Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa
File:                     ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa (raw, json)
Hash identifier:          uegNp2vjf5qm/bLKosRDiAbX5HMn1aY65O8Agzh8WHo=
Subject key identifier:   70:58:66:96:A5:CF:84:E8:D5:75:E6:F3:53:BD:6D:53:9C:09:12:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80FE166DC54DEE6A831C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        173.63.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:0f:e1:66:dc:54:de:e6:a8:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=4d8fc90f-c1c0-4e1c-bdb6-f5723295c605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:1e:b8:98:a2:47:75:45:4a:2b:ab:72:96:
                    ad:46:45:3b:9d:cc:07:48:a8:07:36:15:00:f3:9b:
                    4e:de:5d:75:94:e6:70:4c:36:bb:6e:37:2f:17:4b:
                    b2:33:ff:6b:ef:78:ef:28:c4:8c:37:37:5c:5d:d4:
                    62:1a:c6:de:0c:34:a5:ac:45:b4:cb:d8:82:7d:74:
                    78:e6:52:4a:71:78:03:fc:e1:4e:a2:59:84:8c:14:
                    b9:a2:dc:c9:eb:74:b6:99:30:5a:68:26:0a:7c:f4:
                    a7:78:43:58:40:73:66:75:f5:e4:40:10:58:69:58:
                    d5:e9:cb:a0:51:33:db:e9:df:6c:78:31:0c:d1:f5:
                    7f:13:d1:cf:be:89:90:d0:84:9a:6b:2e:af:d5:8a:
                    08:de:0b:a3:2b:43:d3:13:0d:66:bc:1f:2d:ea:68:
                    cc:d5:13:70:10:f3:06:41:46:ec:cc:18:e2:32:9b:
                    28:b1:12:b4:9b:37:33:5c:d3:bf:27:77:cd:42:f9:
                    f0:ec:b9:8c:42:6a:d2:6f:9a:5e:95:10:0b:19:15:
                    58:91:6a:84:93:45:2b:11:5b:21:02:91:b8:13:67:
                    f9:9e:f5:0c:e9:9f:5e:14:41:a0:bc:06:cc:c9:4e:
                    6f:e0:db:11:be:b4:62:27:83:77:6d:5b:64:19:e5:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:66:96:A5:CF:84:E8:D5:75:E6:F3:53:BD:6D:53:9C:09:12:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:45:23:f9:47:9e:d9:b6:e8:e0:64:51:3b:9a:e7:8b:42:
         30:db:44:90:ac:e7:e9:a4:e7:f9:9e:66:5f:df:06:0f:86:19:
         aa:6a:bb:9f:8d:b8:f8:46:70:e0:9c:a7:de:ad:e7:64:42:83:
         79:04:76:7e:9a:20:8d:8a:55:a8:0d:23:04:83:ab:68:67:40:
         7e:52:4e:db:20:a3:62:7d:87:c5:12:25:ef:7e:5c:8e:35:16:
         2f:da:b6:27:9c:85:1f:c7:91:31:13:48:b2:59:ef:76:94:15:
         a1:b3:07:3f:34:70:8b:ae:f0:08:b4:b8:04:f8:e5:78:6a:9d:
         6b:4c:38:fe:c6:7e:98:01:57:f9:16:ca:49:01:f4:7f:4c:89:
         83:12:2d:0a:27:94:f8:af:12:ac:5f:db:4c:2c:a0:41:7f:94:
         ec:03:5f:e8:62:d0:3c:7b:d5:14:18:c8:7a:71:67:a0:18:fa:
         84:53:08:4c:7a:64:76:86:23:8b:b8:b8:ed:33:15:0e:51:85:
         ec:a8:e5:b8:df:45:9e:b6:e3:3a:08:7d:00:df:8d:41:41:55:
         7c:4a:72:76:10:88:e7:ba:94:1a:f4:97:1c:a3:a4:96:b7:00:
         1f:a4:e9:23:15:f7:c3:a5:21:58:13:ca:fa:91:fe:7c:7d:09:
         bc:bf:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:48 2025 by rpki-client