Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa
File:                     ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa (raw, json)
Hash identifier:          nRFONmIXyA9eb6XIIcRHi5kiOj7wwEP5slxcupVgk6Y=
Subject key identifier:   60:1C:41:EA:27:71:C1:B7:3C:04:9C:16:43:EF:CA:F6:93:D8:D6:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD29298C3891D344C53380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     701
IP address blocks:        74.102.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:29:29:8c:38:91:d3:44:c5:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=0fcb85e5-337a-4a59-afe7-1b92cf311719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:ff:89:3f:70:cf:e1:10:80:35:93:8d:9b:
                    84:c1:22:db:4e:50:0e:03:32:73:38:22:86:3f:d4:
                    42:06:e6:3a:eb:72:fa:5d:4f:7e:e9:fb:1a:f1:75:
                    9c:53:3d:7e:74:10:43:e9:ba:d1:95:87:c2:ae:2a:
                    bb:6d:17:4d:53:53:81:5b:fe:31:5e:cf:65:fc:46:
                    3c:73:19:26:da:eb:1b:eb:dd:35:fb:8d:45:b9:fd:
                    01:7a:12:33:bd:b2:6d:76:7f:cc:18:17:db:49:61:
                    56:a3:5b:e1:4b:27:54:9a:4e:0e:0a:22:b3:90:4c:
                    22:66:44:6c:84:2b:e7:1e:a8:3f:7d:14:5d:5a:02:
                    26:97:c1:37:1a:f0:77:fc:8f:cc:ae:d7:43:58:b2:
                    37:dd:d0:40:9b:06:15:1a:47:d3:d7:21:c4:18:b1:
                    9a:f6:39:dd:64:8f:42:c1:ea:17:0f:50:c3:18:0a:
                    d4:71:d5:be:bd:36:0f:16:9d:53:80:cb:0c:a4:9e:
                    7a:cf:45:47:38:32:e2:cb:ea:74:16:95:b9:c7:26:
                    e0:ac:c4:44:d6:68:ba:d3:d4:4b:65:c1:78:fe:d3:
                    fd:f8:7f:39:89:a2:3a:d3:d7:e8:a2:96:72:a2:f7:
                    0e:2b:87:f3:44:15:d6:96:17:3d:c7:60:32:5c:ac:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1C:41:EA:27:71:C1:B7:3C:04:9C:16:43:EF:CA:F6:93:D8:D6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba192e79-4a0a-3c12-bcb0-34ba1f03bfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:66:90:18:97:28:1f:41:95:71:32:83:5a:e9:72:e0:04:
         d9:07:3c:b4:73:8a:97:58:50:33:3e:31:83:af:90:94:0e:b8:
         ad:91:b8:68:0e:46:0f:40:e6:b7:47:6d:77:44:68:84:e7:bd:
         fc:32:8d:83:87:01:5b:8f:11:a6:db:dd:95:a1:ee:ac:51:5b:
         35:24:00:1c:e7:51:27:ad:bd:0e:43:77:64:aa:cf:3a:d6:67:
         8f:b2:cc:9d:01:f9:3b:bf:b5:ae:93:00:49:52:0e:11:e8:39:
         6a:4f:a8:ce:57:33:d4:08:ba:0f:54:a7:ab:91:c7:3d:1f:a9:
         64:19:19:01:48:88:99:3b:37:17:f0:ca:12:3a:78:cc:90:a5:
         cf:d3:dd:93:25:34:cf:f9:ce:52:28:1c:78:4c:d0:5c:a2:df:
         42:51:93:8b:c4:61:21:c5:1b:1f:f2:31:8d:59:87:07:80:8f:
         b7:f1:04:64:af:0d:e5:32:e4:f0:7a:07:de:15:95:c4:79:6f:
         e6:09:61:03:b2:d0:b0:9a:31:04:41:70:70:63:9f:de:6a:b7:
         da:1e:10:c6:6f:5b:a0:8f:a4:fb:ad:69:f5:de:8f:8f:9d:2c:
         2e:14:28:c5:ae:f8:d4:0b:86:56:3d:85:8e:78:37:95:e8:b1:
         53:ee:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:37 2025 by rpki-client