Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa
File:                     b47db3b2-9230-39e2-be23-e199e335642d.roa (raw, json)
Hash identifier:          giW3D4K8ymqgYha2X4VFoQ4qrB2KY3Zbm8AagfHTS9c=
Subject key identifier:   07:83:71:4F:FC:BE:A7:DF:2D:31:25:57:1E:35:99:73:C1:33:F4:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C99930DBEFB5C84F93200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.203.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:99:93:0d:be:fb:5c:84:f9:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=c84750b8-926c-4a68-a113-eca665383254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:60:fb:4b:be:e9:0a:3f:4e:ee:f5:40:18:bb:
                    b6:8f:e3:a3:e3:93:51:9b:0c:fb:20:63:1f:62:31:
                    46:05:e4:ff:a0:51:0a:3c:31:6c:9b:47:d2:79:03:
                    8c:d7:9c:2e:62:b6:aa:11:19:91:37:0e:7b:a6:f4:
                    73:d1:0d:26:25:65:32:0e:d2:64:60:c6:9b:ce:63:
                    9d:9b:4b:80:2c:cc:ae:38:a8:74:ff:a8:12:ac:6a:
                    fb:69:3c:bb:b8:05:a4:23:00:34:12:95:be:44:97:
                    b1:5c:8f:bb:ef:d7:7d:b0:58:cd:15:0e:ef:51:fa:
                    95:a2:0d:b9:05:ad:f4:69:ab:d6:42:f2:b2:f5:26:
                    30:0a:82:c8:fe:4e:6a:87:9d:75:2e:65:89:2d:76:
                    8f:90:19:c3:eb:f7:71:73:1e:55:c7:33:20:7f:26:
                    b2:3f:2e:66:3f:f6:b1:fa:fc:17:ec:89:20:da:84:
                    cb:0e:0f:59:50:1a:b9:47:c1:15:58:39:3c:a3:b2:
                    15:e3:b7:10:b9:76:cb:71:bd:6a:a5:d2:ff:97:38:
                    2f:c0:cd:b3:8e:44:f7:f9:70:59:9a:87:b1:29:77:
                    b4:e4:81:63:a3:40:b8:bb:80:37:3b:45:8f:b9:c1:
                    89:e2:88:87:69:e9:f8:65:18:eb:1d:a3:1f:80:b5:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:71:4F:FC:BE:A7:DF:2D:31:25:57:1E:35:99:73:C1:33:F4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b47db3b2-9230-39e2-be23-e199e335642d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.203.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:78:44:86:68:a2:30:28:fc:92:5c:37:f3:b6:df:b7:83:f1:
         ff:f6:d3:d9:fb:c6:fe:09:ac:ba:91:64:b8:24:b4:b5:a0:7f:
         8f:95:e6:c5:34:51:9c:81:c5:7b:a9:5b:2b:9a:0f:65:ba:08:
         38:10:61:3b:86:1e:8a:ae:b0:26:72:e4:f6:cc:62:2f:e4:05:
         15:ee:1d:f2:45:a4:92:af:2d:f3:d9:8f:e9:0c:36:06:33:b1:
         c8:e3:b6:d7:5c:23:52:d9:8e:13:4c:b1:84:c8:f1:d6:34:dd:
         83:a4:85:de:5f:d2:a7:cf:89:30:5b:f1:7a:97:16:6b:4b:02:
         0d:44:54:18:db:6d:d5:10:99:20:b1:ed:bb:cb:17:57:8f:f3:
         d2:e9:72:01:c4:f9:35:63:44:57:65:11:27:c0:81:84:db:1f:
         ec:12:12:53:76:bd:a9:f8:f8:cb:a6:e2:35:a7:38:e2:75:f5:
         98:85:2b:dd:03:d1:b4:0b:5a:b5:0b:a3:ae:e0:df:30:85:e6:
         84:06:f4:64:0c:5f:b9:a5:b1:3a:ab:f4:61:01:d5:20:46:60:
         c4:43:9d:9b:5e:80:a5:c3:b6:b6:dd:16:d9:2a:65:80:0d:e5:
         ff:09:23:5c:a0:66:69:42:88:db:80:5a:bb:f4:2b:17:30:06:
         59:ff:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:20 2025 by rpki-client