Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa
File:                     b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa (raw, json)
Hash identifier:          wjYsUUmja02npS/xU05ghWXi/M3z2AGidX1zEaSkBys=
Subject key identifier:   DE:2B:F9:DA:1C:B7:9B:0E:29:16:34:1A:9F:89:3D:EC:3B:28:B9:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80DD87CBA4F15D5546400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        173.62.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:0d:d8:7c:ba:4f:15:d5:54:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=8c527755-d73b-44ba-8627-295eddcbe9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:37:a2:9a:a9:db:06:47:76:89:31:b9:28:
                    1e:30:73:68:ee:04:3c:38:fc:74:e8:6d:52:a7:c2:
                    8a:78:ba:9c:28:85:a9:6e:33:a4:ab:57:99:3c:42:
                    63:4f:a2:c7:27:59:8c:74:51:4e:d5:3d:d6:a0:7a:
                    41:ec:4f:95:50:3a:1e:1c:6e:76:2a:0c:9b:44:ca:
                    89:4d:50:e8:47:28:68:46:3d:78:53:4a:4d:8d:42:
                    f6:f3:ac:c1:e2:99:fc:82:a2:c0:ce:b1:44:db:28:
                    ad:7e:96:66:c4:07:7f:5d:8a:7b:30:af:38:f6:2d:
                    e5:31:92:bd:25:22:91:43:80:44:80:22:19:01:94:
                    f7:b6:ee:68:fa:42:b7:7e:67:e9:cb:87:e3:f8:f1:
                    64:e4:dc:31:b5:59:64:6e:5b:b0:18:de:19:ae:49:
                    03:18:c6:bc:b0:a3:47:6c:7e:4e:ba:68:73:ff:ac:
                    ce:08:73:19:ae:e7:0f:21:03:85:64:af:7d:d2:0c:
                    7f:89:ae:16:b1:13:30:6a:ea:15:2c:56:c9:c2:c2:
                    cb:11:09:f2:66:9c:39:ad:93:ed:10:fd:3e:06:2c:
                    f4:cb:be:91:b4:89:e4:bf:1b:a4:6b:b5:82:1d:19:
                    6e:ce:ad:cc:c3:0d:60:60:54:b0:c2:2d:9c:cd:c4:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:F9:DA:1C:B7:9B:0E:29:16:34:1A:9F:89:3D:EC:3B:28:B9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0e478cd-ce62-34f8-80a4-cfa0575e8023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.62.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:a4:71:c9:b5:3c:a2:5e:ef:d3:97:0a:c7:ae:25:c9:a1:
         e8:dc:79:03:70:f4:f3:f9:e0:75:ea:03:1f:1d:02:96:59:71:
         0f:16:41:d2:82:78:be:77:f6:71:a8:01:54:7a:bd:9e:86:e7:
         a3:f6:25:09:33:b7:06:e8:09:c2:af:eb:8b:e6:c0:00:e1:9d:
         a9:36:af:e6:9d:db:bd:e2:d7:f8:18:e1:14:f3:22:fa:9e:f2:
         f9:05:28:16:c1:c0:7f:83:11:14:4c:35:b5:d1:4c:df:15:4b:
         ec:b6:3b:60:b9:82:dc:11:47:c9:c9:d0:82:33:30:80:17:86:
         c4:ab:6c:71:ba:f9:40:a7:44:5d:bd:62:de:28:25:55:6a:46:
         75:50:6c:de:77:8d:40:f4:be:02:f7:bd:f1:7f:ef:66:ba:1a:
         2e:40:8d:85:1f:71:14:d2:e5:6c:c5:81:2a:2e:b0:2c:e1:18:
         79:27:a1:f9:11:0b:36:cf:3a:c9:5a:ba:a3:81:e6:63:68:50:
         a6:a3:20:70:d8:94:77:bb:1e:f8:76:f4:4c:8b:f8:d0:59:b0:
         0f:35:a5:15:91:bd:b5:cf:bd:3e:ed:b0:74:07:d4:8a:44:b6:
         f1:ec:97:0c:a7:92:af:0c:4a:16:94:02:cc:bd:7e:59:b9:b0:
         af:4c:b8:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+A3YfLpPFdVUZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
OGM1Mjc3NTUtZDczYi00NGJhLTg2MjctMjk1ZWRkY2JlOWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqks3opqp2wZHdokxuSgeMHNo7gQ8OPx06G1S
p8KKeLqcKIWpbjOkq1eZPEJjT6LHJ1mMdFFO1T3WoHpB7E+VUDoeHG52KgybRMqJ
TVDoRyhoRj14U0pNjUL286zB4pn8gqLAzrFE2yitfpZmxAd/XYp7MK849i3lMZK9
JSKRQ4BEgCIZAZT3tu5o+kK3fmfpy4fj+PFk5NwxtVlkbluwGN4ZrkkDGMa8sKNH
bH5Oumhz/6zOCHMZrucPIQOFZK990gx/ia4WsRMwauoVLFbJwsLLEQnyZpw5rZPt
EP0+Biz0y76RtInkvxuka7WCHRluzq3Mww1gYFSwwi2czcS9iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4r+doct5sOKRY0Gp+JPew7KLmBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjBlNDc4Y2QtY2U2Mi0z
NGY4LTgwYTQtY2ZhMDU3NWU4MDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrT6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxxpHHJtTyiXu/TlwrHriXJoejceQNw9PP54HXqAx8dApZZcQ8WQdKC
eL539nGoAVR6vZ6G56P2JQkztwboCcKv64vmwADhnak2r+ad273i1/gY4RTzIvqe
8vkFKBbBwH+DERRMNbXRTN8VS+y2O2C5gtwRR8nJ0IIzMIAXhsSrbHG6+UCnRF29
Yt4oJVVqRnVQbN53jUD0vgL3vfF/72a6Gi5AjYUfcRTS5WzFgSousCzhGHknofkR
CzbPOslauqOB5mNoUKajIHDYlHe7Hvh29EyL+NBZsA81pRWRvbXPvT7tsHQH1IpE
tvHslwynkq8MShaUAsy9flm5sK9MuLY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:47:05 2025 by rpki-client