Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
File:                     dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa (raw, json)
Hash identifier:          r4VSEB8vsHiWdBnQJYjJ238poPpW4cESivgJ7KYw3kw=
Subject key identifier:   67:84:ED:64:17:C6:5F:87:75:D1:4A:3F:F7:EB:A1:55:63:B0:2D:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2496F4375B16FD715CA451C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.204.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f4:37:5b:16:fd:71:5c:a4:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=9288e6f3-1380-443b-9c6f-6a6924c93048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:07:4f:f7:92:f5:75:ef:4b:2b:71:e6:f1:
                    e7:9b:e8:7f:78:d5:8d:6d:c3:83:c2:a0:e0:c1:c6:
                    98:28:d3:ae:93:cf:ee:81:a9:46:53:fd:1b:e1:b2:
                    ef:89:3b:47:a1:28:c2:a0:86:67:79:9b:c7:20:89:
                    b9:34:33:6e:bc:fa:de:b6:17:ec:7b:65:ba:6e:99:
                    5d:ff:f1:22:aa:9c:d5:ff:7d:86:1e:d0:40:45:ba:
                    48:e9:89:7d:d7:82:ce:47:db:3c:ac:9a:39:80:79:
                    6f:e3:d4:30:d7:23:45:45:19:5e:5c:a8:02:30:18:
                    fa:81:41:21:97:f4:6a:b2:c5:c8:b6:1a:60:b6:e9:
                    4d:21:b3:fd:4a:b8:c6:f4:da:df:04:5a:d0:02:66:
                    73:a1:78:5e:7a:52:20:ef:ac:aa:d7:f6:be:a9:a8:
                    3a:09:20:b6:bd:f1:8a:90:a3:16:c4:81:f1:a4:6c:
                    a5:d0:60:aa:3c:63:e8:f3:49:0b:8b:af:94:a9:67:
                    e1:b5:e8:cc:8c:35:0b:e6:83:31:9c:8b:72:eb:f8:
                    7e:dc:dd:9d:92:50:c1:ca:93:c4:33:b6:23:87:0a:
                    dc:12:b1:23:fc:26:4f:d4:6d:45:f7:2e:5b:f6:19:
                    4f:16:e8:de:25:ea:42:47:cf:20:23:b2:44:c2:10:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:ED:64:17:C6:5F:87:75:D1:4A:3F:F7:EB:A1:55:63:B0:2D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc529ca2-6e0a-36c5-8cb1-ee3b7a177095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.204.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:04:58:8d:50:11:5d:c3:2a:65:9c:ec:0f:7f:ce:c6:30:d0:
         67:c1:59:9e:b3:a2:6d:aa:1e:e6:e3:1b:34:ac:29:52:3f:4e:
         9d:ed:6a:e5:b7:8b:d0:14:e8:89:10:9a:23:22:a9:99:61:b4:
         30:b4:20:d7:c4:a7:52:18:99:f7:6b:47:28:3f:30:f0:e8:73:
         af:67:b2:6b:83:9e:bd:df:fa:7e:2e:93:be:4f:33:61:4e:33:
         96:89:f8:14:76:15:95:5d:2c:41:00:79:c7:04:f7:17:e8:b4:
         78:2f:35:8b:b3:30:91:49:d6:45:6d:09:d9:0c:a4:77:47:47:
         d7:e0:89:76:bb:68:21:3f:39:72:bd:0e:a8:b5:e8:35:17:d2:
         fb:ef:f9:72:f5:6b:09:b3:2b:35:54:92:2b:ac:8a:02:41:ca:
         63:eb:36:51:69:d1:92:91:ba:cd:35:f7:ae:ed:da:57:cc:ff:
         9a:ce:72:9e:09:57:a5:e4:4b:86:8f:3a:2a:eb:b3:b0:84:ea:
         e0:8a:3f:62:43:eb:2d:a5:7c:94:75:7c:b0:b3:db:cf:b6:b4:
         47:8c:b8:5b:e8:32:aa:16:ae:93:e4:3f:28:05:dd:ab:72:44:
         f5:c2:be:a2:4f:52:f7:a9:0b:01:c0:1f:a7:11:28:80:52:8a:
         b9:99:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:09 2025 by rpki-client