Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
File:                     3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa (raw, json)
Hash identifier:          8ipMrpZWfLrSvlnEq1y9iPLzENXn3AwfyyCVNhiM/4Q=
Subject key identifier:   07:71:11:BA:4C:C4:13:F5:59:BD:91:5F:2C:D0:2C:24:ED:30:29:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B8EACFD48ADBE398A7281F600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        174.43.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:fd:48:ad:be:39:8a:72:81:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=c90d00c6-3ddd-4f21-a596-4eefcddd290b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:5c:a2:1a:bd:93:8a:fd:38:e8:04:6a:ee:
                    2c:37:1f:5e:91:e5:c0:93:24:03:89:dd:61:a7:13:
                    48:40:60:79:9d:de:6a:dc:54:ed:0c:55:df:18:96:
                    be:94:a7:10:fe:14:3d:ef:b3:2c:35:29:12:79:32:
                    13:83:25:c9:e0:ff:6f:a9:14:4c:7a:8a:75:3d:f3:
                    1f:fd:4c:a1:69:05:17:d3:40:58:04:c2:91:71:77:
                    7b:06:60:87:38:94:5f:e7:66:d5:8f:3b:77:85:b3:
                    70:c3:2c:0c:c9:32:45:34:81:5c:4e:f1:8b:59:ae:
                    47:2c:5a:1c:0f:3e:f3:17:d1:17:55:55:5c:ac:a0:
                    d6:99:82:88:bd:23:11:47:e0:a1:b5:4a:71:85:56:
                    66:45:c1:b5:44:66:21:9b:0a:40:f3:cd:f4:9f:3e:
                    e0:f6:f4:ea:0d:66:8d:56:20:e3:9d:df:59:d1:cf:
                    bb:a9:e5:4a:f1:35:33:78:97:4e:3e:44:c6:f0:d1:
                    10:a0:53:d7:23:6f:18:4f:e2:58:b4:ca:df:a2:b8:
                    1f:a7:84:33:84:f4:9a:53:07:0e:b0:c3:06:70:fc:
                    3f:59:ae:0a:87:01:8b:4a:31:34:90:eb:8d:cd:cd:
                    50:dc:1a:d6:f3:77:07:52:f2:1c:25:7e:e6:ac:a9:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:11:BA:4C:C4:13:F5:59:BD:91:5F:2C:D0:2C:24:ED:30:29:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3b9b3e-1be1-3b04-92f4-90c764decef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.43.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:1a:dd:9c:5d:f2:ba:bf:df:65:48:81:1c:6f:f2:2c:81:
         46:d5:5e:55:af:e3:9e:0e:ea:4a:3f:27:3c:77:91:a6:2c:ff:
         95:ae:01:f6:83:71:27:f9:6b:f8:1f:32:03:d2:e8:8c:08:a0:
         f2:b1:4b:4c:02:56:18:ec:1a:a1:a6:7a:b4:6d:0e:a8:01:2c:
         d8:33:cd:c4:b3:9b:73:02:1a:24:82:11:95:ed:5d:c2:7c:a9:
         a9:20:90:12:a7:74:19:88:f4:7e:80:1d:eb:1d:d7:82:dd:8b:
         e9:67:2c:0b:f8:c6:e0:e4:c4:9f:ad:2b:eb:a8:19:1d:c7:b8:
         9e:f0:66:02:75:63:77:5a:e2:76:bc:01:95:d2:35:e4:60:0f:
         96:64:6c:df:ab:29:56:d4:71:95:88:d6:ed:94:23:b7:92:87:
         40:a4:ac:37:9d:4d:82:b6:38:09:f1:97:f8:3f:2c:23:03:fa:
         9e:a1:7f:2a:58:02:54:b4:91:7e:1c:fd:6e:df:8d:cc:1a:75:
         b8:43:9c:63:81:0b:f9:56:59:b2:83:a8:a3:40:29:f6:b9:79:
         86:77:14:76:30:d9:a3:dd:0f:86:3f:a2:ed:d8:d7:37:1d:fd:
         21:7b:35:34:cf:cf:fa:08:e7:48:af:d6:f2:f7:2f:4d:14:ac:
         a2:fa:cd:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP1Irb45inKB9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
YzkwZDAwYzYtM2RkZC00ZjIxLWE1OTYtNGVlZmNkZGQyOTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORcohq9k4r9OOgEau4sNx9ekeXAkyQDid1h
pxNIQGB5nd5q3FTtDFXfGJa+lKcQ/hQ977MsNSkSeTITgyXJ4P9vqRRMeop1PfMf
/UyhaQUX00BYBMKRcXd7BmCHOJRf52bVjzt3hbNwwywMyTJFNIFcTvGLWa5HLFoc
Dz7zF9EXVVVcrKDWmYKIvSMRR+ChtUpxhVZmRcG1RGYhmwpA8830nz7g9vTqDWaN
ViDjnd9Z0c+7qeVK8TUzeJdOPkTG8NEQoFPXI28YT+JYtMrforgfp4QzhPSaUwcO
sMMGcPw/Wa4KhwGLSjE0kOuNzc1Q3BrW83cHUvIcJX7mrKlUvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdxEbpMxBP1Wb2RXyzQLCTtMCl6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2IzYjliM2UtMWJlMS0z
YjA0LTkyZjQtOTBjNzY0ZGVjZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErisgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxuGt2cXfK6v99lSIEcb/IsgUbVXlWv454O6ko/Jzx3kaYs/5WuAfaD
cSf5a/gfMgPS6IwIoPKxS0wCVhjsGqGmerRtDqgBLNgzzcSzm3MCGiSCEZXtXcJ8
qakgkBKndBmI9H6AHesd14Ldi+lnLAv4xuDkxJ+tK+uoGR3HuJ7wZgJ1Y3da4na8
AZXSNeRgD5ZkbN+rKVbUcZWI1u2UI7eSh0CkrDedTYK2OAnxl/g/LCMD+p6hfypY
AlS0kX4c/W7fjcwadbhDnGOBC/lWWbKDqKNAKfa5eYZ3FHYw2aPdD4Y/ou3Y1zcd
/SF7NTTPz/oI50iv1vL3L00UrKL6zao=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:54 2025 by rpki-client