Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17b6b2-75e7-3bb0-b4c5-61124f12811a.roa
File:                     8d17b6b2-75e7-3bb0-b4c5-61124f12811a.roa (raw, json)
Hash identifier:          jRXw5ra7H/gGQyGZ99VAYohyPQU9csJgHFw+kNNrWro=
Subject key identifier:   D0:52:CB:D7:62:75:D8:73:47:8D:01:0C:FB:59:7A:31:D3:FB:8F:7D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC2708B8AB7879FCBFB34DF20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17b6b2-75e7-3bb0-b4c5-61124f12811a.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        199.223.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:8b:8a:b7:87:9f:cb:fb:34:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=57895cd4-532a-45bd-ad6a-319a1aa02a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:5b:dc:4d:95:69:49:c8:cf:0e:a7:09:4a:
                    19:f6:aa:97:18:65:a3:4d:1c:da:87:5c:d5:fe:d3:
                    f2:98:a2:51:2d:b5:a0:aa:b1:79:a2:b3:19:2e:4c:
                    f2:00:f6:52:a9:53:ef:15:a3:60:51:31:90:a7:92:
                    0c:8e:5e:ad:7c:bf:7d:26:eb:6d:5a:b6:93:ea:d6:
                    74:d9:50:5f:0b:cf:b8:16:cf:d6:89:6f:a2:32:4f:
                    d9:c2:a9:cf:c3:2e:08:4e:5b:46:d8:4a:5b:57:c7:
                    d3:41:75:7a:ae:8e:20:18:37:e5:76:89:e3:7a:ef:
                    0e:e1:4c:cd:e6:42:62:25:a9:2d:ce:1c:aa:db:cb:
                    f2:00:76:d4:5f:28:9f:4c:a3:b4:17:29:ae:cd:06:
                    77:cb:1b:65:b1:0c:12:5f:7f:8a:ec:6a:6f:ec:f1:
                    76:b8:28:5a:96:cf:e8:78:74:7b:0a:27:86:07:6c:
                    a7:4a:7a:94:f9:5f:65:e1:c0:2b:10:ae:8e:99:23:
                    27:3d:c5:9b:97:6d:ba:0e:8f:42:dc:f1:e5:b0:1c:
                    60:d4:d3:ba:eb:c6:e4:fa:69:37:a1:d4:43:cf:97:
                    3d:2e:be:79:d6:b4:f3:0b:c1:2f:75:78:5b:d5:14:
                    8d:d1:f9:a8:c6:88:c1:5a:3c:74:84:74:0e:dd:c7:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:52:CB:D7:62:75:D8:73:47:8D:01:0C:FB:59:7A:31:D3:FB:8F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17b6b2-75e7-3bb0-b4c5-61124f12811a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.223.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:a7:28:4c:a3:74:ab:c7:42:1a:e0:ac:18:2b:ad:01:df:
         76:e3:df:14:5a:87:5c:42:ab:e0:47:8e:31:a2:9f:a4:5a:2e:
         c9:44:e0:a9:e4:ff:f6:c6:ae:8d:58:53:1a:e1:ac:e4:54:33:
         22:0c:d6:e7:8f:d6:86:b1:60:61:50:f9:da:d9:b9:b3:d7:86:
         82:fb:eb:3d:aa:ee:87:b9:0e:66:84:68:56:03:e1:01:8d:60:
         d9:be:03:05:ad:26:cc:31:1f:6f:19:12:cc:a5:9b:e2:43:db:
         2c:f2:9f:be:ea:2c:9c:c1:d9:22:30:a2:bb:89:bc:2c:bd:33:
         cd:93:3c:05:60:46:bf:05:75:72:66:dc:dd:32:ba:34:e2:e4:
         f0:97:e7:13:3d:3f:56:79:ce:83:9a:90:6b:65:e7:72:18:80:
         1f:e0:5c:d9:90:4a:13:e6:03:07:f1:8e:3a:8d:d5:b6:1a:17:
         4f:c9:3f:c0:4b:9e:e7:b4:16:55:c9:71:44:2c:4d:9f:a4:77:
         2a:99:36:90:93:80:45:be:5f:8d:12:4e:5f:eb:7f:48:d9:1f:
         7b:36:3f:92:c5:c2:b6:7e:b4:06:30:8e:7f:2f:42:e8:1c:19:
         99:f9:80:2f:68:d3:69:4a:25:36:63:5c:fd:45:44:35:aa:71:
         9f:9b:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:56 2025 by rpki-client