Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/511047bf-9fe6-3570-a58f-d03146f923a2.roa
File:                     511047bf-9fe6-3570-a58f-d03146f923a2.roa (raw, json)
Hash identifier:          /rWlZWGVqm8Yy9y6Oqa4tx8K6soE+qQB7HHDm658MDo=
Subject key identifier:   6F:A7:6A:51:44:1D:91:AB:96:69:DF:0F:C2:FC:6F:A1:C0:3E:42:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F2C636D5DB1F303CE280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/511047bf-9fe6-3570-a58f-d03146f923a2.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.198.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f2:c6:36:d5:db:1f:30:3c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=fd43a12d-dcdf-467d-8ff8-7161da89c5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:c3:16:48:9a:10:2c:52:9e:1a:e8:63:97:
                    d7:53:1d:cf:b3:68:e4:b6:f8:81:90:e2:9e:b2:38:
                    2e:96:c8:38:ad:4a:20:72:32:89:1a:7d:2e:2c:13:
                    b5:ef:ab:79:36:e0:f7:49:d2:ca:77:f8:f0:1b:f2:
                    55:95:4c:68:ef:cf:4c:88:54:3a:6c:d8:48:15:9f:
                    7a:99:d2:ef:e5:b7:bb:5d:c1:b7:93:e1:d7:f3:4b:
                    ff:c1:b0:4b:92:97:d3:68:63:6e:2c:cf:0e:8a:ae:
                    4c:82:a1:83:9d:75:35:ae:87:f1:cd:d5:23:78:28:
                    3c:62:52:3f:cc:d3:58:c3:cc:8f:e4:9d:bc:17:0c:
                    ed:f9:89:7c:ea:4e:52:f6:0c:30:bf:12:78:9d:b1:
                    5c:42:5d:8f:82:ce:4c:53:60:8d:24:5a:aa:39:49:
                    f4:86:e0:f3:01:85:03:bd:34:fc:8b:a3:d2:eb:3c:
                    5c:33:46:49:ce:67:f9:86:69:2e:a5:99:86:a4:ee:
                    65:96:23:e7:d6:9a:9a:ed:d6:96:49:43:35:18:51:
                    c9:ea:d7:49:71:13:44:45:f9:98:94:68:5b:79:dd:
                    90:1a:62:ae:a2:02:a8:9d:58:0c:ae:c0:1e:3d:39:
                    44:9f:78:94:3b:81:bc:7e:1b:6b:7c:26:7a:3a:fc:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A7:6A:51:44:1D:91:AB:96:69:DF:0F:C2:FC:6F:A1:C0:3E:42:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/511047bf-9fe6-3570-a58f-d03146f923a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.198.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:2e:3a:33:f6:59:92:8f:15:9b:4c:11:a8:00:43:2c:bf:
         97:c9:89:3e:6f:f4:93:29:47:7d:94:50:19:f6:30:38:c4:27:
         bf:76:44:17:da:69:9c:82:52:2d:34:7f:c9:a1:ce:e2:62:33:
         bc:cf:61:bf:41:c2:4e:36:87:79:6e:d3:d8:c6:8d:82:12:14:
         df:4d:7b:9d:eb:45:b1:c3:52:e8:34:8e:b9:7b:70:28:75:40:
         c6:47:7b:d6:b3:a5:d1:3d:8f:d0:91:24:04:e8:aa:db:58:fd:
         7e:dc:3e:2e:ea:37:94:d1:29:1b:08:e6:a0:c3:f1:1a:fb:b5:
         a5:ae:b9:a9:e7:b3:df:27:20:9b:42:26:76:c9:0f:fc:a7:13:
         e1:eb:23:5c:40:7e:67:9c:9b:76:76:83:47:05:c9:05:ba:82:
         26:2a:02:a1:e0:ea:3c:ef:89:f1:94:f7:4a:4e:3c:a7:c5:d9:
         7b:ea:85:0c:82:44:b6:d1:96:07:94:d3:8c:71:ed:17:7e:81:
         18:9f:30:a5:22:f9:95:cf:b5:6d:0d:43:06:2e:53:a2:bf:78:
         19:3f:de:f5:88:69:f5:4d:53:22:68:00:0a:82:f9:13:f6:e6:
         c7:4c:89:99:e1:57:80:5a:5c:91:85:52:e5:b7:c5:48:80:d1:
         14:b9:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:44 2025 by rpki-client