Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa
File:                     6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa (raw, json)
Hash identifier:          p7JS/MYxASFkJLUyUFOrkNT/zmLGo5/PCksCMcR48L4=
Subject key identifier:   CA:1B:EE:65:5C:1E:7F:36:75:C0:F2:2F:18:B7:99:D3:93:EF:6E:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C11583E72D02FA924D880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        151.205.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:11:58:3e:72:d0:2f:a9:24:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f90a79e8-5175-4ea7-9fb2-c6ed325692cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:46:23:96:b3:15:7e:68:6c:d5:eb:e3:e9:
                    09:5a:d9:2b:7b:9b:c1:67:38:7d:48:2d:4e:d6:5d:
                    58:cc:b2:49:09:85:5b:a5:32:cb:b9:38:8a:1f:40:
                    50:54:e5:20:07:60:0a:d7:75:6f:87:3c:bd:7d:67:
                    5a:5a:82:c3:f8:22:80:23:b0:ea:dc:10:a1:db:a9:
                    f8:92:ea:62:84:ba:ab:f1:f8:65:76:55:fa:6d:0f:
                    f0:04:00:06:75:69:85:f0:1b:61:48:7f:12:20:4a:
                    50:6f:c6:47:af:7e:1d:1d:76:a9:18:5d:0b:a9:b2:
                    e1:d7:a2:8a:ef:b5:32:c4:3b:b9:e7:95:01:fe:b2:
                    bb:ca:bc:ee:2c:2c:1f:81:75:47:a4:47:3d:94:85:
                    bf:bd:6b:96:d5:d5:b6:c1:3a:d1:15:bd:b3:5f:81:
                    1e:ea:c3:47:5b:71:6a:8d:97:b1:f2:53:11:a8:75:
                    9f:ec:09:ec:50:e7:58:79:bd:bd:d1:ea:f5:f8:4d:
                    cb:3e:1b:ed:5b:da:02:7e:42:c0:7f:72:f5:71:68:
                    8c:92:d4:ec:72:ef:4e:c5:4c:d4:95:8e:cb:ae:c2:
                    4c:65:79:d6:55:df:71:e0:10:fa:7b:38:67:7d:20:
                    23:6f:88:ba:5e:4f:9d:d3:0b:a5:85:74:a0:1d:f3:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1B:EE:65:5C:1E:7F:36:75:C0:F2:2F:18:B7:99:D3:93:EF:6E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.205.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:27:04:ee:ff:d3:c1:95:bc:96:89:1e:53:53:9b:be:91:
         b7:66:5a:12:19:2b:78:e5:5c:b0:38:ea:0a:cb:79:c2:27:e9:
         b8:a3:e0:7e:3d:b3:5e:92:79:d2:87:33:de:ff:82:99:59:e8:
         da:b7:5f:f8:64:44:09:eb:e1:87:86:2f:79:f5:be:2f:95:27:
         1c:25:14:45:2d:04:a4:b2:48:0c:39:03:8b:16:f6:f7:de:41:
         bb:c4:80:f4:d7:43:68:8e:a0:26:4e:be:3a:3a:7e:dc:89:ec:
         b2:09:78:55:24:a8:4a:5a:d5:d5:6a:ab:9c:bf:fe:96:77:96:
         56:ee:5a:f2:3c:d7:8a:91:7f:a4:bf:70:66:a2:0a:d0:86:70:
         fd:7b:3f:2f:44:bf:2e:70:dc:be:17:90:cd:41:44:b0:9f:c4:
         06:eb:cb:6a:42:03:62:59:fa:a2:72:a1:64:9f:d3:12:9c:a1:
         7c:fe:39:a3:2a:a6:95:7e:80:5f:2b:51:02:13:02:13:c0:24:
         67:e0:61:9e:d9:6a:89:77:8e:9b:73:0e:84:7c:71:7e:d3:cc:
         e4:ff:f7:23:40:33:3d:a8:89:56:f4:bc:08:8b:07:d5:65:54:
         ab:94:aa:09:ff:b3:18:04:df:94:2f:51:a6:aa:f8:49:ec:84:
         9d:d2:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:39 2025 by rpki-client