Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c754a365-0aec-3d28-b542-850207b1af73.roa
File:                     c754a365-0aec-3d28-b542-850207b1af73.roa (raw, json)
Hash identifier:          6egVwpgvXhzFUhbtWry+tZz81H/zJNCtUU1bGwZWCzk=
Subject key identifier:   9A:DD:2A:2D:8B:3B:D0:BF:1E:D5:D8:D0:A1:48:CA:3D:55:82:E9:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CAA43E0EA99461B64EFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c754a365-0aec-3d28-b542-850207b1af73.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.193.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:aa:43:e0:ea:99:46:1b:64:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=7018daab-f5d4-4503-8a66-70859d2663f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:3e:cf:b7:8e:61:7e:3b:ef:8e:80:ed:fc:
                    3c:ad:61:1a:97:86:cb:14:cb:67:12:bc:da:40:1c:
                    39:11:86:66:34:c4:8d:86:35:24:8b:7d:9e:b4:b9:
                    3f:4f:37:d6:41:98:5a:3a:9c:2c:52:46:4c:2d:2f:
                    23:af:77:21:67:63:14:48:21:82:00:77:61:f3:35:
                    ec:04:fd:19:b8:66:80:a9:09:14:82:0b:bc:44:32:
                    26:5e:75:ac:7c:98:41:88:0e:f4:2d:cb:80:c3:6d:
                    98:3d:23:cc:5a:0d:81:14:87:fd:01:02:f4:bf:f2:
                    4f:6e:1a:00:ca:04:da:a9:b1:84:bb:fd:80:7b:8f:
                    dc:15:05:83:6f:35:c6:d4:e2:ba:1a:6a:b9:08:19:
                    f7:51:6b:6f:5c:9d:55:f9:16:84:e8:a4:3c:e8:5c:
                    b0:11:fd:43:c6:81:6c:73:c5:b1:f2:a2:fb:5f:e0:
                    69:33:78:85:1b:7d:ab:84:80:21:e7:85:85:b9:dc:
                    f3:61:9e:02:0d:be:e7:b1:bf:cd:9f:f9:d7:c6:6f:
                    d3:3f:a8:fc:d0:bb:55:79:6b:35:38:5b:fe:31:99:
                    f8:b8:bc:26:d2:e1:f4:d4:c5:2f:87:94:5a:53:01:
                    77:15:64:13:56:ce:40:fb:15:18:ff:a3:93:13:41:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:2A:2D:8B:3B:D0:BF:1E:D5:D8:D0:A1:48:CA:3D:55:82:E9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c754a365-0aec-3d28-b542-850207b1af73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.193.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:e6:8f:5f:43:0e:e1:41:87:f2:17:11:d4:b9:72:6b:d5:
         02:36:e8:15:58:c6:69:44:df:38:eb:c7:46:4d:af:9b:ac:93:
         f6:59:2e:25:17:f7:6e:27:c8:b5:ba:98:cc:fe:75:ca:91:09:
         1b:8a:f8:83:89:67:34:83:c3:ec:ed:97:53:c5:b5:3b:d2:f2:
         a6:74:43:e2:a1:11:5c:a7:6d:e7:39:9a:63:b5:16:91:b7:31:
         d9:16:1d:4d:e9:d7:36:08:18:ee:55:a6:4d:fb:a8:ca:4f:80:
         7f:4d:c0:cc:20:a5:d5:10:e3:61:41:bd:ec:7b:56:2f:d6:1a:
         d4:22:25:8d:31:13:35:37:5f:e8:ca:f6:af:7d:c3:e3:44:72:
         2e:f9:e2:c8:be:22:65:e8:a3:fd:ca:39:a3:a6:7e:0c:da:ee:
         e6:4e:f2:cd:ad:90:c5:ad:4f:e2:34:12:ef:84:41:13:e0:e6:
         d9:43:39:92:87:51:ca:71:06:a9:ce:9e:f9:82:8f:59:63:79:
         09:0b:66:d9:6b:0a:fd:02:cf:d0:02:66:99:cf:46:ed:5b:76:
         fd:fd:0d:22:a6:56:94:8f:f9:38:c2:c5:b8:4f:c9:30:fa:21:
         b4:8b:dc:a0:6f:e7:9c:c1:b2:5c:7f:2c:a1:0b:33:3e:5d:2b:
         dd:30:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:41 2025 by rpki-client