Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca184fb-1289-3395-b974-d53265005208.roa
File:                     6ca184fb-1289-3395-b974-d53265005208.roa (raw, json)
Hash identifier:          gGLkQHkg6RzEuxeY4JubowI/cxmZoOPRInSWJgTb/Z0=
Subject key identifier:   87:51:C7:9D:34:7F:EB:29:D4:0F:DB:AE:C4:2D:DC:4A:B7:35:7E:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2CF30328BC09817CAAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca184fb-1289-3395-b974-d53265005208.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.249.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:2c:f3:03:28:bc:09:81:7c:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2d9fb47d-52a3-4de6-aa16-11e2e07c39e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:a5:97:a9:60:6e:93:0a:ba:08:92:3d:fb:
                    cc:99:58:09:8e:40:39:8b:ac:c7:d5:9a:c2:03:9b:
                    ed:69:cd:7f:e0:9d:ac:00:b1:f2:78:21:24:d1:cd:
                    a9:08:29:4b:e4:9a:0d:31:cb:9a:4e:aa:ab:5f:0d:
                    d5:0a:1a:d2:ee:9c:84:cd:d6:81:5c:8d:01:90:fb:
                    6a:74:b5:8a:aa:c7:8f:7d:1f:ea:20:5f:23:1e:17:
                    95:6c:81:d3:a1:e8:e0:0f:72:08:49:c1:82:93:56:
                    96:11:cc:f6:f7:ec:1a:6f:73:39:f4:6b:3b:0c:ff:
                    18:33:70:c3:fa:ee:51:34:40:cc:72:7e:c9:16:b0:
                    f5:1c:5f:89:17:d5:7b:f5:fd:c7:8c:20:fa:78:3b:
                    71:1f:a3:56:cc:d5:99:b9:c1:c4:dc:be:40:b3:6c:
                    04:1b:ff:52:d9:86:ea:45:14:63:a0:9b:84:1e:75:
                    d1:f0:0d:00:d6:8a:6b:d4:a4:de:23:1b:a0:02:60:
                    a4:50:e0:3c:11:83:bb:d6:6f:f4:81:fb:17:2e:8c:
                    2d:2f:49:37:e5:52:cd:93:b8:73:a5:c5:c1:2f:7d:
                    9f:f2:53:89:20:cb:56:1c:e5:87:2d:1a:c6:2f:ab:
                    d0:c9:8d:3b:fd:93:4a:b3:0a:e7:cd:1f:34:40:5c:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:51:C7:9D:34:7F:EB:29:D4:0F:DB:AE:C4:2D:DC:4A:B7:35:7E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca184fb-1289-3395-b974-d53265005208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.249.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:7e:ce:18:d8:e9:85:2f:3a:1c:0c:7b:39:f4:d4:ee:f7:
         87:25:d1:dc:0b:fa:d7:8f:7d:14:1e:3a:b4:65:98:46:b6:31:
         c9:ea:a7:5e:b3:27:94:fb:13:03:ae:d1:dc:63:50:fd:99:b0:
         c5:4a:2c:50:95:5e:e3:11:a4:89:ec:4e:9f:1d:87:88:0f:f9:
         54:6d:c1:84:eb:5d:42:1d:95:48:2d:57:78:29:df:1c:53:c2:
         9f:76:0f:ae:af:ac:e0:ca:3f:eb:e7:da:79:68:3f:54:b5:cb:
         30:2a:f0:55:9f:04:29:7c:0e:69:82:c7:b9:a0:ee:f4:1a:09:
         a8:cc:a8:0f:37:73:4a:3b:d5:69:a4:cd:24:b9:e7:e3:dd:15:
         1c:a8:1e:d9:f9:f5:69:74:75:86:38:1e:32:d2:05:bc:cc:09:
         36:3e:53:47:66:90:a5:b7:91:a1:53:40:02:18:76:14:7e:2f:
         6c:2a:1a:6d:7d:50:98:af:0a:db:08:e3:84:a4:b6:ec:ed:10:
         35:da:3c:16:d0:bd:78:98:43:68:01:38:9a:73:d8:10:b4:6b:
         c4:2a:f3:23:f3:98:d6:75:e9:d4:3b:e6:c4:0f:9b:96:d0:08:
         a0:c0:99:d0:aa:42:0e:5d:09:17:2f:6c:26:00:8f:01:d6:37:
         85:8e:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:12:42 2025 by rpki-client