Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d57f5060-963b-3e7c-9875-17e383b479f2.roa
File:                     d57f5060-963b-3e7c-9875-17e383b479f2.roa (raw, json)
Hash identifier:          94xJiyvNxoylmp7GSJEbBsOnBVb8N262AstlunPQnkM=
Subject key identifier:   07:24:12:11:C7:41:97:49:EC:3F:1C:16:BC:BB:A2:01:31:1F:40:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15E8D7CF89FB2CADDEF800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d57f5060-963b-3e7c-9875-17e383b479f2.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        174.254.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:e8:d7:cf:89:fb:2c:ad:de:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=3b11e528-bc43-48a9-87b2-4eb50b54ca94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:ef:24:15:68:18:c0:8c:56:3c:91:c4:f0:
                    09:e6:c0:7d:79:22:38:0a:3a:78:c0:00:24:10:ea:
                    34:9d:2b:9c:6d:24:ff:27:91:eb:4c:99:54:1a:15:
                    71:a0:10:9e:dd:61:7e:bc:21:96:52:8c:86:36:1d:
                    5b:b9:f3:48:19:2e:1d:d2:df:c3:db:0a:0e:31:a1:
                    6f:80:e9:68:cc:39:ac:be:d6:e6:25:e8:3d:1c:08:
                    90:06:fc:dc:46:08:fb:c2:0c:f5:0c:ff:b6:48:1e:
                    45:e0:d2:ad:a0:6b:2f:11:3f:2b:4d:f7:5b:91:39:
                    67:4f:b9:55:ed:dd:c8:55:7f:95:b0:22:8e:6e:70:
                    f1:43:28:d2:41:0a:80:62:0e:ba:75:3d:ac:7b:90:
                    b8:b5:3d:47:e8:e7:59:cd:87:5b:a1:96:9a:a5:aa:
                    a0:ef:28:f7:01:3e:0c:44:19:4c:31:93:6a:4e:bb:
                    37:f1:91:ea:4e:d6:e8:19:25:48:c2:d6:ea:14:6e:
                    58:e7:be:db:66:45:4c:ac:71:95:24:34:2a:7c:52:
                    7d:3d:a2:c3:b8:68:07:13:bd:08:3a:a0:46:28:2f:
                    ac:55:d3:b4:b7:33:bd:09:b3:6e:75:34:bb:70:e1:
                    b2:18:60:65:88:80:61:c4:01:fe:1e:8c:71:52:34:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:12:11:C7:41:97:49:EC:3F:1C:16:BC:BB:A2:01:31:1F:40:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d57f5060-963b-3e7c-9875-17e383b479f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:c9:51:d9:d4:42:9e:bf:8a:05:96:d7:20:2b:49:84:da:
         f9:13:7a:2c:88:a8:79:c8:52:02:2b:5b:75:ca:f7:ca:74:fa:
         43:a0:ab:64:bf:8f:d0:61:94:60:ed:df:52:c6:5f:e0:31:a1:
         95:c8:10:53:5b:f3:a8:19:51:b2:d4:b0:48:fe:60:1d:df:24:
         11:6a:e5:03:c0:c6:c1:18:5d:23:b5:45:62:9a:bd:04:49:3a:
         82:a2:4d:04:17:cf:12:fb:e5:68:a0:da:e6:8c:39:6a:ba:fc:
         ca:7f:7b:ba:95:67:8d:87:d2:d1:69:4a:bb:5f:3a:1c:a0:af:
         a4:d0:84:52:f1:32:5d:81:26:26:29:75:36:66:34:10:5f:46:
         a1:fb:d8:4a:2e:94:37:81:bd:cf:89:f9:ea:6d:0e:17:b2:e3:
         d4:b7:7d:e0:1c:fe:d4:30:04:91:f7:d5:32:ff:e2:f4:b8:86:
         c1:e5:5e:3c:b8:b8:41:72:a5:e3:8c:d1:5c:b8:b4:43:4b:d7:
         be:e4:9c:dd:8d:f0:b0:a6:fc:2f:6e:c5:27:cd:16:88:ed:b6:
         e5:3c:cc:69:d3:49:e4:58:f4:f3:17:d4:d6:4b:31:74:7b:6f:
         9a:ac:0f:2d:b4:e1:56:0a:3d:3d:24:87:34:f2:8b:bd:4b:a2:
         d6:21:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:58 2025 by rpki-client