Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bbe217-0697-36b0-abff-03a92e3f142f.roa
File:                     c3bbe217-0697-36b0-abff-03a92e3f142f.roa (raw, json)
Hash identifier:          UjNMWAfszaIW09zpQdQsnuppLZ4LZiRS8mftUw4WVdQ=
Subject key identifier:   64:38:D1:CC:1A:35:15:EA:E9:EF:7C:DF:DA:8A:16:1F:AC:10:B5:D5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36D77125D591D1E53C8A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bbe217-0697-36b0-abff-03a92e3f142f.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        162.84.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d7:71:25:d5:91:d1:e5:3c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=312a6891-013e-4278-b1ee-653fcb1739e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:17:83:53:e3:e7:56:01:b5:54:d7:24:29:
                    9e:78:61:46:98:93:3e:f5:7e:3d:c7:2b:3b:10:e7:
                    18:56:65:5c:ba:61:c2:fc:e9:e7:db:79:c5:9d:01:
                    0d:45:f5:df:aa:2c:11:48:bf:c2:38:78:de:30:16:
                    b8:c7:b1:cb:3d:5a:d8:c3:7b:f4:e6:91:88:50:c8:
                    79:45:7e:dc:58:46:54:21:8d:ca:e8:b9:27:2b:3a:
                    91:43:f1:08:1c:2f:7c:01:87:67:9e:84:e8:cb:c3:
                    30:57:7a:70:53:99:0f:0e:4e:7f:6a:2c:d3:66:ea:
                    71:dd:33:f7:c9:4e:d3:67:e2:29:06:f7:47:ac:f8:
                    a3:aa:9b:3d:e7:df:4e:c4:ad:00:49:b1:15:95:e0:
                    63:ee:f8:d8:03:f5:fb:07:37:3a:08:52:6b:27:62:
                    ec:cf:46:1a:cc:21:8c:78:83:fa:76:ba:1e:fb:e2:
                    f4:b4:25:13:8f:c7:14:2d:e8:c4:91:e7:d9:25:60:
                    0b:d8:da:da:0a:aa:59:44:8c:7c:ff:65:07:74:90:
                    07:c0:d1:36:6b:0b:b2:c1:0d:df:6f:1a:c0:14:26:
                    12:00:3d:47:f3:fa:4b:e8:32:9c:e3:4f:80:49:36:
                    3a:7e:ef:26:8e:9a:16:9c:04:c2:40:6d:b8:d5:29:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:38:D1:CC:1A:35:15:EA:E9:EF:7C:DF:DA:8A:16:1F:AC:10:B5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bbe217-0697-36b0-abff-03a92e3f142f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.84.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:4f:11:29:b5:76:86:90:05:86:51:a4:9c:da:1b:e3:94:
         04:35:59:64:cb:34:34:bc:ff:8e:6a:40:8a:4d:05:9a:38:37:
         87:6a:71:f3:fb:2b:a9:55:b6:58:e9:73:fd:9c:5a:ce:2c:fa:
         41:16:30:ff:78:d4:f9:9f:9d:fa:e6:fa:1b:fe:b3:4f:de:ad:
         46:3e:66:c2:ba:f9:4b:c0:d3:dd:b8:79:37:f4:e6:80:bb:dd:
         b1:02:13:a5:32:45:24:53:91:0a:0c:29:a1:51:88:6b:2f:7b:
         41:fb:46:a0:99:4e:63:4a:11:b7:5c:b0:7a:f9:db:7a:35:a1:
         f5:3c:62:ad:fc:44:fe:21:57:d7:56:d0:1d:dd:8b:f6:be:28:
         eb:8f:90:39:01:30:70:c7:3c:c5:7b:e1:dd:b3:3a:40:e1:4c:
         79:1a:de:da:0a:44:20:69:d9:c6:9b:b8:8e:0a:d3:fb:23:a1:
         84:ec:f7:aa:ed:ae:11:4a:e8:df:60:af:71:1a:90:3a:60:64:
         ed:b7:8c:39:ac:e8:59:a2:1c:4e:04:40:c5:74:65:2e:33:49:
         eb:b0:39:33:23:e5:3d:70:46:ca:2e:15:51:7e:be:de:2a:e3:
         0c:39:80:54:7b:0d:8c:d7:6e:0b:4a:4e:a4:e0:71:32:66:b1:
         7e:82:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:22 2025 by rpki-client