Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/316b97cd-2800-3170-b07b-7e55f8f61437.roa
File:                     316b97cd-2800-3170-b07b-7e55f8f61437.roa (raw, json)
Hash identifier:          kXDzeHoa5lXqKp3Yn2p7jNZsNYXqRVZQa8yUPnm8+oM=
Subject key identifier:   A3:97:96:3A:7C:59:53:5D:08:D6:90:E9:02:48:25:67:92:98:01:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F6417E89F2121C874D7800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/316b97cd-2800-3170-b07b-7e55f8f61437.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.243.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:41:7e:89:f2:12:1c:87:4d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e4046830-1364-4f58-a848-d5c1493d22ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:74:3c:38:65:2e:9e:80:36:20:ad:cb:fb:
                    09:06:fb:ca:bb:35:09:f7:53:ea:7e:fe:fc:14:2b:
                    e4:10:9f:15:ba:53:9e:30:c8:b1:aa:25:9c:d6:dc:
                    9a:70:f0:82:76:02:0a:fc:92:8f:32:61:fb:a1:85:
                    74:ea:d5:3b:64:65:ca:11:e4:80:01:71:23:d7:a7:
                    5c:ab:1e:f8:0e:90:ad:8c:a0:b7:f4:cf:7a:ea:aa:
                    ad:7d:54:5f:7c:ae:da:91:b8:c7:13:b5:62:d6:b4:
                    c3:b4:45:37:f6:18:63:c0:7d:6f:3e:1a:76:8c:e4:
                    50:42:86:dd:c0:7c:5c:26:2f:ee:25:23:e9:87:bf:
                    2c:e3:d0:ee:ea:8f:af:f9:9d:07:c9:5b:a3:ca:be:
                    1d:71:1b:6d:5c:36:cf:25:3c:7c:20:0f:88:b5:ad:
                    50:a8:2d:72:76:e7:ad:df:89:89:62:26:0b:a1:05:
                    5c:c9:d6:19:cb:a3:b5:d9:34:93:1b:9c:fb:35:1f:
                    3d:1d:38:0f:e5:2d:6b:77:6e:89:0a:28:d7:cd:4b:
                    72:c0:1e:5e:53:dc:60:db:76:5d:cb:a9:bc:e8:8a:
                    29:a8:1e:2e:17:fb:a2:de:50:2b:0d:45:b9:26:6a:
                    d6:9f:99:8f:be:2b:43:67:43:57:9f:7c:a8:de:b9:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:97:96:3A:7C:59:53:5D:08:D6:90:E9:02:48:25:67:92:98:01:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/316b97cd-2800-3170-b07b-7e55f8f61437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.243.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:68:7f:f4:b9:b9:4d:37:77:ed:c6:ad:d3:9f:48:f8:f9:24:
         af:8a:78:0a:61:4f:23:3d:e4:4a:d9:71:de:6a:04:af:78:ae:
         a9:48:b2:44:7c:67:e9:20:4f:2c:4e:a4:26:37:88:5e:ff:03:
         f0:bd:ef:d3:44:46:55:3e:e5:b2:15:46:a5:92:1d:ad:f7:53:
         41:84:ac:6c:f6:f2:a1:84:6e:2c:bc:82:63:c7:70:fc:9a:52:
         9c:30:02:e2:c6:fa:b9:ec:73:cb:4a:f0:ce:39:3d:23:d2:b1:
         06:c9:af:b1:2f:21:41:dd:e7:b7:b8:67:0a:80:a8:a7:39:30:
         bf:88:f5:d4:47:0f:80:cb:f4:96:8f:fa:fe:ff:4f:04:8b:70:
         6b:06:8f:7b:9c:9a:48:08:b1:0d:31:13:48:eb:dd:06:f8:35:
         8a:98:e9:f7:2d:38:b9:80:ea:74:83:7b:e9:79:bf:44:4e:5f:
         61:32:f3:41:b8:2d:42:a0:7a:e0:b0:d5:17:1e:1e:79:29:ac:
         7b:a3:5d:ce:da:52:c9:0d:0d:b1:99:07:15:83:c6:34:4e:b4:
         28:bd:e2:a6:f2:70:ad:da:35:bd:f8:cf:d1:ca:85:36:b5:54:
         be:9d:e1:c2:58:8f:8e:d4:3f:fd:c0:59:2f:61:f1:7e:96:f5:
         f1:72:24:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:12:52 2025 by rpki-client