Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e7570ec-15e9-38e1-85e1-0eab71fa1244.roa
File:                     0e7570ec-15e9-38e1-85e1-0eab71fa1244.roa (raw, json)
Hash identifier:          BLY9hqgOKaVEyzvMC6OxQtvS0COckoQCkAQ4mFdIJ/0=
Subject key identifier:   9E:90:48:72:8A:C5:F2:98:55:ED:C3:F7:20:7C:99:37:24:45:34:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63463FE525491D14F5B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e7570ec-15e9-38e1-85e1-0eab71fa1244.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.251.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:34:63:fe:52:54:91:d1:4f:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=488669f4-78d8-401c-8ca2-2df7c9e93bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:bc:64:bc:54:d4:6f:f2:27:e1:e2:5a:2c:
                    26:90:1e:98:56:9d:28:47:13:a1:7e:84:c7:a7:a8:
                    5f:16:c6:0f:ee:26:6e:dd:95:45:d8:a6:6a:a8:08:
                    4a:f9:42:f9:4c:9e:0c:a9:7c:e4:16:2f:15:99:a2:
                    4e:6c:13:b5:4e:e4:8f:aa:3e:4e:90:ef:c9:48:72:
                    35:8e:40:dc:0d:3d:7b:0f:a0:bf:ef:49:63:52:e4:
                    29:10:41:b3:59:c1:23:37:2d:f9:2b:f1:34:b5:fa:
                    0b:12:d8:c1:c6:aa:40:a0:a1:7c:f0:1a:6e:14:fb:
                    75:f2:0c:7b:1c:78:65:d4:39:e1:b4:01:ea:b3:cf:
                    07:da:08:c0:9c:71:55:9b:6f:c9:44:7d:ed:a1:9f:
                    7d:41:af:dd:3c:94:ea:c2:db:3d:3b:37:e2:7a:12:
                    88:c5:55:07:32:9a:60:73:58:e6:26:78:0f:e4:02:
                    e5:f0:65:72:26:0d:32:1f:64:9a:7c:a2:5c:8e:2c:
                    12:34:52:41:df:fd:72:e9:33:16:e9:c9:d6:66:85:
                    26:85:fa:65:cb:d1:2a:37:19:79:ae:48:c9:aa:f5:
                    94:53:69:5f:54:33:81:6e:fd:5a:74:c6:39:84:d9:
                    ee:eb:f1:9d:ae:41:06:0d:cd:c1:1a:b6:b0:5d:11:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:48:72:8A:C5:F2:98:55:ED:C3:F7:20:7C:99:37:24:45:34:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e7570ec-15e9-38e1-85e1-0eab71fa1244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.251.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:59:7c:5e:d7:fb:60:e1:fb:bc:27:db:ed:7f:f0:5c:fe:
         2b:b5:be:2d:fa:98:35:f2:c4:e3:7a:ea:14:d3:a9:13:38:6c:
         e0:e2:94:bb:9e:a8:80:ef:ed:e0:af:90:fe:03:47:5e:37:32:
         02:4b:e4:54:6c:e2:c4:b9:62:a6:e4:af:60:fc:9b:59:0b:69:
         de:52:5c:89:a5:f1:e6:84:f4:f4:dd:5f:d1:0c:b4:2b:08:14:
         cc:1b:8e:78:d6:63:90:11:8f:27:bf:9d:5f:2b:3c:58:af:f1:
         0e:25:73:ab:e1:d8:a8:a4:55:f6:4f:5b:cf:ed:84:15:e5:9c:
         2d:62:65:78:51:dc:5a:2f:c3:a0:da:23:63:7f:77:49:f4:d2:
         80:e4:60:4a:8c:b8:fa:f5:d4:b7:85:d3:59:18:fb:22:b4:a6:
         a0:d3:7d:ad:58:89:c2:2e:aa:9e:96:52:eb:5f:b4:57:12:e2:
         2e:28:c3:7f:8e:8d:46:e0:c8:50:c8:45:e1:5c:8b:d5:36:22:
         9a:02:41:18:ea:20:51:5f:f0:58:a6:4c:a4:ca:64:7c:83:38:
         54:81:9b:81:99:2c:b3:29:33:7d:ee:42:52:1a:00:48:c9:be:
         75:72:7e:6b:20:61:08:37:c5:18:8c:c7:dc:da:c6:cd:e4:10:
         4f:5d:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:33 2025 by rpki-client