Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c341f336-5573-3859-a5e7-c0d5b83a4a49.roa
File:                     c341f336-5573-3859-a5e7-c0d5b83a4a49.roa (raw, json)
Hash identifier:          lIkiDISg1SGfqxas6M+dVYdt3qrvJ3n3iThmEy5il6c=
Subject key identifier:   62:0D:F1:51:A1:6F:29:BC:26:04:F8:EB:CA:DA:EF:9C:A7:E2:90:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F82C943C7BF3EE617880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c341f336-5573-3859-a5e7-c0d5b83a4a49.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.211.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f8:2c:94:3c:7b:f3:ee:61:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=780d2b94-8583-410e-b18d-7a2707367831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:6c:1e:87:a6:6e:a2:4a:76:01:27:d1:5d:
                    77:73:4e:6d:07:b7:ff:74:5d:3f:29:99:38:8a:aa:
                    5b:96:13:74:7f:39:76:60:cf:8b:c5:4b:e6:a9:a2:
                    2f:85:34:d0:e1:3e:fd:66:e7:0d:5a:28:25:e0:70:
                    da:39:40:e8:70:a9:15:59:5f:33:c5:ed:7a:1b:98:
                    53:4b:fb:98:9e:11:24:cf:b6:b7:a7:84:a3:b1:94:
                    7d:cd:2a:10:98:26:82:b4:12:0c:03:44:2a:e9:a0:
                    1f:84:b1:c5:91:f0:90:85:f0:a4:75:a7:78:01:72:
                    66:2e:40:28:77:e2:2f:2d:fc:a0:dd:da:69:23:39:
                    cc:98:51:f3:7c:f9:f6:59:dd:16:6d:39:e0:f6:c0:
                    77:a9:f8:db:6c:9a:18:62:9d:39:91:12:bc:01:7b:
                    f2:45:b3:6f:52:10:47:5d:c0:2e:bd:20:d7:62:07:
                    1d:7b:b9:b1:f3:5c:bc:8e:01:5d:b6:6f:e1:9f:14:
                    48:ec:c7:7e:0e:ec:bf:be:ba:3c:31:9d:92:c6:0a:
                    1b:71:aa:84:30:25:2c:c1:bc:55:01:a2:b4:ca:cf:
                    c8:85:47:da:cc:ac:35:16:dc:d9:9d:45:b8:78:0c:
                    b4:d6:e3:6f:13:ee:3b:8f:b4:5d:33:d4:26:b4:6b:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0D:F1:51:A1:6F:29:BC:26:04:F8:EB:CA:DA:EF:9C:A7:E2:90:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c341f336-5573-3859-a5e7-c0d5b83a4a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.211.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:c1:e7:9a:45:00:51:0b:4f:b5:17:9e:26:a4:ca:84:17:
         0b:b7:5b:da:d6:ff:06:92:af:55:fd:28:38:5e:28:90:7d:06:
         9f:46:ae:95:00:79:b3:4f:85:2e:62:19:47:8c:cd:29:a7:ae:
         07:f7:be:15:ec:c1:0c:48:92:7c:0e:c6:e9:73:35:fd:42:6f:
         c4:a1:e4:8a:cf:76:de:f6:be:8c:8e:f7:95:8c:63:fc:ba:4b:
         aa:8f:34:a1:8c:85:f0:40:7c:8f:ed:68:da:27:6b:20:c3:f1:
         14:3f:31:2c:78:e9:92:58:ea:80:45:10:4f:82:13:d3:a9:81:
         3c:ba:f9:8e:1f:3e:7f:ca:41:b8:51:fa:b3:f0:2b:df:71:40:
         01:e1:1b:74:55:d7:7c:7c:d9:72:df:4b:80:00:a0:a2:74:a4:
         c5:4f:8d:44:f8:cf:ec:3d:75:c4:ba:1e:6e:ed:8a:da:e8:c4:
         ae:f7:0a:fd:c7:66:3b:08:68:2e:b9:ee:e5:c4:46:51:88:e4:
         20:03:e2:be:01:61:9c:b8:89:6b:8c:87:c4:80:ae:b4:a9:cb:
         02:6d:df:93:fc:4d:cb:5e:0c:fc:1b:8d:ce:ad:8d:63:fe:49:
         ad:40:81:14:e7:67:52:eb:a1:a0:eb:59:42:5c:2c:c5:c6:1a:
         31:51:c7:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklvgslDx78+5heIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NzgwZDJiOTQtODU4My00MTBlLWIxOGQtN2EyNzA3MzY3ODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKRsHoembqJKdgEn0V13c05tB7f/dF0/KZk4
iqpblhN0fzl2YM+LxUvmqaIvhTTQ4T79ZucNWigl4HDaOUDocKkVWV8zxe16G5hT
S/uYnhEkz7a3p4SjsZR9zSoQmCaCtBIMA0Qq6aAfhLHFkfCQhfCkdad4AXJmLkAo
d+IvLfyg3dppIznMmFHzfPn2Wd0WbTng9sB3qfjbbJoYYp05kRK8AXvyRbNvUhBH
XcAuvSDXYgcde7mx81y8jgFdtm/hnxRI7Md+Duy/vro8MZ2SxgobcaqEMCUswbxV
AaK0ys/IhUfazKw1FtzZnUW4eAy01uNvE+47j7RdM9QmtGuHewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIN8VGhbym8JgT468ra75yn4pDKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM0MWYzMzYtNTU3My0z
ODU5LWE1ZTctYzBkNWI4M2E0YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS9O4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNLweeaRQBRC0+1F54mpMqEFwu3W9rW/waSr1X9KDheKJB9Bp9GrpUA
ebNPhS5iGUeMzSmnrgf3vhXswQxIknwOxulzNf1Cb8Sh5IrPdt72voyO95WMY/y6
S6qPNKGMhfBAfI/taNonayDD8RQ/MSx46ZJY6oBFEE+CE9OpgTy6+Y4fPn/KQbhR
+rPwK99xQAHhG3RV13x82XLfS4AAoKJ0pMVPjUT4z+w9dcS6Hm7titroxK73Cv3H
ZjsIaC657uXERlGI5CAD4r4BYZy4iWuMh8SArrSpywJt35P8TcteDPwbjc6tjWP+
Sa1AgRTnZ1LroaDrWUJcLMXGGjFRx+Q=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:19 2025 by rpki-client