Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb87fead-7182-359a-ad69-56473192e5aa.roa
File:                     fb87fead-7182-359a-ad69-56473192e5aa.roa (raw, json)
Hash identifier:          zbAbR/+C1zJ5Iz07uhHs60QSXDRzsWkEkuWrp6eE3NU=
Subject key identifier:   4E:A0:F3:F3:C8:D9:55:58:EE:CF:DF:F0:24:B0:8B:0C:56:01:AD:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D107F865124887F5C312A2E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb87fead-7182-359a-ad69-56473192e5aa.roa
Signing time:             Tue 22 Apr 2025 19:08:59 +0000
ROA not before:           Tue 22 Apr 2025 19:08:59 +0000
ROA not after:            Mon 21 Jul 2025 19:08:59 +0000
asID:                     6167
IP address blocks:        75.203.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:7f:86:51:24:88:7f:5c:31:2a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:08:59 2025 GMT
            Not After : Jul 21 19:08:59 2025 GMT
        Subject: CN=570594c7-235a-4a30-8f59-194e1834bb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:fc:01:41:56:83:3f:49:d7:f6:5b:6d:77:
                    06:94:27:4e:73:37:55:00:64:80:45:55:84:0d:68:
                    c8:7a:b0:9f:62:80:62:bc:59:eb:35:a0:ff:da:90:
                    63:44:8f:5f:36:6e:a6:19:03:00:f5:7e:7a:27:6b:
                    ed:1e:45:81:be:a5:3f:27:35:c8:57:ac:cf:2a:2f:
                    41:d1:5f:ad:27:06:71:f2:61:f4:60:35:ce:49:d0:
                    25:ee:26:e4:91:ef:ce:f8:b5:bf:14:c0:fc:ff:0d:
                    a4:4d:05:f8:5e:3f:38:05:93:a5:03:74:f1:10:51:
                    49:c1:74:64:16:d1:46:92:c5:96:b2:32:20:de:1e:
                    45:1b:82:59:fe:ad:fd:f7:a2:ab:bc:eb:99:2a:6a:
                    30:fe:70:4b:e1:c9:7b:0e:44:b5:d8:34:88:fb:5c:
                    64:97:c7:e5:fb:c5:9d:46:45:cd:5a:f8:fe:2d:f3:
                    6b:58:60:e3:bb:d9:9e:f1:f6:42:3b:1c:20:3d:c9:
                    97:03:a2:b9:ed:23:76:91:62:9a:3f:8c:a2:d5:5c:
                    fa:a3:3b:23:37:52:78:92:ff:23:89:30:23:69:14:
                    1e:45:c8:38:e1:fb:fb:ac:6d:b1:d5:92:c9:76:24:
                    f4:fb:5d:78:06:85:a3:04:e6:28:93:c9:3b:8a:10:
                    79:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A0:F3:F3:C8:D9:55:58:EE:CF:DF:F0:24:B0:8B:0C:56:01:AD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb87fead-7182-359a-ad69-56473192e5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.203.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:de:d4:9c:df:c3:a4:b8:fd:04:2f:b1:0e:49:85:93:9e:29:
         3e:1d:3c:7b:37:ea:6b:63:76:f0:46:7e:41:af:4c:01:4f:26:
         14:17:3b:ef:1b:98:6a:2c:ac:c7:fb:db:49:62:ef:e0:32:e3:
         79:55:00:55:b8:14:a9:16:6d:5b:4a:1a:3c:d6:23:97:a6:b0:
         41:e2:69:dc:d2:4b:8f:93:dc:4d:f5:a6:88:41:10:d0:85:ea:
         0c:e7:97:e4:80:a3:5e:19:74:1f:a9:77:64:cd:51:f2:12:2e:
         eb:29:74:43:59:16:67:b6:93:ed:a2:3c:2e:16:ae:09:d5:69:
         0d:bc:c6:e4:85:66:56:c0:0d:ec:de:ef:17:f5:d9:dd:9b:fe:
         68:b4:8f:22:79:d8:7a:57:3c:f4:4c:30:a7:c9:13:b8:8c:41:
         29:a3:ee:e1:b8:5e:3a:57:16:8a:d3:44:2e:d1:3b:5d:a4:5e:
         22:dd:66:b3:07:a1:70:34:01:b6:0f:a1:27:0c:db:72:ef:47:
         27:08:d5:a1:c2:7e:4e:a7:65:90:06:cb:6b:e9:43:d0:de:6b:
         70:c9:96:90:6d:af:cd:5c:6a:bc:7d:95:17:8a:14:7c:fb:a9:
         65:81:45:16:39:c3:d0:59:ce:e4:74:1a:90:26:3b:c5:7d:e9:
         cc:b2:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:36:27 2025 by rpki-client