Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa
File:                     65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa (raw, json)
Hash identifier:          oF5eNZmtWDCH+qAZAL9u7hb1bp8SAl+9ChDuL+uy8bg=
Subject key identifier:   1B:A7:3F:72:BF:A8:D0:D1:91:E3:C6:4F:28:3C:F5:E0:CF:75:CD:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AF256A54238762FF20E85E7A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     3855
IP address blocks:        199.172.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a5:42:38:76:2f:f2:0e:85:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=c89093ea-d4b3-4517-8b00-da34f337eee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:0f:82:ab:19:6d:4c:61:ac:0f:35:bd:70:
                    e4:e0:b9:a4:91:f6:14:62:73:95:58:3f:08:f1:6e:
                    a5:38:44:0f:cc:30:c8:1c:e1:7c:5e:d2:af:4f:4a:
                    f3:28:fb:fb:20:61:62:8e:cb:9b:aa:00:84:b5:23:
                    b4:ee:40:35:d8:b7:f1:5b:bc:46:bc:05:e4:3e:ff:
                    93:7f:06:fe:3c:e8:70:64:f6:a4:b1:2a:b8:70:44:
                    d4:f3:d7:2d:d8:06:7e:e9:6c:04:03:57:ac:7b:83:
                    38:10:2b:94:06:dd:02:5c:10:5f:c1:a0:04:fc:55:
                    93:74:3d:78:29:d6:8d:1b:a1:3d:2c:e5:f5:dc:ab:
                    61:40:ed:96:65:f6:d4:aa:2e:c8:57:e9:c2:4e:e5:
                    85:9e:b4:41:e5:7f:ce:80:0f:5e:22:e2:21:88:25:
                    61:1d:09:6e:4f:1f:1c:1f:57:5f:c8:02:f2:46:00:
                    21:f1:61:00:08:1a:43:d7:f5:7e:31:a2:e1:df:70:
                    ae:1b:da:8f:85:d8:81:cd:e7:23:96:65:c2:ba:b5:
                    bc:45:e9:0c:15:0f:1d:c3:58:41:cd:6a:65:b3:23:
                    e6:ae:66:60:de:32:ca:f2:12:b9:5e:5a:6f:98:77:
                    e2:2d:8a:f3:13:1a:df:d7:e2:4d:c5:61:98:be:47:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:3F:72:BF:A8:D0:D1:91:E3:C6:4F:28:3C:F5:E0:CF:75:CD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c9:9b:4a:2a:2f:88:0f:e1:87:28:53:34:59:3d:06:ab:51:
         b3:47:be:fb:93:4a:c9:09:48:73:b0:9b:42:03:73:2e:c2:7a:
         45:36:5e:eb:b9:8c:34:08:8c:99:e3:6d:bc:64:a3:d2:8f:2d:
         c7:2c:b7:86:02:2e:fa:98:3a:bf:e7:f1:36:ac:f3:58:a3:ae:
         f7:a4:56:63:94:e7:18:13:55:dc:18:67:71:02:97:8e:4d:06:
         35:ea:6c:0d:82:b3:c8:30:61:c1:96:06:90:ab:7a:27:0f:b2:
         91:59:6e:dc:d3:9e:3f:97:e1:98:d3:d6:08:5b:e2:2f:78:8d:
         1c:26:a5:0f:4c:42:dd:a6:5f:41:6c:6c:67:18:0d:56:55:22:
         cc:5d:b3:4a:b4:22:b0:62:8f:78:e2:4f:0a:8e:4e:0d:24:33:
         96:7e:52:f9:fc:5a:77:f1:1e:c9:f1:b3:ae:b1:78:d3:98:f0:
         7a:ae:92:9f:9a:66:d4:f2:d9:24:86:10:16:95:53:e2:cd:d0:
         e6:89:63:15:52:19:ff:fe:50:2f:84:bd:00:37:6c:bc:1d:bf:
         57:ec:78:b3:e0:16:3f:ac:71:ba:0d:19:12:65:9a:ff:c2:b6:
         e6:58:9e:7f:f4:44:f1:69:ba:c4:fb:04:72:53:c6:c0:57:b3:
         4f:8e:8f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:19 2025 by rpki-client