Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2645697-db8f-3588-acac-63f2e2e4c528.roa
File:                     e2645697-db8f-3588-acac-63f2e2e4c528.roa (raw, json)
Hash identifier:          xOXYb4ZrZcOU8SBxUr1MzF9M1efkvHVPashu6+z7MfU=
Subject key identifier:   23:2D:0E:C8:49:24:DD:E5:DC:6D:F0:F4:19:26:06:5F:A4:61:30:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609C9B476C9D0EB7BB595CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2645697-db8f-3588-acac-63f2e2e4c528.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.207.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:9b:47:6c:9d:0e:b7:bb:59:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=788306fd-1f94-4d19-8940-018a87d448c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:6c:0b:08:4d:27:57:6b:e8:a0:b3:06:10:
                    2d:b1:b9:6b:67:25:f1:5b:a3:82:20:e6:3b:6d:eb:
                    39:c1:d0:6c:0c:f9:bb:f4:d1:35:9f:0e:de:3f:ba:
                    67:dc:de:3f:8f:b0:8d:34:fe:3e:ac:23:12:8c:98:
                    a0:bb:fb:d1:ab:5c:69:11:a7:81:f3:ca:50:0b:38:
                    bc:ef:59:98:2a:58:b7:be:a9:78:0a:32:42:62:24:
                    15:0e:fc:5b:f3:27:f7:4c:31:81:83:63:28:35:4d:
                    b3:31:3a:63:bb:4b:41:7e:3b:cf:26:f5:dd:23:57:
                    27:d3:cb:47:d8:df:cf:24:af:80:ab:6a:da:f6:9c:
                    0c:cb:c2:d0:7c:8f:7f:74:dc:c9:9c:88:01:f0:ee:
                    e8:75:f2:03:65:4b:08:a1:1a:8b:f5:4e:93:46:90:
                    1d:eb:f3:fb:b3:af:2f:2f:80:71:6d:c1:fb:42:5a:
                    0c:8e:46:d7:21:bf:d7:c0:21:ab:ed:2c:85:51:d3:
                    d9:a2:db:a4:16:b6:77:d6:e7:8c:5e:70:8c:5e:eb:
                    ee:9d:96:04:75:a1:b6:d4:19:9d:40:27:a5:26:3f:
                    e2:b7:a8:12:04:9a:81:99:33:ee:51:70:d8:11:27:
                    8e:ab:ab:1a:54:43:1c:f5:61:c9:91:82:59:a5:ed:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2D:0E:C8:49:24:DD:E5:DC:6D:F0:F4:19:26:06:5F:A4:61:30:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2645697-db8f-3588-acac-63f2e2e4c528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.207.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:67:db:f7:d4:a9:fe:30:3c:0d:ea:94:34:f7:2c:f4:70:
         b1:d7:3f:19:e8:cc:7c:11:64:c9:50:4d:a6:13:5c:1a:1a:18:
         3a:c0:7c:d0:bd:9a:79:d0:c7:20:f2:bc:a1:00:a8:54:45:49:
         1d:16:9e:c1:71:62:c4:d4:8c:c1:68:22:11:f2:c1:6a:d1:c1:
         35:b3:73:b0:ff:fa:9a:bd:7e:60:4e:04:4e:67:17:60:5d:0c:
         d6:bc:e2:2b:9f:f2:17:5c:71:34:3e:09:ec:6c:7b:3b:df:8c:
         7e:ea:fb:55:c0:e2:a1:a0:ff:df:e1:e0:20:4b:29:67:79:e1:
         ac:44:a0:ed:58:a8:3c:b4:0a:7f:97:09:b6:7d:b3:3b:f8:8d:
         53:2d:a7:58:63:f6:5e:ca:4e:37:81:ab:91:5e:33:c1:64:5d:
         ca:5f:9a:4b:93:66:36:dd:eb:42:cc:bb:29:a1:e1:01:fa:b7:
         35:f3:73:67:00:ee:58:da:50:b4:21:ff:94:46:06:4d:ef:da:
         a5:f1:d2:a4:eb:b2:4e:20:45:5a:3f:62:fa:93:36:b4:c7:d1:
         2a:0f:bc:b0:cb:2d:96:2d:b7:1d:de:45:60:b7:55:f2:9c:22:
         59:e8:e0:96:97:42:f3:f3:b8:8f:2b:60:82:cf:3e:1b:0e:e2:
         fd:0a:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:12 2025 by rpki-client