Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c225d405-9e16-387f-9133-3886ec272728.roa
File:                     c225d405-9e16-387f-9133-3886ec272728.roa (raw, json)
Hash identifier:          UFFybTAzk8lb6xbL2BqwVpjJHVGRhQKZOBitXyHnoI0=
Subject key identifier:   07:B4:B6:58:1A:86:46:AF:86:1A:47:AA:96:80:FF:4C:AB:10:6B:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F632D13C2FF0AA8D20F700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c225d405-9e16-387f-9133-3886ec272728.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.232.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:32:d1:3c:2f:f0:aa:8d:20:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=9b2463a8-097b-4bd9-a994-5e7aaa986682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:e2:e5:e1:1b:3a:e8:d8:eb:2c:b4:c1:35:
                    8d:86:05:66:3b:d4:c8:c0:09:26:39:38:18:ad:98:
                    4b:49:ed:33:d3:ac:77:6a:5f:d2:ac:e8:21:bc:6a:
                    e7:43:e2:0b:33:53:7d:c8:70:2a:90:cc:37:7a:8d:
                    1a:4d:cd:9e:f5:2a:c0:f3:75:ea:ac:04:ad:71:eb:
                    34:c8:93:f5:49:5c:8b:43:f4:93:60:11:d9:5c:d2:
                    a6:25:a2:0e:8c:70:64:44:9b:93:81:42:ca:69:40:
                    11:f3:37:b8:ef:5e:64:2b:54:31:e7:a5:72:51:8e:
                    8a:a2:a8:03:35:df:0a:9e:42:60:ee:d9:14:4d:b9:
                    cb:f1:05:4a:cf:2c:53:ba:19:18:fc:59:73:e3:6f:
                    b1:68:cf:36:bb:28:2e:e5:1d:af:28:1a:42:0b:8a:
                    74:4b:16:38:2e:b9:98:0e:6f:27:33:c7:8c:23:f6:
                    3a:1c:ab:0d:02:8e:de:b8:9b:13:d9:ff:03:cb:63:
                    64:aa:8c:aa:12:d4:49:07:b1:a2:5a:fc:92:0e:d1:
                    50:48:2e:7a:d3:d5:85:b1:c2:3f:bd:f8:21:18:61:
                    d4:25:d4:6f:d6:0f:a9:ca:63:7e:be:fb:ef:47:b7:
                    76:23:05:69:1d:2e:73:c2:0b:1e:b3:62:26:6c:b9:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B4:B6:58:1A:86:46:AF:86:1A:47:AA:96:80:FF:4C:AB:10:6B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c225d405-9e16-387f-9133-3886ec272728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.232.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:d8:fa:42:3f:ab:8a:e7:57:d6:54:7a:fc:ad:22:76:82:
         37:25:c7:3e:ef:c9:ac:7c:5f:76:0d:ba:1d:df:d3:4f:cb:a5:
         6a:9f:9a:ac:a2:a8:9b:ce:b1:1c:08:e6:83:67:51:ee:73:5e:
         34:12:8c:fa:38:57:3b:5b:00:a4:b6:35:ca:e7:fb:80:49:6b:
         73:54:be:58:30:69:3d:01:73:b0:1c:e6:2c:56:1b:e1:e0:f6:
         f6:aa:4b:fb:b4:66:95:ca:c1:2f:42:50:11:93:c2:b2:2e:ff:
         c1:50:8d:e7:7d:7b:5f:7f:fa:1d:ec:24:0f:79:3f:38:ca:b2:
         f8:93:b9:6e:e4:69:8f:8c:d2:34:4e:bb:ed:62:5f:d9:e8:16:
         bf:71:55:6c:05:6d:25:34:5e:fb:9a:65:3f:4c:da:86:4a:f2:
         ba:ca:2a:ae:83:0d:38:bc:ec:57:09:82:be:99:ac:f5:2c:d0:
         62:ee:c1:2e:dc:f2:0f:b7:88:9a:a5:8e:79:5b:5d:d5:5a:43:
         ba:e7:49:45:9c:f8:58:5b:1b:39:73:ee:3b:88:b6:e5:d3:c8:
         08:71:c8:04:0b:cc:96:c6:81:e5:e8:d6:b3:43:29:8b:3e:b3:
         db:5c:d0:ec:14:54:12:d1:a1:86:6a:3a:16:5e:38:e1:80:7f:
         1c:79:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:00 2025 by rpki-client