Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97e05550-8496-3245-829c-dcb446bcf8c4.roa
File:                     97e05550-8496-3245-829c-dcb446bcf8c4.roa (raw, json)
Hash identifier:          6iP9w4mUxCK/0cJV5Ss8Ck3Pls1fbH1rzyeXh1zU290=
Subject key identifier:   8B:76:5A:B5:46:87:89:BA:01:5E:CF:3A:00:F0:AD:EE:89:54:51:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F645E1C53B3943FFA2C780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97e05550-8496-3245-829c-dcb446bcf8c4.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.249.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:45:e1:c5:3b:39:43:ff:a2:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=5be06964-06d0-424b-b9bd-20d3cd4b5e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:14:4e:75:a5:39:da:e8:8a:32:cb:2a:7e:
                    04:a5:c7:86:f6:c5:34:6e:30:13:e7:96:ef:51:8c:
                    da:d2:1f:80:68:83:54:15:7e:db:fb:c2:3a:a8:1d:
                    2d:aa:ac:99:0c:05:6d:a1:00:47:ad:42:de:7a:ed:
                    bd:5f:3a:ac:9b:58:2e:90:36:70:76:1b:20:3e:84:
                    94:b6:f8:fe:3c:ff:f0:2f:f9:1a:8e:2e:f0:27:d4:
                    9c:72:4d:3d:23:4a:3b:e8:0c:97:a2:f9:39:40:3f:
                    1f:9b:14:d2:c6:6a:33:71:e6:68:92:dd:c5:c6:58:
                    12:93:51:06:16:74:9d:bb:09:74:9b:9c:7a:4b:7d:
                    ed:4a:83:c8:26:22:48:d4:51:6d:92:e6:8c:75:53:
                    f9:4f:e5:98:d0:80:09:71:3f:20:09:d2:22:c4:44:
                    00:2e:4d:9b:6a:2e:ce:d7:91:88:f0:7f:07:40:af:
                    50:a8:cf:7d:ad:b5:cd:04:f0:a6:49:23:e7:0b:cc:
                    b3:a1:0f:8d:d3:8d:5f:0a:ca:95:d9:ed:1c:32:c4:
                    1f:5a:bd:49:34:16:4d:d3:ef:5c:cf:77:e1:e7:f1:
                    10:23:bc:45:0e:13:18:de:95:1f:a9:aa:29:0b:f5:
                    e4:da:10:95:0d:35:13:d6:7e:fb:4f:48:78:9a:01:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:5A:B5:46:87:89:BA:01:5E:CF:3A:00:F0:AD:EE:89:54:51:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97e05550-8496-3245-829c-dcb446bcf8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:32:8f:73:fa:44:98:7b:7b:66:70:d2:54:c2:7c:8a:1d:03:
         d1:07:a6:cc:25:c6:bc:23:5e:72:18:d8:96:5e:46:75:28:dd:
         85:65:a5:50:1c:85:2d:1e:38:25:1c:1d:82:b4:e1:11:f6:4c:
         6f:c8:3f:ee:e9:f4:23:9c:d2:fa:a2:e8:68:0f:25:a0:27:d6:
         3d:4d:7e:42:c8:bc:1b:13:66:6d:04:0f:2d:37:62:6b:05:8d:
         9a:0d:90:b1:92:0b:a0:a2:98:de:da:21:c2:de:31:76:e4:46:
         8c:1f:6f:7e:32:35:6e:1a:7c:46:7d:33:2f:a5:47:df:0e:64:
         13:c1:b8:a5:0a:80:c3:fa:8c:9f:30:dc:af:35:63:02:e5:5d:
         0c:0d:60:72:c3:66:09:a9:bd:63:b0:d2:97:3d:d4:1d:cb:e0:
         2c:20:cd:72:ed:42:99:80:f3:d2:56:6a:e1:6b:7c:00:0b:44:
         f7:d1:bb:c1:60:21:4e:98:0e:06:1b:a3:d2:74:2c:d6:bf:71:
         7f:3a:0f:17:db:7f:70:6b:55:e5:19:af:f8:08:ad:cb:c6:99:
         de:57:4b:61:7f:23:72:60:7c:61:25:41:0c:af:76:1d:87:49:
         be:6a:31:7e:fa:0d:af:35:c5:80:2e:e2:18:8d:65:e1:4a:94:
         1b:9e:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:45:57 2025 by rpki-client