Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1a1e819-5c16-3544-94ed-20c4a828e693.roa
File:                     e1a1e819-5c16-3544-94ed-20c4a828e693.roa (raw, json)
Hash identifier:          9xrxQtZaAIoJo6QQ8r3Gu6SXq6ZVrhWWYRymWC2qWWQ=
Subject key identifier:   62:1B:34:78:B4:AD:77:87:AB:5C:99:CB:12:29:ED:1F:6F:B4:70:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C9BA8788BF3A66EAEAC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1a1e819-5c16-3544-94ed-20c4a828e693.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.208.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:9b:a8:78:8b:f3:a6:6e:ae:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=7017cbb3-7fe2-4355-ab7f-d86d44ebb61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:b3:5e:cd:2f:e3:1b:41:c0:c4:77:97:28:
                    24:9b:53:b0:1f:3c:0e:7a:21:e2:6c:07:fa:f3:1e:
                    23:41:ef:a6:da:84:ce:ba:f4:53:f3:d1:5a:b4:a9:
                    26:76:57:1b:dd:75:84:df:27:71:81:22:e1:58:bf:
                    2b:ab:a6:3d:72:7e:1b:cc:15:96:ef:6b:63:99:fd:
                    0a:74:22:3d:63:e6:39:57:f8:f6:7c:76:a1:f2:2e:
                    24:cb:01:8b:3d:b3:05:f9:fb:4f:a1:ca:ef:7f:8b:
                    74:7a:7d:b3:0b:b9:78:64:b1:af:c4:3d:8e:d6:60:
                    f2:e4:bf:2c:36:17:6c:cd:00:c7:13:f8:31:a0:04:
                    5d:4b:7f:7e:c5:4f:6b:cf:f7:6a:2b:fa:67:9d:f1:
                    83:75:85:95:b4:da:b5:33:f1:3d:68:11:80:d7:cf:
                    39:23:64:ed:da:6d:61:4a:9c:0f:44:18:87:ce:fe:
                    03:5d:f9:f3:5e:11:f2:d4:3b:fa:ee:a1:8a:de:b2:
                    cd:5f:66:43:f0:1e:ea:1f:39:aa:41:a3:5e:3f:0b:
                    9d:44:36:4a:37:e9:c4:43:52:5e:ff:4a:5a:ae:72:
                    0f:e0:0d:17:7a:c5:4d:09:e8:23:75:59:78:59:75:
                    71:92:80:3c:72:dd:2c:c0:8d:5e:f8:6f:fb:ee:51:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:34:78:B4:AD:77:87:AB:5C:99:CB:12:29:ED:1F:6F:B4:70:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1a1e819-5c16-3544-94ed-20c4a828e693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.208.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:3b:9d:2f:b3:bd:c2:3e:07:95:66:e6:ba:03:30:32:51:
         93:0a:25:ce:f1:66:38:bb:e7:ba:09:76:3f:9c:c5:d5:8e:59:
         b1:df:2b:7b:8d:e7:7d:bb:41:d9:72:12:a0:27:f3:be:f8:6f:
         c6:df:3e:01:87:03:4d:48:60:9f:92:69:ca:bf:d4:c9:f3:ea:
         60:eb:92:ca:a0:f0:17:ed:61:f9:a8:7c:54:5c:39:e8:24:14:
         5d:6f:cc:a4:1c:7e:cb:ef:ac:51:36:13:9a:6d:04:5d:f2:ae:
         5b:b5:e2:46:68:72:92:be:07:3b:84:71:61:73:bf:f1:14:bf:
         31:b7:65:15:60:62:bf:cf:f8:09:96:dd:77:56:a2:e9:ce:8b:
         18:ab:43:08:7d:1d:f4:1d:13:4b:16:83:c1:20:48:ad:3e:21:
         e2:59:5b:5f:7c:5e:cd:a1:8e:9d:2c:dc:e5:2c:6d:a1:8f:68:
         a0:a4:9d:a5:f6:2a:9d:c9:62:67:90:b3:6a:93:c1:b1:33:a8:
         76:89:e9:dc:2b:68:a0:e1:c7:6d:2a:37:6a:e8:a3:7c:74:2c:
         43:9e:3f:5a:b7:ed:d2:6b:98:a1:26:f7:ad:33:42:da:80:91:
         c0:dd:a1:23:2f:c3:c8:16:99:49:50:77:8c:c5:24:bd:1e:d5:
         1d:68:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:35 2025 by rpki-client