Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43d0cc5-9f55-3404-b115-01dc7fc218aa.roa
File:                     d43d0cc5-9f55-3404-b115-01dc7fc218aa.roa (raw, json)
Hash identifier:          ZXa6yCciGyfTQx8NcYrTW614taF0Ed7YqJDrX+ETyD8=
Subject key identifier:   F8:97:7A:26:F1:AB:48:C0:34:AF:72:3E:FC:37:A4:EC:14:B8:7B:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F643C3160643A362C137C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43d0cc5-9f55-3404-b115-01dc7fc218aa.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.247.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:43:c3:16:06:43:a3:62:c1:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=2a35a874-8b61-46b3-baf6-c817b95cc250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:24:85:f4:6c:05:92:a9:e4:0c:da:08:b5:
                    1e:0c:44:58:3f:17:48:98:20:75:b1:9e:ff:b0:6d:
                    8d:cd:0e:e5:3d:3a:54:55:77:31:ea:dc:7f:b2:da:
                    02:e3:9f:a1:cf:70:b3:b1:3d:6c:ad:84:63:d8:d3:
                    d6:fc:b2:a7:fa:b5:ae:a1:12:6c:7c:cb:94:94:b8:
                    25:3d:dc:4d:bc:d2:9e:7f:0b:8e:2a:75:07:41:f1:
                    94:8c:a1:fb:60:cd:a7:44:11:5b:3c:63:ad:00:53:
                    80:c3:b7:a3:e1:6d:ea:23:89:41:b7:0d:62:4e:6c:
                    f0:11:9e:d2:ad:2e:3e:27:fe:e5:05:6a:d2:65:4e:
                    74:df:6e:45:a4:2d:c9:04:68:a1:f3:13:89:79:aa:
                    31:54:6a:8f:6c:f3:36:e1:7a:6e:71:be:42:f5:c5:
                    17:8a:be:f6:24:97:09:6a:60:55:01:3d:54:7e:1c:
                    86:aa:b2:ca:da:2e:62:20:64:c4:f6:e1:91:c7:bc:
                    46:07:9c:19:02:4c:22:57:84:c2:e1:7d:8c:38:67:
                    9f:2d:7c:a9:c8:53:6b:b9:f7:78:f3:ee:86:e8:30:
                    84:fd:76:ba:ce:9c:23:ba:02:96:ce:8e:74:75:94:
                    d2:3f:d1:b2:b6:0c:04:cf:d7:82:a2:47:36:4c:b6:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:7A:26:F1:AB:48:C0:34:AF:72:3E:FC:37:A4:EC:14:B8:7B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43d0cc5-9f55-3404-b115-01dc7fc218aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:cd:c5:bc:b4:ed:1a:6e:89:97:81:b4:2b:c7:ea:f4:52:
         5d:6f:d3:7a:8f:71:84:f4:4e:bd:a0:9a:20:d6:58:29:e8:bc:
         9f:62:a6:ae:1b:34:d9:c5:09:eb:b0:d4:45:f1:62:9b:c8:43:
         e2:aa:f5:e6:6d:b0:2e:04:8b:21:e4:67:c6:a1:27:16:30:ed:
         43:46:4e:dc:4e:b8:be:7e:ba:fd:28:0a:7e:ba:64:60:e0:09:
         20:0e:d0:d1:cd:de:49:ef:d0:00:60:96:e6:95:bc:05:57:2f:
         07:b1:75:2b:22:94:99:f8:c7:42:16:71:84:de:d2:02:8e:77:
         0b:de:f3:3f:5e:5b:d6:72:09:f2:18:43:cc:76:25:92:79:a1:
         3c:00:0d:af:ef:88:30:f0:2e:cd:09:e8:91:e0:cd:45:33:87:
         53:96:40:15:8a:1a:fe:1e:84:5f:d8:04:b0:3c:d1:a2:bb:01:
         fd:16:43:e9:ef:e7:1b:3e:03:71:75:b7:c4:90:91:08:f5:ac:
         bf:79:56:bd:ea:c0:95:a6:40:7d:7a:ed:14:14:c4:a5:8f:66:
         f0:9a:35:9e:ee:dc:e8:c7:c8:b6:9a:a7:a5:7f:65:c6:04:1b:
         e6:eb:68:40:f9:9a:23:d9:bb:62:8d:15:05:55:85:ba:c9:7e:
         38:a3:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:18 2025 by rpki-client