Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa25c6a8-08b2-3685-81d5-0fcd71323324.roa
File:                     fa25c6a8-08b2-3685-81d5-0fcd71323324.roa (raw, json)
Hash identifier:          6f9Hk1KslY2PINcV5oL4t72qASBdfzT411bb4dslotg=
Subject key identifier:   E0:8B:70:19:8C:48:8E:02:78:D9:FD:5A:3B:AC:E9:40:A1:8E:22:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B609CA78892FB8C70FA99BEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa25c6a8-08b2-3685-81d5-0fcd71323324.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        174.224.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:a7:88:92:fb:8c:70:fa:99:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=a19708a0-cb1b-4471-b9c7-f417c838a475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:98:b4:9f:1f:bf:98:fc:5a:3c:2f:4d:15:
                    b6:a3:1f:08:af:e1:62:b9:2c:c3:ba:30:ab:b3:b7:
                    d5:38:d7:64:eb:8d:a2:09:06:09:36:3c:d4:40:ce:
                    5d:55:6c:a9:b1:0f:7d:f3:25:0a:e9:be:31:5b:78:
                    92:f1:f2:69:ff:44:f7:1a:7e:86:03:6b:6b:e8:92:
                    84:2a:a0:c3:39:75:30:6b:46:fc:b7:c2:eb:c8:21:
                    d3:f0:e1:bb:2b:d7:b8:fc:2a:e7:bf:41:7c:94:51:
                    1e:e4:38:70:4b:96:92:3e:2f:c7:d0:99:12:89:75:
                    c2:e5:a2:4c:3d:ef:51:72:b0:83:12:56:2e:14:9f:
                    c7:89:b0:9c:07:bd:cb:43:b7:00:b5:d2:13:5e:11:
                    40:fe:63:55:4f:93:99:62:d8:a5:1e:fa:80:9f:bd:
                    53:bf:a0:8f:8f:58:13:16:a1:89:d2:b6:d5:52:b5:
                    0d:f1:21:5a:6c:9e:b5:ec:52:2b:34:44:8e:5d:86:
                    ce:6f:24:31:91:2a:60:67:f4:58:81:0a:df:f5:5c:
                    53:94:a6:d9:99:93:fc:a3:77:d5:a3:ca:ed:bc:ef:
                    0e:df:ac:9c:ce:08:af:11:3b:20:e3:b9:c5:05:29:
                    ec:9a:03:7f:8c:41:ec:68:05:1a:35:6e:23:44:7a:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8B:70:19:8C:48:8E:02:78:D9:FD:5A:3B:AC:E9:40:A1:8E:22:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa25c6a8-08b2-3685-81d5-0fcd71323324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f0:50:29:92:3c:7f:39:b4:e4:78:e6:eb:30:72:da:01:66:
         cc:96:e4:7c:c4:1a:4e:b7:69:60:60:15:7a:4e:27:2e:b6:8a:
         d6:91:06:22:0d:e7:f6:2f:22:e5:c1:d7:ba:2c:4a:d6:2e:b0:
         29:12:32:fe:12:42:32:0d:e2:d8:47:d5:95:ba:ff:20:61:77:
         99:87:55:66:58:4c:e7:23:9d:7f:a5:4c:2a:e7:79:4f:40:4c:
         d9:f5:8c:64:40:42:1e:b0:21:c7:3a:da:ad:04:5c:11:10:6e:
         85:24:25:1c:0c:33:0f:2d:fa:45:fb:a4:16:ff:95:34:31:db:
         e1:67:5b:0a:30:de:6a:ea:bd:b6:d1:92:4a:3a:5d:4c:d5:5e:
         46:87:a4:c0:cf:1a:ab:e7:a8:44:8a:1a:bb:8e:6f:57:d1:4f:
         62:ed:da:be:dc:31:2f:8e:96:67:81:dd:7b:19:23:86:12:29:
         82:fb:c9:84:5e:96:b4:b0:d0:ca:49:3d:5a:2f:03:34:82:3f:
         14:0f:b5:3f:7e:4b:f0:e9:4e:15:a6:64:b7:22:bf:ee:70:cb:
         2a:a4:3c:13:13:98:f4:27:05:40:7d:59:b8:88:01:dc:f4:b9:
         85:7c:4b:7b:b2:85:a5:74:00:b5:a8:67:f6:88:b2:da:8b:0c:
         a4:eb:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:36 2025 by rpki-client