Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e635c05-efe7-3bd6-95ba-ecafe96b0ff3.roa
File:                     3e635c05-efe7-3bd6-95ba-ecafe96b0ff3.roa (raw, json)
Hash identifier:          WTrAWASyT5yuOwNXNCMYukISEn0hXxGmS8nCuIwOICw=
Subject key identifier:   23:CF:3C:03:C2:35:32:53:EF:FC:5C:95:9F:CB:D6:67:16:89:97:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CA06527F7C524B1EC6F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e635c05-efe7-3bd6-95ba-ecafe96b0ff3.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.216.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:a0:65:27:f7:c5:24:b1:ec:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=7070e661-35fe-4f7c-99da-6be74c0e89f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:16:47:c2:1d:83:dd:af:f5:be:ad:48:53:
                    dd:76:57:ca:db:1b:8a:ac:a2:0a:41:18:f7:f4:f9:
                    d7:fe:42:45:38:7b:b0:9d:f8:43:bd:67:04:4e:5f:
                    37:1f:e1:38:9a:80:fb:a2:3e:fd:92:ff:9d:0c:b9:
                    c5:1c:32:a7:3e:1d:f1:63:79:32:42:61:f7:81:04:
                    87:b1:78:0f:80:1f:38:25:6c:9c:f4:16:14:dd:dd:
                    12:4b:bf:88:14:a7:ee:64:d3:6d:91:99:25:87:2d:
                    3e:c4:0a:ac:7d:76:8b:bc:1a:70:53:35:7a:10:e1:
                    57:0c:2b:c3:13:c2:70:65:51:00:0e:f0:8f:30:50:
                    74:92:ba:62:c1:9a:27:a1:cc:bb:8b:37:ce:8a:4f:
                    8b:24:f1:29:22:07:7b:7f:d4:40:94:5d:d0:cb:81:
                    6d:8d:4d:49:2f:0d:0e:6f:2d:a3:5a:e8:1d:d0:4f:
                    38:7d:fa:96:03:ec:ed:0f:9f:3d:ed:d2:91:cb:10:
                    c7:be:33:3d:97:6f:f0:45:88:6a:84:ca:3b:53:44:
                    09:83:b4:de:c3:f5:e5:d3:98:ca:5f:a3:ee:d7:22:
                    cd:e6:38:de:c2:38:38:37:23:0f:c4:c3:e2:0c:74:
                    cb:48:e2:dd:57:04:69:86:2f:7b:41:ab:c4:21:33:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CF:3C:03:C2:35:32:53:EF:FC:5C:95:9F:CB:D6:67:16:89:97:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e635c05-efe7-3bd6-95ba-ecafe96b0ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:63:2b:49:2a:d8:e8:72:67:91:72:ec:70:87:e3:47:6b:
         9c:64:99:5a:b6:f1:e0:7a:8a:fa:85:c2:b4:75:ab:f0:c1:a1:
         52:5c:62:2e:84:89:2f:6f:c7:49:8d:1f:9f:a8:0f:64:51:dc:
         4d:7d:ad:65:af:85:53:9e:a4:a9:c8:da:7c:5e:ff:0a:65:65:
         f5:17:c8:fc:e2:d0:41:3d:46:4e:88:70:4b:8e:2f:d9:7c:df:
         71:6d:9f:04:49:65:2f:9e:a9:f1:cf:53:b5:c6:dc:89:e5:44:
         0b:3d:88:c8:1d:69:0e:c8:6d:ed:85:cc:ad:a9:1b:7f:2f:5e:
         fe:91:0b:b0:8e:66:2f:e7:d0:f0:53:7e:65:ef:ed:39:a8:e3:
         26:b4:71:53:9c:f5:be:c9:24:b9:35:be:b1:84:5b:6d:a4:42:
         e2:22:45:a8:2c:2b:d9:89:8b:1d:05:b9:69:80:69:be:66:ec:
         4e:36:d4:e3:0c:a0:6b:3a:69:cf:b2:3a:34:da:0c:63:24:8c:
         42:a8:bb:2d:2e:7a:3a:95:68:d4:67:b6:70:5e:1f:94:16:0e:
         06:8e:bb:2c:60:65:05:0b:52:03:d6:bb:51:f4:5a:74:11:19:
         92:a1:a4:fe:b0:81:96:90:a2:ce:29:22:33:7a:1e:c5:80:f6:
         d4:00:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:11 2025 by rpki-client