Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2a5c96f-b27d-333a-a7b8-fb93e5116d62.roa
File:                     d2a5c96f-b27d-333a-a7b8-fb93e5116d62.roa (raw, json)
Hash identifier:          YPIxRJw12Z78LUNlNduK2nqSycko2ZvnoQIulhGcpwo=
Subject key identifier:   01:5D:3A:3C:43:AA:34:DE:25:65:B8:EF:81:6C:AD:14:66:1C:E5:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB41095E1F22160328D86DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2a5c96f-b27d-333a-a7b8-fb93e5116d62.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        74.106.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:09:5e:1f:22:16:03:28:d8:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=4fa8589d-8d2c-4954-88ab-81543ac521c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:c5:c5:30:70:80:c6:4c:b8:c2:07:b3:0d:
                    21:3c:5d:2e:17:98:12:0c:7c:c4:4d:7a:92:fa:f0:
                    d4:1b:2d:19:06:35:00:65:fd:65:f7:49:e8:81:9a:
                    b1:56:92:73:5d:dc:1f:08:01:ae:59:48:45:98:f0:
                    dc:71:3a:d1:0d:da:6f:8e:c7:72:03:ce:c0:c9:28:
                    0f:0e:66:77:33:5d:17:6d:69:fd:a1:dd:b2:df:45:
                    7d:2b:51:7d:dc:53:7d:e0:bf:36:4c:e7:73:e2:f8:
                    fe:62:b7:ea:a8:6a:73:0a:1f:e4:f2:08:b6:fd:8f:
                    cc:08:33:fe:27:0b:ff:bb:9f:4f:a0:a3:c2:68:da:
                    16:14:15:1c:a1:79:27:cb:9d:9c:24:2a:de:08:30:
                    ab:b4:30:92:0b:20:ea:d2:da:be:5a:28:7a:c3:bd:
                    1e:74:7b:9f:27:f7:13:42:50:48:51:25:32:11:da:
                    e3:d9:0d:2a:88:cc:b0:28:3e:6e:09:3b:e3:df:dd:
                    04:ef:81:52:cd:26:ca:14:21:91:8c:4f:b7:a7:a0:
                    22:1d:ea:96:59:63:76:24:e5:9e:6c:25:a6:20:b0:
                    3b:71:ae:85:55:c8:d8:45:68:84:4e:d2:75:2f:f0:
                    8b:48:b5:83:ea:7f:b0:42:b4:f7:ea:7a:57:f7:d3:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5D:3A:3C:43:AA:34:DE:25:65:B8:EF:81:6C:AD:14:66:1C:E5:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2a5c96f-b27d-333a-a7b8-fb93e5116d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.106.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2a:86:74:52:10:5a:69:1a:f4:b7:19:bd:29:db:1c:39:73:
         ee:62:9d:0a:4a:9b:02:01:b4:14:c8:d1:2e:bf:48:25:2a:b7:
         c2:f8:b2:33:23:0a:1b:6e:c2:d8:49:a7:0c:55:d6:f9:9b:ae:
         38:fc:23:b8:98:90:91:38:a2:7a:51:36:1d:59:0f:bf:35:32:
         70:f7:05:92:93:69:0d:f0:a2:f3:92:6f:0c:97:38:bc:6a:69:
         01:a2:e5:7a:c8:f1:75:b5:df:c5:27:5d:99:52:ce:41:47:cc:
         2f:f8:ac:87:3a:75:f4:9a:7e:8a:b6:66:8e:1d:0e:7b:d5:e8:
         15:9a:94:07:92:c2:1a:3a:e6:91:ef:6d:78:be:98:55:ac:9b:
         31:8e:77:36:f8:92:84:b4:5c:c3:7a:db:5f:73:e2:d7:11:e3:
         8b:88:ef:b2:11:fc:26:91:10:bc:33:82:93:b0:83:ff:d0:58:
         87:5f:b1:56:28:a2:53:fe:1d:a4:c6:7f:9b:20:85:2f:58:21:
         7e:aa:59:26:94:63:8d:d0:cf:e6:a2:15:01:1b:ff:84:ad:06:
         28:08:d1:a0:98:7b:2a:9f:67:fd:db:a8:8e:12:d1:29:de:c1:
         8c:e9:4e:55:d1:0b:78:94:6f:df:3c:1a:5b:ff:b5:7b:bd:22:
         55:9f:67:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQleHyIWAyjYbcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NGZhODU4OWQtOGQyYy00OTU0LTg4YWItODE1NDNhYzUyMWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAPFxTBwgMZMuMIHsw0hPF0uF5gSDHzETXqS
+vDUGy0ZBjUAZf1l90nogZqxVpJzXdwfCAGuWUhFmPDccTrRDdpvjsdyA87AySgP
DmZ3M10XbWn9od2y30V9K1F93FN94L82TOdz4vj+YrfqqGpzCh/k8gi2/Y/MCDP+
Jwv/u59PoKPCaNoWFBUcoXkny52cJCreCDCrtDCSCyDq0tq+Wih6w70edHufJ/cT
QlBIUSUyEdrj2Q0qiMywKD5uCTvj390E74FSzSbKFCGRjE+3p6AiHeqWWWN2JOWe
bCWmILA7ca6FVcjYRWiETtJ1L/CLSLWD6n+wQrT36npX99OGkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFdOjxDqjTeJWW474FsrRRmHOUYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJhNWM5NmYtYjI3ZC0z
MzNhLWE3YjgtZmI5M2U1MTE2ZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSmoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgqhnRSEFppGvS3Gb0p2xw5c+5inQpKmwIBtBTI0S6/SCUqt8L4sjMj
ChtuwthJpwxV1vmbrjj8I7iYkJE4onpRNh1ZD781MnD3BZKTaQ3wovOSbwyXOLxq
aQGi5XrI8XW138UnXZlSzkFHzC/4rIc6dfSafoq2Zo4dDnvV6BWalAeSwho65pHv
bXi+mFWsmzGOdzb4koS0XMN6219z4tcR44uI77IR/CaRELwzgpOwg//QWIdfsVYo
olP+HaTGf5sghS9YIX6qWSaUY43Qz+aiFQEb/4StBigI0aCYeyqfZ/3bqI4S0Sne
wYzpTlXRC3iUb988Glv/tXu9IlWfZ0A=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:09 2025 by rpki-client