Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ea4fc3e-a0b2-3c61-a6e2-399738cb1038.roa
File:                     0ea4fc3e-a0b2-3c61-a6e2-399738cb1038.roa (raw, json)
Hash identifier:          FOD4LjxIbYjYNl+tdnV3Ioz8rmm0CRzljFiw+wQKWzY=
Subject key identifier:   60:1D:83:B9:50:DD:9B:91:39:8A:7F:F5:9F:D3:AB:42:5B:85:9C:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A1C5A0638D7861D33FE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ea4fc3e-a0b2-3c61-a6e2-399738cb1038.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        75.116.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a1:c5:a0:63:8d:78:61:d3:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=5434c1b3-4bd9-40d7-969b-8856036f29ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:2f:77:e5:f1:c6:c6:31:ce:15:33:14:c8:
                    49:81:a0:0c:6e:37:d0:27:ca:77:26:e2:9b:db:a7:
                    e7:c8:fb:b8:7d:8d:bf:69:7f:0a:3c:3d:8a:80:51:
                    70:de:92:2f:99:cf:b4:59:21:6c:0c:92:77:12:95:
                    2d:21:dd:71:23:5e:d5:6e:45:99:d2:55:a0:4c:ec:
                    b7:5d:80:cf:f2:5d:80:5e:82:ba:63:c5:65:67:3b:
                    3f:5b:a7:cb:6c:51:b9:11:9b:4b:27:0c:59:0c:29:
                    de:d9:5f:bf:51:85:92:5b:b0:cb:3e:2a:73:00:01:
                    56:d0:1d:b5:a4:73:5d:ea:3f:3e:f4:40:3f:ea:43:
                    94:e8:5f:b4:d6:b2:f6:a3:98:0b:f8:b4:47:7b:3b:
                    5d:52:d5:c2:c9:02:e5:c0:af:ef:bd:dc:50:cd:96:
                    75:93:4d:ec:7e:1a:e2:8f:62:4e:66:83:b6:23:b6:
                    5d:77:e4:de:5c:9b:e4:b6:47:3a:e4:7c:79:65:e4:
                    8b:a4:d4:ea:c4:b1:3d:42:ed:02:cc:a9:19:fd:b9:
                    61:e4:b4:7f:cc:c8:a9:17:a5:ca:67:84:46:68:8b:
                    be:d6:3d:d6:8c:7e:45:36:09:38:63:82:05:02:ea:
                    c1:a1:0e:63:8c:76:a7:7e:f1:93:7a:b1:de:d5:33:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:83:B9:50:DD:9B:91:39:8A:7F:F5:9F:D3:AB:42:5B:85:9C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ea4fc3e-a0b2-3c61-a6e2-399738cb1038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.116.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:ca:86:0c:0d:3d:dd:e6:ca:d0:4b:a3:9f:94:48:00:c5:
         b6:0a:75:98:7f:20:19:2b:7f:02:6b:f6:e9:5d:60:10:d4:a3:
         2e:6f:d1:25:8a:1d:c8:f7:3b:11:7f:79:2c:3c:9c:d3:16:7f:
         25:43:0b:95:6e:45:dd:dc:73:32:da:a6:fe:f5:6b:38:e5:97:
         f1:33:19:ec:72:38:b2:43:67:4f:23:04:a2:84:aa:14:dc:8e:
         33:53:1f:67:0d:6b:8a:2d:f8:76:39:f9:cb:35:92:4b:89:e5:
         ff:d0:38:03:3d:57:e5:d9:c8:86:30:46:af:5c:62:88:66:79:
         7d:7d:5b:c9:40:9c:80:4f:55:ec:c4:67:ee:10:db:f5:4b:e7:
         0a:65:bb:01:c5:25:77:a1:3e:b8:af:c4:d3:1d:10:af:61:16:
         ac:40:7f:1e:c9:a0:19:01:70:ef:03:98:87:7d:52:52:8c:3f:
         ed:ea:2a:0e:cf:22:51:37:5f:72:9d:47:c6:7e:8f:f8:82:6f:
         06:66:60:e9:e2:5a:cb:9c:d4:b9:61:66:0c:49:a4:b5:69:f5:
         b2:8e:94:21:03:93:58:d5:3c:e5:49:2a:39:b2:95:38:c0:2a:
         ef:ec:f6:10:1f:ec:d0:f3:22:f0:25:52:9a:53:d9:57:77:cc:
         d9:69:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:40 2025 by rpki-client