Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8cd84ec2-ccae-3157-9377-4994dbce7aa3.roa
File:                     8cd84ec2-ccae-3157-9377-4994dbce7aa3.roa (raw, json)
Hash identifier:          GeHUrDw8Z8s0qwPpKptgU5P+DQMdfw8UF8+g0AVyn3k=
Subject key identifier:   B8:B2:11:C7:57:D7:B6:75:05:8C:74:CE:21:60:52:E6:82:33:50:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9636838B7432527450C72900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8cd84ec2-ccae-3157-9377-4994dbce7aa3.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.253.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:83:8b:74:32:52:74:50:c7:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=7ae6c19c-4c72-459e-8482-8358928c88ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:5c:5c:f4:ae:bb:a3:8c:fa:cc:d7:3a:46:
                    d5:9d:8a:c0:6e:24:82:52:3e:23:fe:42:cd:b3:01:
                    8d:91:3a:47:29:8a:bd:a0:28:a6:ad:2a:b5:5e:49:
                    13:25:c7:c8:e1:dd:ee:15:7c:89:4f:91:11:3b:dd:
                    83:bb:52:d7:03:89:ac:23:f5:ee:5d:3d:3b:84:6e:
                    cc:aa:66:96:6e:67:10:ae:09:92:69:73:d2:09:35:
                    0e:0e:49:b7:ce:34:b3:49:eb:25:c1:ee:cd:a5:09:
                    7f:d4:ef:bf:88:d8:00:a3:f9:c6:0b:30:5a:30:8d:
                    ed:59:22:49:7e:2e:c8:b4:0f:1d:11:b9:d5:2e:b7:
                    c6:7d:66:39:c6:c7:df:e1:26:07:59:de:6f:fa:bb:
                    c7:83:2b:25:2c:60:42:b6:2a:1e:e4:b3:aa:c1:1b:
                    59:10:98:46:7f:f5:10:66:97:60:ff:a5:5f:3e:9a:
                    b7:3d:ad:df:3f:31:0c:05:5d:be:ce:64:a0:b6:82:
                    3f:36:8b:6c:71:ee:ab:dd:4d:fb:76:28:f4:ad:aa:
                    c9:9e:e9:a2:fe:3a:7a:20:45:e8:0e:f8:b3:64:e1:
                    f3:d0:14:43:b4:44:40:b2:7e:4a:98:d1:dd:0a:77:
                    3d:5d:7e:c5:18:8c:ef:2b:5b:49:2a:75:1a:bc:21:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B2:11:C7:57:D7:B6:75:05:8C:74:CE:21:60:52:E6:82:33:50:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8cd84ec2-ccae-3157-9377-4994dbce7aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.253.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:af:05:a2:f3:21:be:64:7a:dc:be:dc:0c:a3:96:8e:83:
         a0:46:ec:95:5f:2d:32:de:4b:01:96:56:6a:1d:4a:47:2e:15:
         33:a9:c5:ca:8f:4e:7a:3a:eb:0a:93:eb:4b:0e:9e:2c:4c:9d:
         0f:82:1f:d5:8b:b2:98:c8:a1:fd:07:94:cc:ac:a1:ff:a6:ab:
         54:4f:88:3a:64:9b:ea:46:ea:b6:6f:c0:1a:71:40:a6:60:33:
         50:a8:f4:f6:76:9d:f5:c1:78:85:18:16:20:8f:eb:61:4e:ed:
         0a:99:f4:d2:36:c3:92:b5:8c:c5:24:0b:79:b1:cb:39:98:75:
         21:6b:f6:f8:4c:0d:06:8e:03:1a:4f:69:02:3d:9e:87:ca:04:
         c4:1b:c4:3a:94:32:63:e8:e4:00:be:e8:27:b9:04:c2:b5:f0:
         78:91:7a:20:38:98:34:21:50:80:f0:33:d2:55:74:23:08:80:
         41:03:7a:27:88:c4:a6:24:83:f8:9c:90:b8:a1:5b:c9:e7:86:
         fa:3b:52:52:b4:5d:a7:e2:16:30:a5:9d:f0:23:da:fa:76:e3:
         eb:80:ee:7f:dc:b2:f8:97:17:0f:dd:98:24:d9:c4:1f:1d:d9:
         ef:ff:9a:36:6c:7e:5e:e4:a6:3f:08:71:0c:77:6d:99:e1:b0:
         e9:c1:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:31 2025 by rpki-client