Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4613324f-32bc-3f52-9767-0e0182a60f04.roa
File:                     4613324f-32bc-3f52-9767-0e0182a60f04.roa (raw, json)
Hash identifier:          PYHkr9kc9UsCnKVZun4d7NU3rwbWCoz+tD4Xo6oH7hE=
Subject key identifier:   57:E0:EF:E1:2C:30:49:1D:6A:B3:16:77:CB:CD:27:7B:6E:1D:7F:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584964844D5528A7B2B44EEBF8D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4613324f-32bc-3f52-9767-0e0182a60f04.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.221.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:4d:55:28:a7:b2:b4:4e:eb:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=e6fc9764-3a60-47f3-a2ed-b3624fe952de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:6c:35:5e:83:9b:a7:34:ef:0a:3a:4e:37:
                    a7:a2:71:1d:26:ac:a6:67:ba:f2:09:bd:65:81:d7:
                    a3:c2:02:99:30:9b:df:c6:d4:6f:c1:78:62:49:62:
                    e8:9b:a4:2c:2b:8f:85:02:7c:3d:c5:49:64:58:b4:
                    35:00:bc:c6:81:0c:4f:31:df:50:e6:fc:e1:b2:5f:
                    d4:bd:f3:7c:1a:d3:00:e0:0d:04:f7:43:08:c6:77:
                    29:0a:b7:63:3b:61:91:b4:59:18:b3:4d:79:14:e5:
                    0c:0e:df:d7:f4:03:d8:be:11:58:2d:c4:2c:3e:d0:
                    00:1e:79:01:96:56:46:82:68:f8:5f:94:7b:9a:71:
                    77:3d:92:99:8e:cf:8e:70:11:ac:89:05:09:5c:4e:
                    d6:ca:73:20:22:dc:76:4d:c2:0b:14:d8:86:8c:75:
                    b8:82:89:09:e8:7d:23:71:97:72:48:7b:20:77:51:
                    13:4f:f2:c7:85:c3:d7:00:cb:e7:c9:fc:ec:9a:7f:
                    82:89:45:1d:b3:58:39:b5:3d:c0:e1:4f:ef:6a:2d:
                    ac:03:3d:93:7f:89:8a:55:a7:0e:97:7d:60:f9:1a:
                    d3:1c:50:3c:56:8b:a6:01:ea:e1:f2:83:9e:50:82:
                    7c:af:b8:37:14:e0:9c:96:77:1d:45:67:32:54:90:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:EF:E1:2C:30:49:1D:6A:B3:16:77:CB:CD:27:7B:6E:1D:7F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4613324f-32bc-3f52-9767-0e0182a60f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:af:cd:16:df:af:40:4d:88:f6:23:11:42:08:f8:98:6d:38:
         51:10:83:02:b5:10:b2:65:c9:95:23:b9:a3:d4:6d:9c:60:a2:
         7a:f5:b4:50:c5:eb:41:18:2b:5f:f0:9d:4e:c9:d9:ff:8a:14:
         4b:ef:0b:0a:7f:c5:05:75:a4:35:8a:44:83:22:93:a6:f5:87:
         28:6d:ea:4d:d4:35:99:62:8d:3d:3c:4d:c5:df:9d:0c:1d:ce:
         05:61:4c:99:7c:27:ad:ae:a1:b6:7b:b9:ad:95:d1:47:f0:60:
         3c:ec:39:94:46:f5:5f:30:05:f6:c3:a9:b5:ee:34:05:ff:e1:
         87:90:6f:35:a6:8c:8a:8e:7e:17:66:cf:45:79:2a:06:7b:a8:
         ad:97:92:84:5d:ac:38:8e:58:17:84:58:ff:17:6c:94:88:5c:
         db:47:58:6a:ae:8e:d7:01:df:79:06:08:94:cc:41:c9:48:54:
         02:98:3a:66:e2:3c:4a:a5:58:26:3a:8e:cf:eb:94:2d:ce:ff:
         89:8c:82:c9:f4:ae:07:4d:73:28:20:65:05:80:d5:f4:95:6a:
         c5:5c:cf:5b:ba:4c:59:04:4f:46:1f:9f:5c:57:29:6d:dd:2e:
         3b:8e:6f:4d:95:26:3a:4f:2e:f5:e7:23:3f:96:82:a8:3a:b6:
         2c:ff:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:31 2025 by rpki-client