Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c259be82-be76-31ea-98ab-6cd59b9a37f9.roa
File:                     c259be82-be76-31ea-98ab-6cd59b9a37f9.roa (raw, json)
Hash identifier:          P0jHKfIHoigRk5Lkvh5dzie/an62Gw7fuuzy9LEks8E=
Subject key identifier:   E7:BF:E8:14:19:C1:1F:80:88:91:BB:C7:AA:49:8C:C1:91:83:06:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7FE09C8918FCFF640D103254
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c259be82-be76-31ea-98ab-6cd59b9a37f9.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.205.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:9c:89:18:fc:ff:64:0d:10:32:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=b6bbcaf3-ec55-4066-8a24-cf6be7e6ccaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:ca:ba:fc:50:64:de:23:c8:38:2f:7b:38:
                    12:6c:00:33:be:50:df:c5:42:fc:aa:52:31:b5:15:
                    01:23:42:2b:36:c4:f9:96:17:d8:84:4a:d7:0c:b1:
                    26:e4:45:c8:9c:90:b4:b0:c4:51:1f:9f:08:d0:04:
                    ce:73:e4:a1:ed:02:a0:ba:c8:e4:56:f4:cc:0c:1c:
                    0e:bc:25:62:13:b7:65:2b:0c:87:2d:76:ad:1a:85:
                    3b:f0:b3:84:4a:8c:42:b4:63:67:b7:b2:e5:a1:7d:
                    40:fc:0c:5f:82:b7:f3:ed:df:39:70:f2:fb:89:24:
                    3a:46:9d:2e:73:1d:91:e8:8b:bf:5b:10:62:d5:85:
                    98:22:af:90:9e:cc:f9:95:7c:0a:75:84:12:25:6e:
                    8c:ec:9e:5e:e0:4a:2b:de:9d:e2:04:97:c5:c1:36:
                    18:11:f3:b3:36:bc:fc:d0:c0:b2:82:06:3c:93:45:
                    8e:66:09:f4:aa:1c:17:bb:57:6a:cc:71:91:fc:ef:
                    73:dc:4b:6f:b0:1c:e3:b2:a3:24:ba:16:88:64:14:
                    98:d8:7b:e5:a8:36:5d:6b:23:e2:b9:8e:5a:90:1c:
                    33:26:35:c4:e7:84:04:5c:bb:c3:71:49:97:68:0c:
                    83:25:cd:dd:2a:c5:bb:66:3a:43:8a:1c:15:7d:d2:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BF:E8:14:19:C1:1F:80:88:91:BB:C7:AA:49:8C:C1:91:83:06:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c259be82-be76-31ea-98ab-6cd59b9a37f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.205.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:db:49:0f:3d:54:29:2b:e0:7b:93:49:13:d8:e9:70:5a:
         76:08:a7:75:ed:49:c4:b0:82:04:68:83:ef:4d:db:f8:f4:64:
         20:39:47:a1:c8:62:f5:59:4d:8b:d2:1b:51:5d:c2:7d:fe:4c:
         da:16:10:99:16:fc:09:45:e9:10:d0:f9:d7:5e:e9:88:06:13:
         a1:e9:ce:86:44:91:e9:c4:0a:0c:ab:aa:bc:1c:0d:48:f0:6d:
         0d:a0:a1:23:78:f1:00:13:39:20:2f:12:b5:63:55:4a:d8:ba:
         ef:d3:a1:04:bf:a8:bb:cf:a3:73:01:c8:b8:be:22:c7:f0:7c:
         fe:69:82:bc:ff:39:70:fe:4c:0b:db:3b:0a:59:09:41:49:91:
         0c:d5:33:05:53:1a:b4:2a:b2:0a:24:5f:33:1a:96:f9:6f:32:
         45:f0:db:3f:53:05:b8:34:13:29:c3:f5:93:cd:5d:5a:55:6b:
         a8:92:14:65:bc:59:87:b2:04:20:aa:da:74:74:72:67:1b:43:
         32:7a:e4:34:be:f3:d3:20:f3:74:1f:89:59:f9:c7:3e:3e:f8:
         5d:de:19:93:25:c6:70:b2:30:fa:51:68:a3:87:f0:d1:9a:e7:
         2e:ac:a5:07:92:bf:41:30:61:c9:be:ff:b1:d7:38:25:77:0a:
         c5:80:bf:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JyJGPz/ZA0QMlQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
YjZiYmNhZjMtZWM1NS00MDY2LThhMjQtY2Y2YmU3ZTZjY2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTzKuvxQZN4jyDgvezgSbAAzvlDfxUL8qlIx
tRUBI0IrNsT5lhfYhErXDLEm5EXInJC0sMRRH58I0ATOc+Sh7QKgusjkVvTMDBwO
vCViE7dlKwyHLXatGoU78LOESoxCtGNnt7LloX1A/Axfgrfz7d85cPL7iSQ6Rp0u
cx2R6Iu/WxBi1YWYIq+Qnsz5lXwKdYQSJW6M7J5e4Eor3p3iBJfFwTYYEfOzNrz8
0MCyggY8k0WOZgn0qhwXu1dqzHGR/O9z3EtvsBzjsqMkuhaIZBSY2HvlqDZdayPi
uY5akBwzJjXE54QEXLvDcUmXaAyDJc3dKsW7ZjpDihwVfdLrewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOe/6BQZwR+AiJG7x6pJjMGRgwZPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzI1OWJlODItYmU3Ni0z
MWVhLTk4YWItNmNkNTliOWEzN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrs1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+x20kPPVQpK+B7k0kT2OlwWnYIp3XtScSwggRog+9N2/j0ZCA5R6HI
YvVZTYvSG1Fdwn3+TNoWEJkW/AlF6RDQ+dde6YgGE6HpzoZEkenECgyrqrwcDUjw
bQ2goSN48QATOSAvErVjVUrYuu/ToQS/qLvPo3MByLi+IsfwfP5pgrz/OXD+TAvb
OwpZCUFJkQzVMwVTGrQqsgokXzMalvlvMkXw2z9TBbg0EynD9ZPNXVpVa6iSFGW8
WYeyBCCq2nR0cmcbQzJ65DS+89Mg83QfiVn5xz4++F3eGZMlxnCyMPpRaKOH8NGa
5y6spQeSv0EwYcm+/7HXOCV3CsWAv6Q=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:14 2025 by rpki-client