Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503695e4-3fe0-339b-bbf7-98221a92d3d1.roa
File:                     503695e4-3fe0-339b-bbf7-98221a92d3d1.roa (raw, json)
Hash identifier:          IcgQ8/h0XD0dbvr7S2F+x5mGsL2kjoRkbC4fksA8zXs=
Subject key identifier:   EC:BA:67:30:49:6C:4D:37:44:3B:81:F3:31:93:C6:B1:A3:94:DE:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0AE3A5E8A5A4D583EEEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503695e4-3fe0-339b-bbf7-98221a92d3d1.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.211.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ae:3a:5e:8a:5a:4d:58:3e:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=863089de-48f2-41ea-bc6b-af3b91cd9da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:64:87:ac:e3:87:9f:3b:ef:e6:c1:ad:40:
                    1b:fb:a0:82:e0:45:71:98:78:4a:a5:f9:94:e3:9c:
                    f8:53:c9:7a:e0:73:b1:7a:2e:b4:9f:f0:35:77:9b:
                    20:86:9a:b3:22:39:e7:4c:80:0f:90:27:28:b3:a9:
                    a1:e3:d4:9b:27:47:be:cc:d8:cb:3f:6a:af:97:5b:
                    6c:15:1d:80:c5:86:f6:10:20:9c:fb:48:ee:c6:60:
                    cc:d8:88:69:55:da:5f:9e:e9:a0:92:85:d3:8c:0f:
                    5e:02:58:1e:e8:5b:22:4f:77:d1:b9:8d:b2:a0:a4:
                    db:6b:9b:ed:36:64:94:12:77:00:42:cb:c8:e0:23:
                    92:72:19:1f:e1:09:f9:1f:aa:7d:8e:3a:19:2f:ed:
                    ae:cf:40:24:ad:43:28:22:4d:2d:5e:2f:27:78:97:
                    9d:14:46:01:4d:01:35:63:1a:de:e1:4e:80:a1:b7:
                    e7:1b:c0:ed:4c:85:c2:24:95:91:d6:b7:03:f3:b2:
                    bf:10:df:67:4f:35:e6:46:3d:4e:39:77:b0:21:ee:
                    a8:cf:c4:d2:07:65:ef:a2:6a:0b:71:65:73:ea:99:
                    d4:cc:2c:94:a7:b4:50:b0:b1:7d:0a:77:f8:fd:33:
                    af:49:cc:0f:75:da:83:a1:75:4b:fd:24:0a:ab:2f:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:67:30:49:6C:4D:37:44:3B:81:F3:31:93:C6:B1:A3:94:DE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/503695e4-3fe0-339b-bbf7-98221a92d3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.211.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:88:31:58:a5:22:07:fb:f2:c2:e2:be:8b:9f:87:18:20:dd:
         6c:b1:7d:6a:20:2e:02:b3:cf:e4:da:fe:66:fc:b1:2f:2c:ac:
         d2:96:70:7a:c6:e7:a3:17:94:e5:db:ef:3e:c4:cd:23:12:41:
         43:61:35:8e:36:c3:ae:34:e1:de:e2:cd:f4:5a:2c:2d:cd:05:
         12:90:d2:f9:b7:ae:00:3b:ae:f8:1f:9c:9a:f9:7f:c4:bf:1b:
         b7:c8:cb:45:be:8d:5a:ae:82:c1:ea:50:bd:98:c0:d9:9a:5c:
         94:d9:d2:d0:d3:e1:c2:64:ac:3e:cb:e5:3f:0b:67:70:d3:bd:
         c4:32:e8:1d:64:35:41:b5:6d:c3:43:f1:cf:95:40:8a:d4:98:
         51:7e:87:7a:ea:20:4f:b7:37:79:75:31:21:61:09:5d:04:53:
         63:05:51:2f:3e:c2:78:dd:5a:37:78:bc:be:f2:e4:07:2d:28:
         81:ac:c2:4f:5c:26:62:ba:ec:d6:ac:19:ea:fa:22:ea:65:9d:
         c3:a1:af:27:6d:71:a6:6f:82:7c:64:83:e7:23:bf:0d:78:b8:
         47:6b:36:59:bc:14:0a:ed:78:c8:95:52:59:63:04:b2:92:9e:
         ba:3b:44:92:50:36:0b:c1:73:6f:e7:47:4e:31:ba:f5:a0:66:
         5f:4e:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:20 2025 by rpki-client