Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa
File:                     0a7a019e-36d0-3947-bf8c-317960f60a72.roa (raw, json)
Hash identifier:          vNUDVE9fOTRJnPJJt3u5zIh5XmKIbglR6/a2qPTDDEU=
Subject key identifier:   E6:DD:B8:C7:8E:81:2B:9A:A9:08:19:A1:4E:B5:87:D4:4B:40:2C:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23076B1CE5C3B983E10C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.235.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:30:76:b1:ce:5c:3b:98:3e:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=13cbec64-1f0f-446f-a13a-414b73f14041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:80:10:6d:41:31:9e:b9:2a:94:37:05:7a:
                    51:c5:9f:3a:b7:81:2d:85:62:c1:ae:5e:9e:ca:f2:
                    11:3c:2b:49:0c:1f:0b:7d:7b:49:ac:15:97:f4:ae:
                    12:a2:16:4d:13:41:84:5c:33:a4:fd:b8:67:63:a1:
                    95:00:28:7a:92:e6:d6:09:3d:52:81:e4:b3:ae:93:
                    1d:41:18:58:20:d5:5d:0a:b9:82:93:1e:26:a5:84:
                    8d:19:d9:86:df:8f:32:86:ae:92:e9:e4:24:98:a3:
                    5f:95:40:6e:26:ec:cd:4f:eb:09:46:60:c7:aa:ee:
                    1f:14:7b:7d:00:9a:51:42:f0:34:87:17:80:a9:e9:
                    6f:b2:55:8c:05:b9:7d:08:51:27:da:25:1b:a0:11:
                    9c:34:74:04:70:77:24:3d:5d:b7:c5:5d:84:72:cf:
                    7f:aa:82:e8:df:e3:11:8a:d9:2b:5a:33:fb:4d:b5:
                    6b:f8:5f:85:1e:7b:53:34:4f:bd:d3:f9:d1:9c:44:
                    37:cc:6b:6e:be:af:d3:d5:f8:f8:ac:3f:df:16:76:
                    92:12:64:f6:f3:a8:06:40:30:c7:80:e4:84:df:21:
                    66:0a:28:32:99:0f:57:fd:7e:e4:d3:2e:a8:85:70:
                    da:ce:d2:14:8e:96:3b:00:6d:67:98:ff:66:3f:f1:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DD:B8:C7:8E:81:2B:9A:A9:08:19:A1:4E:B5:87:D4:4B:40:2C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:29:97:87:75:5c:5a:a0:d1:13:ad:2e:03:e1:0d:a7:2c:
         20:1b:47:09:d4:2b:0e:62:0e:b1:00:1a:b8:d8:0a:cf:e3:f8:
         ca:8f:c2:b7:7c:4a:7e:06:8c:52:fd:e8:62:c1:81:8d:e9:84:
         98:a1:98:25:f2:10:4b:59:d9:b6:ce:55:08:da:63:4d:26:9c:
         75:24:24:65:82:53:59:fb:70:96:90:47:a0:1a:ff:86:90:96:
         ad:9f:b6:8f:b2:d7:22:20:8d:ae:c8:0a:59:37:33:5a:e6:b2:
         b1:02:8f:2a:5e:60:97:a5:b5:c8:89:b4:47:c5:24:19:3b:39:
         82:55:bc:f6:0d:ea:ee:e4:ae:b1:3f:e7:ab:ba:b0:13:5f:10:
         86:99:71:45:1e:fa:cc:f2:63:f1:50:14:ac:de:4a:5b:8b:82:
         cf:6b:56:ec:0d:48:13:69:55:35:c4:fb:77:53:ca:28:85:f8:
         bd:e1:8e:6e:6d:00:8a:70:0a:d1:1e:c6:1c:77:0d:8d:a1:01:
         60:16:17:fa:70:be:4e:e3:81:94:bc:1d:d2:c7:a3:e8:ee:92:
         92:dd:6a:25:4b:d1:d1:76:54:08:a8:be:f0:44:62:c0:92:b4:
         e5:ae:88:c7:27:b6:54:fb:dc:06:ae:42:96:7c:ed:9a:f1:81:
         90:1e:8f:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjB2sc5cO5g+EMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk
MTNjYmVjNjQtMWYwZi00NDZmLWExM2EtNDE0YjczZjE0MDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogGAEG1BMZ65KpQ3BXpRxZ86t4EthWLBrl6e
yvIRPCtJDB8LfXtJrBWX9K4SohZNE0GEXDOk/bhnY6GVACh6kubWCT1SgeSzrpMd
QRhYINVdCrmCkx4mpYSNGdmG348yhq6S6eQkmKNflUBuJuzNT+sJRmDHqu4fFHt9
AJpRQvA0hxeAqelvslWMBbl9CFEn2iUboBGcNHQEcHckPV23xV2Ecs9/qoLo3+MR
itkrWjP7TbVr+F+FHntTNE+90/nRnEQ3zGtuvq/T1fj4rD/fFnaSEmT286gGQDDH
gOSE3yFmCigymQ9X/X7k0y6ohXDaztIUjpY7AG1nmP9mP/HPiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObduMeOgSuaqQgZoU61h9RLQCyVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGE3YTAxOWUtMzZkMC0z
OTQ3LWJmOGMtMzE3OTYwZjYwYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrutwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABt6KZeHdVxaoNETrS4D4Q2nLCAbRwnUKw5iDrEAGrjYCs/j+MqPwrd8
Sn4GjFL96GLBgY3phJihmCXyEEtZ2bbOVQjaY00mnHUkJGWCU1n7cJaQR6Aa/4aQ
lq2fto+y1yIgja7IClk3M1rmsrECjypeYJeltciJtEfFJBk7OYJVvPYN6u7krrE/
56u6sBNfEIaZcUUe+szyY/FQFKzeSluLgs9rVuwNSBNpVTXE+3dTyiiF+L3hjm5t
AIpwCtEexhx3DY2hAWAWF/pwvk7jgZS8HdLHo+jukpLdaiVL0dF2VAiovvBEYsCS
tOWuiMcntlT73AauQpZ87ZrxgZAej6M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:29:39 2025 by rpki-client