Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9473d0f5-4da3-3a1e-88c1-924cc9990792.roa
File:                     9473d0f5-4da3-3a1e-88c1-924cc9990792.roa (raw, json)
Hash identifier:          h5mTCDWe/bgOJ/hkpkHBJi4V7/AlmBf+fxB76SO/Cuk=
Subject key identifier:   CB:B4:51:F6:64:63:F1:84:98:61:FA:58:3D:BC:ED:57:61:B2:21:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B60BF8D42897A535F9017D600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9473d0f5-4da3-3a1e-88c1-924cc9990792.roa
Signing time:             Wed 01 Oct 2025 14:11:15 +0000
ROA not before:           Wed 01 Oct 2025 14:11:15 +0000
ROA not after:            Tue 30 Dec 2025 15:11:15 +0000
asID:                     6167
IP address blocks:        174.237.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:bf:8d:42:89:7a:53:5f:90:17:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 14:11:15 2025 GMT
            Not After : Dec 30 15:11:15 2025 GMT
        Subject: CN=b280ee75-9768-43bd-b7d8-3033395a3d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:35:6c:ae:34:c0:a1:48:5f:b8:3b:72:93:
                    a5:82:a1:9b:95:9b:cc:31:67:5c:64:e4:23:7b:21:
                    43:0c:64:21:e0:55:5f:12:95:3c:0e:ed:0e:14:86:
                    a4:e7:fc:b0:0c:44:bb:9a:06:6d:d7:41:ee:35:da:
                    80:bf:ff:c7:bd:8f:8b:30:3b:1d:a9:79:f8:ac:e3:
                    7a:6c:89:dd:a1:38:d0:ad:a9:21:c5:3a:e5:7f:22:
                    8d:1d:3c:5e:2e:c7:bc:e0:20:80:1d:e6:84:d2:14:
                    28:4c:00:a8:5e:94:c8:5a:be:42:1b:e9:e1:8b:85:
                    b9:36:42:87:a3:dc:39:b8:2c:fa:f5:e5:bc:41:8c:
                    23:be:91:95:5d:38:31:bf:f3:db:52:d4:cc:70:3d:
                    c0:83:5a:11:b3:13:07:a9:6f:ce:31:49:05:77:40:
                    99:35:56:f1:6b:b7:31:97:e3:b4:21:28:29:f9:4a:
                    36:50:f3:94:28:ca:9c:0b:2c:ba:98:ce:96:37:69:
                    25:0d:df:cc:c9:21:55:d3:bd:48:33:d1:ca:0e:16:
                    b3:11:fc:ec:9d:d0:e4:05:1c:24:a5:c1:71:eb:88:
                    19:fd:62:67:d4:b4:67:05:cb:59:52:f0:14:79:95:
                    55:c9:98:00:47:0c:95:14:5c:33:78:fb:65:24:2c:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:51:F6:64:63:F1:84:98:61:FA:58:3D:BC:ED:57:61:B2:21:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9473d0f5-4da3-3a1e-88c1-924cc9990792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.237.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ac:a5:3a:cf:4f:f0:77:dc:41:54:4f:5f:77:d1:18:f1:ac:
         2a:a6:10:82:55:e0:55:be:c2:e7:63:d7:3e:7c:c5:61:eb:42:
         12:e7:c7:41:95:89:f6:5c:29:58:cf:c0:69:b8:f3:e8:0a:79:
         5b:6f:f0:8d:07:1f:b7:88:4c:0f:e2:57:4e:c4:f2:a5:52:fd:
         c3:48:d2:4e:cb:b1:e1:e5:46:b3:14:2e:22:46:a0:35:22:ab:
         ff:94:b5:3a:ee:4f:76:0c:65:24:b6:41:c3:d4:fe:fb:8d:c3:
         80:c8:03:3c:82:bc:57:96:38:35:f9:bb:38:6d:47:dc:48:a6:
         6b:43:e6:27:4f:6e:5e:ec:03:a4:dd:bc:f5:9d:4e:bd:42:cb:
         e6:8a:79:41:ed:ae:31:39:d6:e1:63:8a:ac:97:5b:ee:87:06:
         fa:af:0b:9a:3e:99:7d:87:f7:42:97:73:21:58:2b:0c:2e:bb:
         f9:80:6e:ee:fd:9a:19:3b:5f:5a:a9:be:a7:59:10:99:b3:73:
         ab:0f:f8:b4:97:bc:4c:c2:a7:25:3c:46:a9:db:c5:0c:f5:d0:
         30:47:9f:cf:c5:50:19:99:49:fa:fa:8c:41:fe:42:a3:e9:e9:
         e6:15:ce:aa:30:f0:fe:a4:10:39:29:af:8c:87:bf:0d:2f:1a:
         9c:c1:eb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:27 2025 by rpki-client