Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa
File:                     725be529-618d-3533-8b35-baa3838ecbc4.roa (raw, json)
Hash identifier:          jdw66e5TysVUDeDFvLvUC1gWLJOEeylxjr0Ht/ujenw=
Subject key identifier:   4F:9F:D6:54:4D:47:9F:04:D9:C0:68:0F:5D:6E:09:08:89:04:70:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE0AEA529930B87FA75A280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.212.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:ae:a5:29:93:0b:87:fa:75:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=e24e6330-6950-4125-bd29-7f0d1142b022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:bb:02:bc:23:07:ad:43:db:d1:f6:be:21:
                    bd:65:ec:5a:7c:44:bd:de:94:f7:cc:c9:83:24:4f:
                    c0:e1:a0:6a:2e:ad:0f:1e:a9:1e:fb:e8:19:5a:da:
                    82:b0:59:32:fc:59:ca:33:ff:1b:db:4e:75:8d:2c:
                    bb:2e:f0:5d:21:ed:96:73:33:94:5b:76:60:b9:84:
                    cd:1c:35:34:c0:23:b7:c8:f7:2e:44:9b:d7:f9:8c:
                    0c:b1:50:28:e9:2f:f3:3f:9d:ff:05:ee:25:66:3a:
                    63:ea:92:0a:c3:71:db:e3:41:49:91:7c:03:3a:8b:
                    a3:79:c0:ef:2d:eb:0d:7c:f3:e4:7b:29:f9:02:3c:
                    25:68:87:21:e3:7e:4c:49:d7:b2:5a:a6:e0:38:f9:
                    94:fa:5c:3f:d9:f4:36:40:5f:33:68:9f:db:f7:56:
                    5b:c3:a3:d3:55:e1:d4:0a:13:35:6d:e4:c5:53:0d:
                    01:7f:f0:65:90:c3:56:d9:e2:2d:de:ea:24:c5:58:
                    e4:09:0e:61:47:db:ce:b4:a8:82:32:e5:eb:32:52:
                    79:93:0c:fa:70:97:7d:48:e1:c3:5d:2e:46:b0:07:
                    70:b8:f0:f6:25:af:51:05:9e:6b:ed:e5:17:1f:ee:
                    53:ab:05:d2:62:13:e2:0e:ae:b6:92:90:8f:86:3d:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:D6:54:4D:47:9F:04:D9:C0:68:0F:5D:6E:09:08:89:04:70:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:c6:d1:61:03:46:af:26:7c:f1:c2:3f:ab:43:c8:bb:bc:
         8d:5c:6d:bf:80:7d:c2:3d:af:d5:57:2f:5a:37:da:ad:90:56:
         24:93:4d:f0:88:3e:ae:ad:6b:f6:b7:58:e5:0e:ac:80:4d:3e:
         f6:13:44:43:9a:83:d5:a3:4b:10:7a:c5:bf:3f:c6:9b:4b:fb:
         4e:cb:61:38:71:86:05:0e:f5:21:4d:ae:20:e5:f6:41:45:4b:
         83:dc:3c:f2:2e:b8:b8:34:2c:43:71:f0:e5:14:cc:d4:43:38:
         e5:d9:87:04:72:c1:35:93:dc:da:50:3c:60:24:82:a7:36:00:
         c0:80:7f:46:95:ab:cb:85:86:e7:d2:3b:8f:bd:66:9c:f6:44:
         2c:e3:ba:11:b8:a3:8b:da:1f:20:6c:97:fa:a3:4a:02:59:4c:
         08:2a:0d:88:b8:7c:32:15:fa:e6:7c:aa:35:f4:6e:79:11:a7:
         dc:6c:4d:27:95:fe:a6:20:f6:d8:06:9a:c3:13:f2:e0:6b:c1:
         04:b6:a1:37:05:14:e9:05:3d:2f:94:c2:d0:04:d1:ff:58:f8:
         74:12:13:3b:30:fe:c7:5c:40:04:5d:8b:db:d8:65:1c:b6:60:
         77:48:f4:4a:4b:63:fd:fd:54:46:92:ab:1a:df:3c:cf:a7:c3:
         a6:46:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:42 2025 by rpki-client