Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d7b4077-1406-33ad-8a4f-f7dfc5d197f5.roa
File:                     0d7b4077-1406-33ad-8a4f-f7dfc5d197f5.roa (raw, json)
Hash identifier:          nAySzehiJS3rquToxuWNjm2I4NPMnU/Ct+mnDr23qho=
Subject key identifier:   15:83:3F:F1:34:86:3B:22:44:43:DE:31:9B:AC:08:BB:C1:A4:50:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB41089589690BC70C7AAC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d7b4077-1406-33ad-8a4f-f7dfc5d197f5.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        68.236.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:08:95:89:69:0b:c7:0c:7a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=d319d847-60b8-42d9-b7e2-f1532497e4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:db:ed:4a:fa:d6:a1:f8:90:92:c6:37:be:a8:
                    96:82:2c:86:04:a6:e1:7a:87:3e:e6:4a:d3:36:be:
                    c0:4c:a8:45:ce:5b:a2:a1:1d:24:36:eb:06:65:80:
                    5e:23:30:47:b9:4f:61:64:c1:c1:03:1b:94:7c:54:
                    df:73:26:c2:50:1d:be:38:78:77:51:27:df:2c:f3:
                    73:1e:82:66:e8:56:32:37:ca:59:8c:3c:ae:b7:22:
                    23:00:be:2d:24:1d:5f:e5:5a:3d:4f:35:ec:22:89:
                    d4:76:c0:ef:b3:76:6f:5b:ce:93:59:aa:20:9c:f2:
                    0a:fa:58:a0:bb:f8:32:f8:5a:cd:b3:7e:79:47:00:
                    f2:3d:a2:19:9b:c8:e5:39:27:e5:0e:aa:33:0e:ca:
                    e4:4a:e0:96:e3:d1:65:7f:ee:75:c5:c1:d8:0f:fa:
                    84:22:da:77:a4:12:77:38:69:a6:49:9f:47:a3:3b:
                    d1:bc:05:35:21:3b:9d:f7:e2:19:68:df:54:9f:78:
                    6c:3c:2a:a4:91:65:00:40:3b:30:db:48:3a:f4:b3:
                    75:97:29:6d:89:99:e7:6e:ee:20:f4:2d:23:82:ac:
                    8a:ae:88:3f:3d:8b:d6:00:00:87:2b:30:49:4c:bc:
                    6f:46:bd:09:80:4f:45:b8:11:40:21:9f:03:ad:02:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:3F:F1:34:86:3B:22:44:43:DE:31:9B:AC:08:BB:C1:A4:50:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d7b4077-1406-33ad-8a4f-f7dfc5d197f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.236.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:18:d7:3b:04:dd:cb:2f:7d:da:92:0b:6e:21:56:63:59:
         5c:b3:d4:06:6d:ea:09:6e:84:79:b7:a3:d7:42:2e:c6:a4:b7:
         d3:4f:cd:df:22:b5:29:a2:19:20:ee:26:11:a2:82:e2:3f:24:
         ca:18:d1:15:e6:2a:84:27:90:79:ea:40:8d:db:01:06:3f:6a:
         13:2c:03:fe:ab:a5:fe:67:3f:43:34:8a:89:ac:98:f8:98:a5:
         e0:fa:52:ce:7c:46:a7:ca:92:f0:ca:81:4b:aa:97:c8:fd:f3:
         61:90:1a:38:55:21:96:38:7e:a7:ae:3a:03:dd:57:e6:d1:8d:
         da:9a:fb:96:2a:33:81:4c:ac:a3:22:43:59:ea:19:52:47:c4:
         7f:35:20:b6:4f:d0:9b:d8:7e:70:27:62:97:2a:d0:ba:de:a2:
         66:9f:86:b7:4c:7c:39:93:36:1f:ed:75:71:45:25:9e:0c:1a:
         1c:65:2b:e8:68:fb:be:c8:7b:c8:7f:45:76:39:92:2d:bb:df:
         2b:af:cc:bb:03:79:b3:e6:c8:ea:d5:6e:f6:e5:9a:16:32:f6:
         60:f7:d3:73:88:0e:df:57:49:52:cd:2a:ba:61:88:db:34:f9:
         02:71:4c:ee:c8:62:d6:2b:f6:cd:6d:46:b0:87:59:a1:f7:4e:
         88:77:7c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:53 2025 by rpki-client