Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80b42cde-275d-358b-b702-ff85a3ef2e06.roa
File:                     80b42cde-275d-358b-b702-ff85a3ef2e06.roa (raw, json)
Hash identifier:          Z9dg9GrW8krakHI2Ld4W7jNdfz/uqohrhKddETPpG9I=
Subject key identifier:   8C:03:E3:03:78:9A:3E:F2:F2:A8:68:E6:2F:7B:11:75:D8:D3:07:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F5AAAEC08CCB6D12CF60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80b42cde-275d-358b-b702-ff85a3ef2e06.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.205.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f5:aa:ae:c0:8c:cb:6d:12:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=87e4bb0c-b497-4c83-8737-c3616101ddf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:8a:39:20:64:89:4e:03:93:c5:0e:d3:d6:
                    ac:33:88:04:f8:97:3b:12:b4:fd:97:e3:f0:c1:68:
                    f5:3d:66:4c:bb:7d:fd:3b:29:ce:aa:ab:24:be:43:
                    42:5a:f4:9c:d1:78:ac:fe:62:1c:8d:eb:1e:b4:c7:
                    ca:30:e3:cb:49:14:7a:e2:04:88:48:c2:d4:c8:05:
                    3f:40:fc:d1:bd:99:c4:0a:57:0a:20:ae:30:41:a8:
                    fb:46:94:40:9c:fa:a8:c9:cb:b4:4e:78:24:be:b7:
                    9c:92:80:63:d0:0d:f3:c9:40:98:a8:44:0e:a0:f1:
                    03:8c:f3:c7:f7:a9:c3:9e:f2:bc:49:27:1d:57:4a:
                    a0:42:92:be:aa:7c:b1:d6:00:34:a2:61:72:1b:e2:
                    51:2a:0f:65:cf:39:74:ac:78:f7:e2:fd:81:94:72:
                    21:de:bb:2a:89:74:1b:77:69:70:1e:c5:68:2b:04:
                    86:5b:c2:1a:ea:e2:e6:1c:34:56:6f:e6:06:84:69:
                    a7:2b:07:f3:16:16:b6:fe:af:9b:d3:4e:86:19:22:
                    21:36:27:ff:5e:07:f9:e9:2f:ae:27:86:67:fb:1c:
                    ca:a9:2a:14:f4:d2:46:31:d5:d7:bc:28:df:23:2d:
                    99:8a:5e:d2:ab:cd:ff:ff:78:04:5a:ea:0a:d4:8a:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:E3:03:78:9A:3E:F2:F2:A8:68:E6:2F:7B:11:75:D8:D3:07:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80b42cde-275d-358b-b702-ff85a3ef2e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:47:e4:e2:67:36:20:e6:bc:fb:40:7f:b2:82:64:dc:e8:62:
         a2:0d:ee:0b:61:d7:37:29:aa:4d:1e:8d:61:5d:26:ca:3f:1a:
         42:0e:80:3e:6e:b9:11:f4:4f:c8:aa:6c:88:3d:d0:d0:89:62:
         3c:2e:9a:57:84:f6:dc:41:7d:f0:f2:7f:75:ff:f3:d3:bd:38:
         63:96:c5:85:dc:19:06:5f:bb:34:86:a8:7f:fc:37:a4:6f:fe:
         09:d8:a0:5d:e5:df:b0:1e:44:84:cb:09:f5:12:0e:60:a1:da:
         26:8e:b7:0f:50:8a:73:50:73:d1:61:7e:1f:bb:77:c5:e8:20:
         3d:b6:df:a2:96:9b:60:3e:5b:38:9c:ef:4e:ae:2d:b1:bf:f4:
         61:6b:f4:1b:aa:94:0f:4e:eb:d0:dd:00:f4:86:70:e0:96:7f:
         04:70:7d:eb:41:f8:b1:51:48:eb:0c:bc:6e:47:39:5f:0a:d7:
         47:3a:e9:e7:51:ce:44:63:03:8f:63:e3:72:9d:c3:74:d8:1a:
         aa:f4:44:2d:23:f7:85:18:8e:b3:9e:bd:aa:82:e0:00:5a:43:
         28:64:01:bc:eb:ad:25:4b:a5:e9:cc:cf:f9:a5:b5:86:c5:e6:
         71:1f:ce:37:92:66:1c:aa:2f:13:0d:2b:53:11:7a:a8:e1:8a:
         c8:28:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:05:58 2025 by rpki-client