+8dFttkxiLsv8duQ9WClinA/A0/j0cKFGn9d5COp58=
Subject key identifier:   0B:4D:4D:05:9C:71:62:BB:89:14:39:A7:D8:A0:91:4A:A2:34:8F:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F74CB0A8D1AEB4F2B800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e8040e0-7c02-3498-ae13-1fea92d8dab3.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.209.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f7:4c:b0:a8:d1:ae:b4:f2:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=782149e9-513f-440b-bd40-570b8015bd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:45:d5:57:d4:32:20:5d:20:db:30:ff:d2:
                    cb:bc:f6:99:6c:21:ee:83:69:fb:4d:02:65:05:99:
                    dd:bd:01:ff:3a:f9:85:e5:9c:72:49:26:8d:20:bc:
                    63:24:cd:e8:32:49:a6:e0:d1:66:cf:15:b4:cd:a8:
                    e7:6a:24:d9:d0:1d:ac:8e:4e:9b:7c:51:b7:a2:bb:
                    73:d4:81:26:04:44:89:a5:bd:fb:cc:4b:ab:7e:42:
                    a8:77:cb:86:89:1c:1d:90:15:89:c2:d5:3f:d2:63:
                    06:94:fa:f1:c7:54:d4:f6:49:77:a0:01:4b:fb:be:
                    76:c1:bf:d5:01:68:21:d6:69:4d:63:ad:29:e4:23:
                    eb:d3:43:52:53:eb:04:fe:cb:a0:d8:a1:78:4f:4f:
                    d9:f5:23:a2:67:4b:cd:d7:c4:eb:d7:28:b8:ce:2b:
                    a3:58:0b:1b:2b:38:77:87:a3:1b:aa:29:3e:48:56:
                    1c:dd:e0:96:52:e2:ec:ed:0c:93:d6:a0:ee:99:6f:
                    da:31:f2:33:52:19:34:3e:8d:0a:30:b1:8b:4e:57:
                    7d:71:60:a1:dd:47:3f:10:a4:60:16:b0:4c:08:9d:
                    9d:58:57:27:f1:6e:ad:46:4c:26:02:9d:36:a8:19:
                    52:1b:19:ea:1c:fa:8c:f6:c1:ca:84:0e:7b:9c:5a:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:4D:05:9C:71:62:BB:89:14:39:A7:D8:A0:91:4A:A2:34:8F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e8040e0-7c02-3498-ae13-1fea92d8dab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.209.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:64:90:f6:18:7d:0b:9a:a3:cc:2f:2c:55:e5:93:9f:d2:
         ac:2f:c7:d1:3d:41:99:89:50:9d:11:83:a7:00:a1:41:a5:b2:
         7b:69:d5:8d:bf:42:24:5f:06:bc:b4:ab:6c:f6:01:02:ae:91:
         cf:2a:ee:35:3d:b3:98:8c:16:7f:b4:7e:4c:a4:4e:8d:3e:a9:
         19:19:34:f7:d7:8a:24:e5:d9:0e:46:c5:61:6b:95:4b:4d:5f:
         a8:9b:71:4d:8c:4c:4b:d0:ed:57:3c:01:14:cc:03:64:0b:a3:
         cb:c0:d1:4e:b3:36:2b:e3:26:69:b6:74:f7:6e:6a:c0:11:5f:
         db:99:64:3b:f3:73:ab:20:82:3d:e9:1f:70:e7:c8:b1:4a:b7:
         e5:56:ec:97:05:49:91:fb:93:99:7d:07:8f:a8:d4:b8:1b:dc:
         c3:bd:13:90:2a:88:fe:fd:51:46:fe:71:2a:8b:e3:9a:6e:d4:
         b2:92:b2:88:7f:7e:8e:0e:4e:2c:b5:af:b8:34:93:7d:df:72:
         2d:10:7e:56:ba:e6:a9:99:0c:15:f2:56:00:1d:cc:f1:dd:b7:
         55:b0:03:51:46:e4:85:5d:25:af:4d:3f:1e:02:e2:a9:42:5b:
         90:6f:43:06:20:cb:e4:ab:70:17:2b:73:b6:3d:9c:4e:61:5b:
         7c:ac:b2:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklvdMsKjRrrTyuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NzgyMTQ5ZTktNTEzZi00NDBiLWJkNDAtNTcwYjgwMTViZDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaFF1VfUMiBdINsw/9LLvPaZbCHug2n7TQJl
BZndvQH/OvmF5ZxySSaNILxjJM3oMkmm4NFmzxW0zajnaiTZ0B2sjk6bfFG3ortz
1IEmBESJpb37zEurfkKod8uGiRwdkBWJwtU/0mMGlPrxx1TU9kl3oAFL+752wb/V
AWgh1mlNY60p5CPr00NSU+sE/sug2KF4T0/Z9SOiZ0vN18Tr1yi4ziujWAsbKzh3
h6Mbqik+SFYc3eCWUuLs7QyT1qDumW/aMfIzUhk0Po0KMLGLTld9cWCh3Uc/EKRg
FrBMCJ2dWFcn8W6tRkwmAp02qBlSGxnqHPqM9sHKhA57nFp+6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtNTQWccWK7iRQ5p9igkUqiNI93MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmU4MDQwZTAtN2MwMi0z
NDk4LWFlMTMtMWZlYTkyZDhkYWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGS9EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZPZJD2GH0LmqPMLyxV5ZOf0qwvx9E9QZmJUJ0Rg6cAoUGlsntp1Y2/
QiRfBry0q2z2AQKukc8q7jU9s5iMFn+0fkykTo0+qRkZNPfXiiTl2Q5GxWFrlUtN
X6ibcU2MTEvQ7Vc8ARTMA2QLo8vA0U6zNivjJmm2dPduasARX9uZZDvzc6sggj3p
H3DnyLFKt+VW7JcFSZH7k5l9B4+o1Lgb3MO9E5AqiP79UUb+cSqL45pu1LKSsoh/
fo4OTiy1r7g0k33fci0Qfla65qmZDBXyVgAdzPHdt1WwA1FG5IVdJa9NPx4C4qlC
W5BvQwYgy+SrcBcrc7Y9nE5hW3ysssI=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:35 2025 by rpki-client