Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd8485e-9303-3ea1-b823-8d2906a512e4.roa
File:                     fdd8485e-9303-3ea1-b823-8d2906a512e4.roa (raw, json)
Hash identifier:          FHHt/NZUu82ep+3TBDdlfHzOxc9x2j19vRw81MQT0rM=
Subject key identifier:   2B:B1:38:63:CA:F9:6E:5E:57:34:C1:CA:49:F0:A4:10:A5:D1:2E:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584964846BF1C6EE0364449684E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd8485e-9303-3ea1-b823-8d2906a512e4.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.250.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:6b:f1:c6:ee:03:64:44:96:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=260d214b-efe8-4a37-998e-c168ca948986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f8:bb:df:af:47:1b:b5:40:90:4f:66:3c:a8:
                    76:43:22:f6:f6:d0:29:a0:6d:5f:ad:5b:b6:fc:ef:
                    ac:cc:55:7f:13:36:da:92:16:2d:de:8b:98:eb:36:
                    be:8c:94:af:d4:fc:c8:8d:63:86:54:c6:3c:9c:30:
                    91:aa:d9:47:e2:96:a8:ee:31:52:01:6b:b1:7f:e6:
                    39:27:4d:89:a8:ce:3f:20:d5:a4:52:be:47:34:28:
                    63:d0:64:57:5b:53:35:42:1f:88:9e:6b:3a:41:12:
                    bf:a0:91:51:13:bf:fc:d1:d1:89:5a:37:dc:50:c1:
                    60:d9:9b:a4:25:52:f6:d7:0e:a8:47:fb:31:8b:da:
                    95:2c:1f:5f:9a:fd:0e:d0:1b:d8:1f:60:e6:51:87:
                    73:6e:8d:3e:7e:8b:d8:4a:1a:9b:33:2e:54:bd:0c:
                    7d:60:38:e8:fe:10:af:0e:f1:43:ae:c2:df:89:dc:
                    b1:3e:30:4f:24:3c:93:cd:05:fa:89:2d:cc:13:b8:
                    59:49:e4:6b:dc:d1:e9:0b:db:b4:df:7d:66:0b:21:
                    61:45:1b:b2:26:48:e7:30:fa:4c:27:e6:a4:2f:6f:
                    e0:95:7f:b4:b3:fe:fa:10:5e:da:95:48:a3:ee:f5:
                    03:80:fe:51:82:38:1e:f1:d6:35:c9:82:3f:37:78:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:38:63:CA:F9:6E:5E:57:34:C1:CA:49:F0:A4:10:A5:D1:2E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd8485e-9303-3ea1-b823-8d2906a512e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.250.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:18:54:1c:be:30:e4:8f:6a:01:6f:3a:4e:a2:0e:30:b0:
         c4:f2:7e:17:ac:a3:44:84:9a:74:62:68:34:bf:52:89:ae:c8:
         32:77:2b:73:34:3e:09:90:c2:34:c2:4f:67:65:f0:45:fd:b4:
         ba:3b:9d:7c:e0:9e:e8:85:cd:86:19:8a:13:9a:37:16:4b:e5:
         6b:e1:18:04:3b:43:c7:77:2f:af:bb:46:65:08:45:2b:4f:3a:
         86:ff:f7:61:20:71:7a:56:61:ad:d1:56:8f:f9:dc:87:cb:81:
         b0:0c:1d:5e:81:18:cb:24:e9:32:cd:5f:de:47:e9:2b:cb:d5:
         40:90:66:ea:80:3c:ba:7e:38:3c:15:f7:55:ad:23:e3:95:fd:
         23:73:0b:04:f9:d1:8b:9b:9b:b3:e5:cc:6a:69:11:5c:7f:7a:
         93:27:bf:c6:4d:7b:0d:4c:ff:94:63:e0:78:9c:60:62:79:4a:
         39:c9:46:bd:36:2d:ea:bf:77:9e:d7:73:5d:9e:f8:0a:6a:ab:
         b0:9f:16:f5:f4:d9:91:a3:da:95:eb:8a:e7:c7:2f:9b:48:72:
         b7:18:18:da:96:97:58:18:a6:b2:bf:3b:68:e7:da:c0:26:61:
         b4:15:de:cd:8f:bb:6b:d0:f2:a5:d0:de:ab:ff:1d:c3:f7:5b:
         72:61:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:17 2025 by rpki-client