Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa
File:                     3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa (raw, json)
Hash identifier:          4Cpvvw62WFUAgDbofiGeSe6TLmVf9j3CzpSMvjGy8D8=
Subject key identifier:   AC:08:A7:D1:1D:EB:2A:CC:C3:20:D0:A2:3B:E1:B0:B2:0E:B6:53:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0ABAAFB9B60D265995B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.194.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ab:aa:fb:9b:60:d2:65:99:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=4f02d7e6-083f-49f2-8fc0-c52e83cf5a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6d:41:f8:95:58:4e:db:5c:60:32:7b:38:96:
                    58:ae:73:ce:0c:6e:38:50:7c:dc:d4:ab:33:05:9e:
                    18:a2:b4:b9:65:8f:13:55:a5:74:74:0c:af:05:c0:
                    74:6e:50:7f:16:80:f3:2c:25:58:12:47:93:01:96:
                    8b:6f:d4:69:3e:73:2f:93:c7:2d:6f:13:7b:cd:62:
                    3f:34:71:3e:fd:6b:33:c0:bf:f7:1e:21:6b:ef:0c:
                    1b:6e:d2:69:ea:04:62:79:e7:09:d4:24:8b:7f:49:
                    4c:43:fb:f9:82:9e:e7:61:08:5a:b9:54:bf:d9:30:
                    13:f5:d1:88:f9:5c:b6:6a:05:d7:4b:a7:af:9b:8f:
                    10:e2:0b:42:b8:81:17:df:fd:ee:9a:8b:77:67:f3:
                    ee:f2:aa:81:30:ac:c8:97:d2:50:7a:45:e1:4e:82:
                    60:80:0c:55:94:6c:67:1b:66:8f:ea:99:1d:da:09:
                    5d:87:2a:4d:8d:e2:bd:58:ee:c0:aa:3f:a7:df:16:
                    cf:41:ca:ea:ae:9b:aa:bf:42:92:1c:af:4c:d2:7a:
                    71:76:03:33:83:e2:e9:e2:d7:2d:43:ec:42:cc:a0:
                    97:c6:f2:22:32:c1:1b:1b:1a:36:7e:5a:e2:2c:1a:
                    93:57:8d:d1:21:f0:8a:cd:fe:c1:07:25:9c:2b:62:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:A7:D1:1D:EB:2A:CC:C3:20:D0:A2:3B:E1:B0:B2:0E:B6:53:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:3d:91:5b:ec:74:1f:97:d4:55:c0:a0:7b:52:11:10:cd:
         1e:fd:1b:10:c8:b1:1c:35:91:96:15:34:15:5d:d1:d0:8b:67:
         75:b9:24:99:c2:db:fc:76:8a:67:a0:b2:0c:9e:18:d1:c1:b8:
         f8:c1:77:40:1e:a5:d0:d1:36:6d:d9:75:8a:9e:2b:82:ff:26:
         61:e2:e7:eb:91:e9:e1:a9:60:b6:0c:53:45:9b:e0:e5:65:aa:
         27:71:02:4f:e4:12:36:8a:67:b7:61:c8:04:9d:b4:8d:6a:98:
         09:83:dc:26:21:5b:07:05:7c:9c:44:8c:24:b9:3d:d3:e9:a0:
         58:90:a6:c3:21:3b:62:41:82:dd:b0:2e:ed:b1:1c:58:fb:d7:
         6f:30:dc:e7:b1:3d:b0:d2:fa:f6:74:b0:9f:e0:bd:4d:0a:88:
         7f:9c:21:db:a7:64:66:07:e3:35:b7:6e:b5:48:75:e3:b2:d7:
         52:d2:5a:3f:9c:64:f4:7e:b5:11:52:12:50:2d:7f:6a:6f:7e:
         31:52:3e:04:3f:df:34:40:8d:89:83:b8:6a:c6:d9:d1:94:bb:
         84:8b:d4:88:76:b1:47:45:83:96:59:ea:95:7f:2b:96:8c:a0:
         2d:ea:2b:f8:29:25:43:f5:b5:e1:20:bf:ef:33:ee:61:61:0e:
         c2:a7:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:11:00 2025 by rpki-client