Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8252dbe0-5a05-34bf-ab39-5e6915401c39.roa
File:                     8252dbe0-5a05-34bf-ab39-5e6915401c39.roa (raw, json)
Hash identifier:          5cwvkHEP5vqcFBVR6fZaSNMqf4BOPX/JZf7mAkA+o8g=
Subject key identifier:   16:4E:75:A5:26:21:C6:03:1B:49:04:C5:8A:A0:F9:D3:FE:1B:9A:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A963683C8B5063A1387E12280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8252dbe0-5a05-34bf-ab39-5e6915401c39.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     11303
IP address blocks:        199.45.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:83:c8:b5:06:3a:13:87:e1:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=d0306f93-dffa-4501-9509-56ebcf3ffc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:23:47:86:53:2a:65:2c:f5:b3:ba:6c:45:
                    4c:5c:d3:34:80:ec:b0:a4:44:41:ed:64:41:e5:db:
                    e9:03:e1:cc:a8:9b:4f:71:1d:a3:af:bc:e6:af:51:
                    83:74:4f:85:16:51:a1:5c:e3:ad:73:ea:1f:41:f7:
                    b4:6b:10:6a:df:73:65:29:1f:1e:64:cd:c7:ce:7c:
                    7e:7b:01:63:21:72:ae:b1:dc:51:ba:dc:89:64:6d:
                    68:08:a9:56:85:2b:c0:02:5c:9b:5c:22:b8:b4:ad:
                    85:d6:be:b3:12:fe:d3:f3:75:22:33:f8:9c:58:3c:
                    ab:0a:74:89:e0:2c:33:1d:0e:a3:5e:2a:f0:d5:7e:
                    e8:c0:20:21:bf:cd:73:18:1a:03:ca:08:0a:b0:6f:
                    be:41:93:e1:2e:db:75:6b:1c:54:df:d6:21:74:91:
                    f4:14:8a:4d:bf:69:54:fc:df:33:e6:99:21:12:b3:
                    aa:f3:fa:84:77:c2:f4:87:28:62:79:48:05:2c:3d:
                    a7:2e:4a:4e:31:a2:26:d5:d3:9f:b0:c5:5a:56:99:
                    2d:60:a8:71:0f:35:62:de:af:bb:e6:fd:3d:26:ef:
                    b2:c2:f1:8f:7f:aa:94:8d:b8:96:cd:ed:2e:70:a8:
                    cf:cd:98:94:ef:d0:b9:84:7b:cf:70:c5:43:97:7f:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:75:A5:26:21:C6:03:1B:49:04:C5:8A:A0:F9:D3:FE:1B:9A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8252dbe0-5a05-34bf-ab39-5e6915401c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:f6:0d:d8:e9:ae:67:c6:bf:38:bc:ac:b9:51:ba:8f:3d:
         11:c6:de:79:11:7d:77:3c:cc:fe:83:bd:dd:1d:92:45:7d:c1:
         de:6e:9f:b5:6d:38:cb:08:34:c3:f6:ec:a1:22:c2:9a:cb:14:
         8e:b7:76:7e:b8:39:ae:57:89:1d:e6:db:a8:1f:4f:d8:00:08:
         17:e5:4b:3b:82:45:7a:0c:bf:bf:a8:3b:0f:1a:1e:06:ef:08:
         48:a1:14:a0:ae:45:1b:e3:e9:78:c8:04:fc:b9:6a:3b:a4:2c:
         05:e6:f8:e4:37:6a:4f:30:27:93:0a:d8:d5:b7:16:e7:bb:72:
         e5:68:f5:c4:09:aa:34:47:0f:5d:75:b0:9d:14:b9:75:2d:14:
         09:99:f9:dd:fb:a7:25:1a:9d:2c:fe:70:1a:85:83:9f:4f:63:
         d3:ea:df:8c:32:0c:6e:a8:d7:a9:f2:7f:60:92:32:77:46:e4:
         18:9f:19:5d:f9:15:b2:10:f3:3c:2c:9b:12:2b:3a:f2:f9:1e:
         7f:f4:dc:d7:2e:0a:39:7e:9e:85:2a:1f:9a:e6:dc:13:68:39:
         32:e7:e3:a1:2d:29:f8:b1:38:fb:38:18:1a:0c:ad:a6:4e:64:
         ef:6b:85:6e:15:36:4b:94:0c:0a:c2:5e:ce:a2:c2:80:b3:46:
         12:9a:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:38 2025 by rpki-client