Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa
File:                     ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa (raw, json)
Hash identifier:          77CzdeVPt4EkDhRVdARZh/UAaOCQuWp9/SNxYwMtH34=
Subject key identifier:   CF:D5:36:28:D3:B3:6D:9B:FA:90:E6:AC:B6:71:41:4A:DB:E6:08:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63C46C55C8C9F8B39E0C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.236.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:3c:46:c5:5c:8c:9f:8b:39:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=bc241f4c-bacc-4559-89fb-3432d747335b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ed:f2:af:52:18:a7:bc:78:c2:e4:67:8d:f1:
                    79:0d:57:11:17:74:e3:e8:15:0b:c2:14:13:48:f9:
                    81:7d:1f:f5:35:8b:ab:87:da:a0:51:b8:30:33:81:
                    2e:ac:64:da:f3:3c:18:0b:b2:51:73:bc:11:de:e2:
                    be:18:ce:65:28:75:5d:94:6d:7f:c4:4c:a8:64:ae:
                    f7:ca:11:92:84:6b:9f:76:66:37:19:d4:0b:c7:4a:
                    bc:ef:d9:27:83:c8:35:9e:ba:70:ab:89:47:d6:1a:
                    e3:c5:f2:29:90:ee:fd:41:f2:f5:54:00:7b:9f:e9:
                    4a:0a:76:e5:da:b4:4a:95:08:42:b5:8b:c6:c2:36:
                    9f:81:c3:d2:7f:ed:fa:bc:39:c0:7b:87:fb:ac:b0:
                    ab:a8:e8:60:40:c8:c9:07:16:7c:8d:33:6d:56:e0:
                    ed:ff:6d:b2:f7:69:f1:4e:e0:5b:8b:3c:6b:41:d4:
                    17:1e:79:97:42:9d:1e:e5:97:ad:d9:e7:0a:e7:c3:
                    19:27:18:39:97:7f:7b:c4:ab:98:ed:fa:35:37:9a:
                    b4:ff:5c:2e:6f:7d:e4:1e:aa:ee:ba:c2:f5:89:8e:
                    ab:81:95:13:be:ea:c4:f5:12:37:0b:28:88:90:3b:
                    48:5a:8c:57:4f:24:bf:2c:d2:51:3f:f9:13:9b:29:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D5:36:28:D3:B3:6D:9B:FA:90:E6:AC:B6:71:41:4A:DB:E6:08:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddb5a3af-0a6c-34f2-bd28-9dac8a542d0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:46:97:d7:94:36:58:62:3d:9c:ec:81:7e:ed:7f:60:3a:88:
         6c:78:e1:6f:58:b3:28:fc:d8:53:43:aa:66:96:92:6f:fb:b3:
         68:84:d7:79:db:24:20:c0:5e:64:ef:72:19:ca:23:a2:42:f9:
         89:2a:26:81:3e:d8:33:55:b0:41:9e:fe:dc:54:c5:b9:b9:fe:
         9d:28:03:0d:76:ee:19:01:c9:60:3c:23:90:8f:96:c1:92:84:
         d1:1e:1a:de:9d:0a:bd:af:42:92:ad:19:f3:30:79:4f:27:8b:
         d6:c2:2c:17:23:08:f5:ee:eb:8d:44:06:23:e5:4d:7e:a8:f1:
         fe:18:01:18:db:7e:93:53:3b:28:ec:69:9b:ec:2a:91:b9:94:
         db:d1:ef:18:b8:93:21:55:5e:45:20:20:9f:3e:30:15:a6:c1:
         fa:a2:33:93:f5:83:8d:1b:e2:d3:4d:97:61:66:a3:12:32:5c:
         e2:0b:1f:26:47:33:d3:83:e3:24:ee:0e:7f:b0:d2:50:a2:43:
         95:6d:9a:9c:53:d0:1a:bf:d9:d0:d2:a0:f1:50:d3:70:13:f8:
         1c:b9:8d:32:ae:75:38:2d:78:11:57:11:df:60:b1:13:75:4a:
         f9:98:29:86:31:ff:91:18:9a:74:9b:84:1f:34:06:b0:d2:c5:
         80:77:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:34 2025 by rpki-client