Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd9121-fb4f-3420-a667-0edaa3b358d1.roa
File:                     67bd9121-fb4f-3420-a667-0edaa3b358d1.roa (raw, json)
Hash identifier:          oU39vEQ5tk+KuWCTbb8HJs7fM/Y2hx0jRqz9Oa9sAV4=
Subject key identifier:   C9:C0:05:4E:CA:F8:CD:C6:92:5F:D1:8B:13:6A:91:0D:0A:1C:50:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD5C3379D56AE681D3533C0A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd9121-fb4f-3420-a667-0edaa3b358d1.roa
Signing time:             Tue 12 Aug 2025 19:21:17 +0000
ROA not before:           Tue 12 Aug 2025 19:21:17 +0000
ROA not after:            Mon 10 Nov 2025 20:21:17 +0000
asID:                     6167
IP address blocks:        174.235.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:c3:37:9d:56:ae:68:1d:35:33:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 19:21:17 2025 GMT
            Not After : Nov 10 20:21:17 2025 GMT
        Subject: CN=2e811c3e-ee39-4e0c-afba-0642b2a701b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:6e:44:cc:78:45:58:3c:84:d5:64:5c:b0:
                    6c:4e:ba:3e:0b:56:5a:90:0b:40:c3:94:aa:fe:13:
                    ef:cb:ea:cb:86:01:5c:72:d2:6e:e2:de:e6:98:ec:
                    43:97:fd:63:36:6d:3b:24:e9:99:17:78:25:c8:7c:
                    19:2a:d4:d0:cd:ee:51:0f:3f:7d:72:e4:26:17:de:
                    d2:f7:28:e6:94:bc:f9:39:21:f7:09:a3:55:49:1f:
                    d8:d7:06:54:82:4b:41:a9:dd:b6:a9:f0:b6:4b:82:
                    a4:5f:23:73:36:9e:97:e9:ea:ce:93:65:c4:f1:5f:
                    bd:78:d7:f9:d6:58:9c:bc:47:e0:da:aa:57:fe:1f:
                    9c:ae:3c:8a:f1:a4:e1:02:d0:fe:71:cb:47:3f:45:
                    a7:3d:02:c4:f0:20:9f:51:1a:85:43:6a:06:07:be:
                    0e:59:91:1d:7e:2a:fb:f3:a0:94:8e:a0:6e:bf:a3:
                    3a:f2:fc:2a:6c:d6:80:47:2f:3e:e8:35:32:ff:4b:
                    03:11:3a:6f:56:f3:fa:de:9e:b5:8b:e3:2f:19:27:
                    0b:41:51:a6:7a:f2:20:c4:2d:10:c9:9d:6e:ec:ea:
                    14:04:95:7e:4d:f0:a6:f8:15:ee:fc:8d:6e:f5:2c:
                    b1:53:58:c7:31:4d:65:de:70:3d:1e:5f:8f:8a:01:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C0:05:4E:CA:F8:CD:C6:92:5F:D1:8B:13:6A:91:0D:0A:1C:50:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd9121-fb4f-3420-a667-0edaa3b358d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:a3:7c:62:0d:82:1f:ec:e9:83:7c:51:4d:4b:ba:8f:73:
         6d:15:29:f9:80:59:4e:34:a1:b8:83:24:d0:77:27:ab:d5:0f:
         2d:52:6e:4a:e0:dc:7a:a8:eb:08:db:3c:ee:04:45:26:91:73:
         59:4c:65:47:1a:2c:08:a5:cc:86:f2:e8:9f:84:4f:8d:76:23:
         ce:cf:ec:70:e3:3d:a4:7f:42:4b:bb:b8:4f:a7:66:0b:97:37:
         17:8f:52:b0:50:42:b5:4e:03:c9:8f:e8:31:e5:01:ee:0f:16:
         e2:f3:b5:1f:a1:5e:9e:e0:28:77:a9:6f:14:a2:f1:04:f6:e8:
         bc:ab:35:b2:88:e9:c3:8f:d0:17:39:0d:07:3c:79:b9:cd:b6:
         fc:3c:de:21:0d:29:06:8b:a0:9c:9c:78:f7:78:f3:b3:2b:82:
         07:59:f0:43:e7:3c:15:2b:26:c0:13:f6:f8:b0:26:8b:bc:11:
         86:44:e8:a0:40:66:26:82:fd:7e:b2:d5:35:d8:4f:77:49:82:
         da:d4:14:b1:94:7e:60:79:22:20:6e:60:0e:39:aa:5a:f4:7d:
         ea:71:1e:61:0b:8e:f2:15:0d:a3:21:8e:9b:35:db:f9:7e:01:
         e2:c7:20:11:f9:c3:d1:7c:59:b5:33:b7:81:3c:66:ed:b4:09:
         f5:87:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:32 2025 by rpki-client