Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b71602d-4af6-3935-8f08-94af57c72348.roa
File:                     8b71602d-4af6-3935-8f08-94af57c72348.roa (raw, json)
Hash identifier:          WaSpXSC+zY2T5A3Aa/wDFA8lqrMZBmhM6Vcjvzo6VTc=
Subject key identifier:   53:79:55:6E:2B:2E:86:AE:93:BC:AA:FA:60:C0:68:30:23:52:B5:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B23BF87D754D7201875B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b71602d-4af6-3935-8f08-94af57c72348.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.249.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:3b:f8:7d:75:4d:72:01:87:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=5377d4f3-1d0c-437a-bce1-52f53d3312b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:fa:c3:76:57:e3:d9:68:ba:ae:e4:f6:0a:
                    5d:a7:50:f2:9e:28:78:7b:af:a3:e0:90:93:a1:77:
                    27:6f:7f:75:60:75:7b:0c:2d:8a:fc:d3:fc:32:6d:
                    16:28:9d:20:32:d1:50:1f:1d:ea:fd:20:63:7c:1d:
                    34:fe:e8:bd:f8:f4:d8:bc:1a:14:20:45:ad:c2:7c:
                    7d:d7:85:83:75:8e:f0:c2:f2:30:f1:c0:f2:66:7f:
                    a9:6d:19:44:7a:ac:f9:77:f1:b8:00:91:ac:17:a2:
                    90:43:eb:09:7a:39:40:c4:43:a5:f8:68:98:a9:89:
                    3a:46:ea:c8:df:bc:9b:75:54:c9:75:59:af:b4:6b:
                    90:a8:16:ed:d3:ac:be:2b:12:75:de:97:92:94:87:
                    9f:58:18:a5:c4:ea:59:a5:7e:63:fa:65:52:d9:f4:
                    99:ed:cf:1a:62:bb:6b:88:2e:59:d5:db:f4:c5:63:
                    4a:b3:35:ce:9e:da:c7:87:9f:8d:11:59:2f:d1:ec:
                    a7:a4:e4:9e:1c:4f:e7:a2:87:58:19:9f:e9:ef:b3:
                    49:51:73:1d:ee:f3:af:24:4a:45:ec:ae:72:90:95:
                    51:a1:8a:fd:ba:0e:e4:b0:21:b7:5e:58:f5:9e:84:
                    e3:16:f1:ad:dd:28:d0:3b:31:39:63:84:88:33:89:
                    c9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:79:55:6E:2B:2E:86:AE:93:BC:AA:FA:60:C0:68:30:23:52:B5:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b71602d-4af6-3935-8f08-94af57c72348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:75:62:1f:02:4f:74:57:ac:b2:fa:50:80:76:a5:97:51:6e:
         53:92:00:a5:80:f0:70:1c:f9:f5:49:4f:07:e8:ca:a8:b7:af:
         16:fb:7f:ae:f8:d9:ae:3c:9d:d2:a6:c5:9d:70:50:0c:fc:eb:
         3b:ff:3f:2d:3a:3b:c3:26:94:9b:bd:a9:1b:52:7a:32:90:ef:
         83:41:ef:42:03:b7:d8:42:94:66:ba:ca:a7:82:dd:98:67:fe:
         78:9b:32:bf:8e:ff:a5:98:73:f5:87:8f:78:e8:9a:ee:1f:c4:
         15:0b:8d:50:c9:6f:4c:87:11:22:55:14:ac:87:40:61:c3:ca:
         3f:3a:da:fa:9d:65:0f:c7:5f:ef:06:02:14:eb:4d:21:30:68:
         70:e7:fe:9e:2c:63:1b:5a:26:aa:50:94:8a:0d:1d:36:b9:ca:
         09:ca:91:15:81:22:2a:a5:89:8c:a8:cc:1b:5b:50:ba:b5:78:
         fd:22:cb:ec:62:55:d7:46:81:88:cf:d7:e5:32:ae:3d:12:81:
         e5:80:83:c6:8d:05:7c:7d:80:43:b2:97:55:a8:04:ba:20:59:
         fd:23:ff:39:fa:e0:79:f1:fe:b9:be:34:85:3d:4f:9a:2e:23:
         68:ed:56:4b:71:6e:b5:96:ae:fa:ff:80:f4:07:de:ff:d5:74:
         46:e4:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:10:12 2025 by rpki-client