Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ffe95d0-0f4b-35f0-8434-9061d2db7f83.roa
File:                     7ffe95d0-0f4b-35f0-8434-9061d2db7f83.roa (raw, json)
Hash identifier:          +zI5lmKOim/JewPKL517b9laDqc7nhyc4ASB7haDfFE=
Subject key identifier:   D9:ED:FF:0F:3D:CD:7B:7E:0A:53:31:07:50:68:BC:CA:83:C5:A8:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C0B341F846686339B94C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ffe95d0-0f4b-35f0-8434-9061d2db7f83.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        68.160.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:0b:34:1f:84:66:86:33:9b:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=d95473e2-1031-44f3-9794-ddf000306f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:5a:c0:30:2e:27:f1:c7:50:96:63:c3:01:
                    ec:17:ac:6d:2a:f6:26:a7:32:43:f8:98:5b:e2:ba:
                    f3:d0:99:15:c1:40:1f:12:fe:78:60:88:54:8b:bf:
                    93:1a:93:bb:03:ac:57:99:cd:c6:5a:13:7b:5f:fd:
                    de:5e:4f:f8:08:64:bf:83:73:93:a6:69:49:e5:3f:
                    67:23:7d:be:dc:51:27:18:f2:09:7a:9d:69:a6:60:
                    14:41:f6:8e:81:e4:5b:70:50:3b:9e:12:13:4f:86:
                    b3:89:9c:c3:f1:3f:42:4f:eb:f7:e8:1f:80:e2:b1:
                    65:37:5f:50:be:8d:ba:1b:2e:e0:5b:fd:5f:e1:ae:
                    6e:98:55:7d:65:c1:67:f6:58:1a:4c:31:4d:0c:1e:
                    5b:f3:c5:d4:b1:9a:52:25:eb:c9:4e:7e:d3:3b:89:
                    a5:8f:cc:c6:ab:2c:8d:d1:46:c2:97:aa:c7:4e:99:
                    a1:cb:89:c0:cc:61:7c:d2:4d:57:9c:54:e1:3b:47:
                    a5:0d:b8:9c:e2:2a:bc:9a:df:b2:11:e4:be:bd:bf:
                    09:40:59:53:cb:3e:74:a9:f2:c8:26:fc:a4:8e:c8:
                    ef:d4:b9:8d:20:48:a5:05:ec:cb:c2:d8:9d:41:5c:
                    a0:9b:7c:0a:43:35:02:ee:c0:f4:b6:39:96:c9:bd:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:FF:0F:3D:CD:7B:7E:0A:53:31:07:50:68:BC:CA:83:C5:A8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ffe95d0-0f4b-35f0-8434-9061d2db7f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.160.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:b4:ca:07:ce:61:9c:b2:fe:17:db:a4:f7:05:2f:83:ab:
         2d:f4:5f:4a:a8:56:c7:3a:15:b5:9c:14:cd:4e:11:8c:14:d6:
         42:6d:15:c5:94:7a:0a:d8:85:1d:1a:33:17:29:7a:c7:f4:e0:
         39:ec:a9:db:6a:9f:64:80:16:38:66:77:e2:7b:9f:8a:3e:c5:
         5d:20:15:54:ba:8f:b9:f9:45:5a:77:8e:f2:04:c3:71:f0:b7:
         c6:40:86:ba:26:f9:93:48:d2:0c:4f:fe:29:13:82:32:69:36:
         34:2a:b9:2f:f4:23:80:7b:4d:58:60:a3:ee:78:1a:60:6c:1a:
         00:70:a5:44:1a:42:ca:20:ab:ff:11:42:27:e9:f3:e2:61:34:
         46:58:a1:f9:f8:1e:c1:8e:ec:b1:17:f1:6e:c9:34:5e:6c:6a:
         20:e8:da:86:18:24:e7:b0:86:d2:28:35:93:66:7d:80:dc:54:
         0e:c6:ac:f2:0d:6f:24:fa:ea:ba:d1:b3:a4:5f:eb:e6:71:5c:
         f5:6c:66:23:78:2f:ab:56:70:6e:a9:81:75:b8:9b:01:ba:70:
         23:f1:42:14:50:45:eb:ed:c5:ff:e9:34:0e:67:45:c3:d1:a3:
         24:5c:df:2c:d4:c8:08:43:b4:65:69:38:30:6c:9a:74:71:b1:
         4b:40:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:57 2025 by rpki-client