Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0df10aa4-40ce-3945-99b9-2d2dc130c0e2.roa
File:                     0df10aa4-40ce-3945-99b9-2d2dc130c0e2.roa (raw, json)
Hash identifier:          qgDMZz8wdrHsEmYJ9z0+/LwLUs0x+qXLU1gaf/hwvCc=
Subject key identifier:   81:00:2E:BA:88:6F:79:DA:3C:C1:9B:1B:69:89:2B:15:56:1B:87:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB24A3D045ACD9F0938080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0df10aa4-40ce-3945-99b9-2d2dc130c0e2.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.214.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:24:a3:d0:45:ac:d9:f0:93:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=f5703fdd-c99f-42b2-9c82-88789b903bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:e5:ec:a8:bd:23:e1:40:1b:ef:aa:54:ff:
                    cf:61:30:a5:03:38:8a:2e:cd:09:f3:d5:74:bd:d2:
                    c9:3e:b6:9c:28:bf:85:cc:eb:aa:ce:4e:11:17:26:
                    15:a3:aa:76:cb:18:42:c3:67:e9:d5:a7:7a:7f:16:
                    5f:df:63:88:f5:01:77:d5:c4:5a:ed:0e:02:83:c2:
                    a6:42:03:99:af:cc:d1:06:14:43:ca:68:f2:f9:ac:
                    78:93:26:44:f8:c1:e8:99:ee:5c:4e:4c:b5:49:38:
                    80:eb:0d:0a:85:de:55:4a:de:d4:87:56:58:8a:4e:
                    02:ff:49:f5:61:08:d5:a4:52:73:b0:38:e3:38:c6:
                    c8:f0:0d:48:95:a8:31:78:e7:2b:22:2e:69:bd:0c:
                    13:4a:f0:95:fc:28:55:60:bf:80:b4:e3:1d:9e:5f:
                    1e:7b:64:ef:72:48:c9:a7:06:ba:f6:27:d3:0d:2e:
                    71:3e:f4:9a:fb:46:86:d2:76:39:10:66:62:0a:81:
                    54:d3:01:dd:aa:e2:1a:38:c9:0b:3c:86:a7:fe:77:
                    11:00:5b:e0:e5:fd:d7:b8:e2:f7:fb:5b:7f:7a:6b:
                    77:ef:2f:3c:f7:25:e3:cb:2b:f0:9c:42:c7:1b:f1:
                    63:97:42:8d:8d:6e:eb:fd:fc:7b:8a:46:99:78:2d:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:00:2E:BA:88:6F:79:DA:3C:C1:9B:1B:69:89:2B:15:56:1B:87:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0df10aa4-40ce-3945-99b9-2d2dc130c0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.214.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:13:ff:a3:af:ee:bd:7d:6b:9f:8a:b1:32:7b:65:0c:c9:
         2e:df:8d:48:da:77:49:7d:d8:23:46:1b:b1:07:5a:53:d7:23:
         ec:b0:81:70:e8:e7:06:f4:3e:44:f3:96:a9:92:5e:93:45:59:
         86:e1:b9:a8:47:fe:cb:7e:cd:fa:76:7d:15:0b:5d:82:28:e4:
         0a:77:8d:bc:63:0e:15:62:b2:6d:dc:3b:54:52:2a:68:fd:ac:
         9c:80:e8:47:dd:5d:70:02:c4:c6:00:1e:c3:4a:fe:51:8d:de:
         6f:02:2c:08:fc:be:0d:e7:fe:1d:90:02:b7:dd:a8:a8:57:18:
         5e:56:88:75:bf:58:4b:25:10:d3:b8:bc:94:05:dd:4d:48:fa:
         18:3c:38:c0:ee:ba:da:f8:f7:78:24:9d:17:df:7e:0b:ea:0d:
         52:4a:61:95:21:a8:bd:25:5a:38:94:a0:e8:bd:40:8f:33:1b:
         a9:c0:8c:81:b2:43:fb:02:ec:d9:52:9c:19:36:1c:e2:5a:4d:
         50:25:9b:2f:bd:97:57:0c:c0:6e:51:3c:7d:3a:3b:25:ea:74:
         e9:23:78:4a:10:80:49:77:ca:af:41:43:5f:a9:e2:26:72:4d:
         7f:f8:b0:48:9b:41:6f:d7:b2:41:df:f2:ad:9e:64:a3:b2:74:
         57:5a:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:05:39 2025 by rpki-client