Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a351218b-91cc-3420-b3c9-5d686febc019.roa
File:                     a351218b-91cc-3420-b3c9-5d686febc019.roa (raw, json)
Hash identifier:          V5raL3rPB3iaWEeEVtfMtDWvy+ZrE0VtpNoLkBgSqLU=
Subject key identifier:   74:7C:C2:3C:C8:82:FC:65:D8:11:8F:D1:1C:F3:C8:88:55:2C:85:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB0DC97ADFE6490BB34C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a351218b-91cc-3420-b3c9-5d686febc019.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.221.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0d:c9:7a:df:e6:49:0b:b3:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=da453b46-0f92-4041-b6c5-603bd1d575b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:52:6c:e9:0f:e9:03:1c:50:e8:f9:b9:4d:
                    d8:06:31:ec:9e:fd:44:e8:48:e7:3a:c7:83:7e:dc:
                    ec:08:ac:d7:1c:82:02:08:d5:1e:50:14:24:71:8a:
                    42:e0:41:87:87:f2:53:1d:8c:1f:e7:92:91:be:36:
                    6a:db:02:69:63:a2:9d:19:fe:c5:e7:cd:5d:2d:97:
                    62:e0:0b:a4:81:7f:91:89:c8:e4:d4:b5:7b:52:88:
                    da:83:03:18:9d:61:29:0e:34:76:74:fd:3b:8b:05:
                    cf:4a:1f:ea:6d:4c:4e:4c:3c:e7:3b:c3:44:ed:98:
                    8e:b5:92:62:99:47:ea:57:dc:6a:6b:9f:62:81:3b:
                    a3:1b:47:2f:b8:be:89:8b:a3:ed:d4:36:4e:4c:05:
                    97:7f:2f:c7:b5:f6:69:c4:03:f4:f1:24:11:90:4d:
                    8e:f4:f5:4f:55:df:39:8e:9f:8c:09:55:b3:93:1f:
                    a0:13:ba:b0:ce:9f:e3:fb:84:f3:9f:02:1b:a7:2b:
                    db:4f:c2:53:7c:d1:33:1e:79:a5:a9:69:b6:17:6d:
                    c3:e9:9b:7d:48:ce:da:14:e4:36:6a:a7:79:1d:36:
                    f1:5e:f1:77:44:2a:de:f0:05:02:ec:7b:9e:d1:13:
                    f1:1d:6b:d8:c1:8b:f3:30:37:90:28:97:c8:c4:f0:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7C:C2:3C:C8:82:FC:65:D8:11:8F:D1:1C:F3:C8:88:55:2C:85:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a351218b-91cc-3420-b3c9-5d686febc019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:b8:b8:8e:ce:a5:a4:01:ca:a0:fc:2b:16:7e:7d:66:60:
         40:d3:a0:d7:3a:c2:ee:0f:1b:2f:31:39:0a:8a:c5:9d:d4:28:
         5c:84:6a:20:fd:17:60:22:2d:32:6a:d3:0a:12:31:8b:22:da:
         52:3e:3a:3e:d6:40:4e:5b:44:f9:e0:67:c2:ac:60:7b:84:6e:
         a0:15:b4:51:98:c1:4d:65:e2:d7:89:15:76:c6:fd:be:75:2f:
         61:84:54:2c:b1:7b:6e:03:36:a3:57:c3:20:e1:7f:7e:28:b2:
         f6:aa:68:17:3f:5c:ba:6f:27:73:80:61:28:2f:a3:cd:21:4e:
         5e:32:21:e6:75:be:5a:e9:bc:6d:91:8b:33:27:5c:5b:c3:88:
         12:95:2c:12:6d:0f:1a:2b:0b:ef:a5:09:3c:76:dd:2e:3c:af:
         b1:04:12:78:a7:54:15:46:1d:e9:e8:30:62:f9:b3:a0:a6:5a:
         20:9e:40:0d:bf:c8:09:68:90:74:7e:2e:21:5c:0b:8b:05:03:
         61:d3:b7:31:4a:a7:e5:56:7a:50:3e:0b:4c:ab:07:e8:42:62:
         2d:86:56:9c:be:35:cc:23:ad:29:88:25:c5:ad:78:25:0f:43:
         a4:81:8e:ca:ba:c5:57:03:34:7d:ba:09:73:b1:7a:59:29:65:
         61:28:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:03:34 2025 by rpki-client