Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa
File:                     885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa (raw, json)
Hash identifier:          VpiBlbIpy+5D9bapPclsLJdz1tdDthXzvT39Sc0Yg9c=
Subject key identifier:   B7:5C:16:7A:69:54:89:77:65:15:BE:28:12:73:1F:66:D1:C8:90:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AADF12F47EFC76E89979FBF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        174.42.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:2f:47:ef:c7:6e:89:97:9f:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=4896ac66-bd39-426f-bf81-b65f5ca00118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:88:ce:75:8e:70:cc:93:ea:49:49:d5:13:
                    1c:f5:b5:69:46:e2:dd:51:31:64:23:83:3e:70:f8:
                    e2:fb:12:6c:c9:7b:4e:af:be:dc:e7:13:63:59:db:
                    cd:cc:ce:af:15:6c:a3:a2:8b:6b:2f:df:eb:ec:06:
                    39:96:8d:97:ce:c0:a2:c5:b8:18:a2:1d:62:9a:a7:
                    dc:09:54:3e:f6:70:96:00:2f:b3:58:29:df:b6:12:
                    cb:fc:3e:d8:3d:9f:f6:5f:d0:a2:4a:39:3a:7f:b2:
                    42:19:98:12:0d:1f:9e:83:fe:12:63:f1:2c:a8:a1:
                    61:ac:7b:87:45:73:75:ea:40:52:a1:47:92:4d:2e:
                    13:88:4a:9e:0e:ec:2b:f3:7a:ed:ea:11:1d:1a:84:
                    f3:1f:0f:11:81:1b:a1:7d:a9:c1:6e:7f:57:38:93:
                    5c:bc:3e:5a:cd:31:70:a4:f2:6a:90:c9:06:1f:35:
                    5c:b8:f3:ba:12:07:b7:63:e3:c5:22:fb:14:45:89:
                    0c:d2:8a:2f:6c:9a:8e:e9:3e:29:d3:58:a9:a5:23:
                    66:3c:c9:3c:9c:b2:92:fd:32:8f:6b:d2:23:e3:b9:
                    56:53:26:24:92:4f:e2:cb:c7:eb:d2:cb:18:2f:9a:
                    ea:58:df:40:25:b5:88:05:43:51:4b:18:e4:b7:6e:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5C:16:7A:69:54:89:77:65:15:BE:28:12:73:1F:66:D1:C8:90:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/885825de-b2fa-3bac-b5c7-e50f4dfba7d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:30:5c:91:86:04:02:b8:ac:e6:a4:85:3a:30:ee:c2:4b:d3:
         66:a4:ff:cb:e8:b4:1c:9d:41:ec:c2:db:13:3f:03:49:f7:5a:
         34:4c:58:fc:d7:56:dd:45:58:cc:a6:7a:93:61:46:3f:5e:81:
         23:9e:9a:35:86:07:4d:54:b4:43:2a:56:cd:fd:98:bb:9b:e9:
         8a:f7:0b:6f:e4:df:de:2e:fb:86:22:e6:3a:81:b8:34:dc:5f:
         94:85:e5:c5:15:31:b4:ed:03:3e:60:21:e3:22:79:54:a9:09:
         6f:50:0e:5b:b6:68:15:62:04:4f:c8:53:03:ad:59:cc:f5:2f:
         66:8d:9e:ae:dc:3f:1b:d5:2a:20:17:da:d0:e0:99:5d:b1:75:
         72:20:df:50:b0:77:48:4b:a0:66:0f:e4:39:6f:27:e7:6e:7a:
         0f:0b:9d:17:50:df:9c:1e:07:a5:32:4f:e5:bc:38:cb:1a:55:
         53:e2:8a:2d:2f:f3:bd:95:5f:ac:f9:fd:45:54:e0:64:62:b6:
         d8:55:85:39:d8:10:b1:77:65:c2:60:84:3f:78:4c:c1:85:e7:
         63:ac:82:1b:56:70:13:11:f9:97:29:f8:89:12:3c:65:6d:cc:
         c3:93:96:d1:88:9b:ab:39:b6:5c:c5:c4:3f:37:40:53:df:02:
         b7:53:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:23 2025 by rpki-client