Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99600b25-ae71-3d48-98f2-73b3911fe23f.roa
File:                     99600b25-ae71-3d48-98f2-73b3911fe23f.roa (raw, json)
Hash identifier:          PYqZe2h6LBH8A5SWvoBX0n2RjDN1qd8w5NlMhZM84OQ=
Subject key identifier:   EC:E5:38:71:A8:32:A4:B7:72:74:36:ED:07:A8:1C:B2:09:D9:02:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB2217AEC368949AC9AC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99600b25-ae71-3d48-98f2-73b3911fe23f.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.205.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:22:17:ae:c3:68:94:9a:c9:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2795a825-8256-405b-8f38-22e022ca2a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:7c:ee:55:c7:f1:74:6c:03:f1:af:9c:5c:
                    f1:dc:db:b9:90:a6:de:4c:d0:33:14:93:91:0c:53:
                    72:0d:77:b2:b9:c0:1c:2a:87:23:c7:5a:f6:90:38:
                    8b:45:14:c7:c8:81:ac:e7:2d:06:51:66:6b:54:a7:
                    75:d5:34:db:69:de:d8:fa:2a:63:43:57:75:26:fe:
                    65:8b:d2:a4:6f:ce:1a:55:c3:dd:55:79:1f:5e:91:
                    64:14:1d:ab:0a:c4:70:da:27:89:b1:5a:85:28:1b:
                    81:39:c8:53:dd:54:0e:0e:de:e8:c2:80:f3:c8:47:
                    f0:27:2e:36:a6:db:c0:68:24:62:3d:54:2c:e7:a9:
                    64:11:54:a8:37:85:b9:61:75:76:74:2b:7a:c8:42:
                    5f:f7:5a:ac:8b:91:0d:19:9f:b0:e3:55:c7:06:96:
                    f7:b4:d0:93:a5:5b:d1:9b:93:24:7a:75:35:01:28:
                    da:51:fc:91:09:49:e4:90:ee:1e:62:a3:cb:f9:42:
                    28:5a:2d:a8:89:c3:b8:70:f8:77:65:32:04:e3:49:
                    ba:4a:9c:83:1b:ac:5d:cd:ec:83:c4:fb:a6:48:ea:
                    72:3f:2b:e0:40:12:2d:e6:85:00:7c:ca:64:db:80:
                    7e:23:65:34:4c:7f:9f:b6:3d:69:54:52:a7:3c:25:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E5:38:71:A8:32:A4:B7:72:74:36:ED:07:A8:1C:B2:09:D9:02:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99600b25-ae71-3d48-98f2-73b3911fe23f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:15:55:03:dc:d2:52:ea:3c:ab:de:3d:b4:34:1e:d7:ff:41:
         3b:84:13:c4:08:82:3d:00:82:66:41:9b:ea:c8:ba:ac:0c:70:
         37:cb:33:aa:7b:ba:fc:6c:b7:f3:93:9e:80:ae:eb:aa:c2:3d:
         84:e6:e1:fe:14:2a:b9:3a:05:bd:78:60:6a:fa:61:49:fe:50:
         9d:16:27:36:2a:d0:8b:53:3d:2c:0f:51:56:a5:f2:8f:7c:07:
         6e:35:85:fe:3e:bf:cc:31:d6:a6:4e:e0:07:53:2b:61:cb:d1:
         4b:3a:13:7f:a2:61:c3:eb:e7:09:f2:0b:d9:f9:50:41:ca:dc:
         78:e4:7c:b5:c7:46:1a:2d:6c:f0:ac:84:8c:5c:20:ca:e4:56:
         db:02:24:bd:1f:e7:7c:92:74:f4:85:f7:c3:26:f0:a0:36:7e:
         d7:70:c9:9d:b3:e8:89:4c:cf:bf:6d:25:9f:c9:a0:f2:3a:3e:
         43:0b:87:1f:db:44:da:d6:33:35:d0:3f:de:fa:d3:41:1f:6f:
         f5:e1:5e:ef:87:c4:dc:e3:bd:ad:7b:bd:10:6a:a6:a1:79:8b:
         55:f8:bd:57:80:34:08:7d:e4:17:a6:cb:85:0b:04:9c:b6:00:
         3d:ab:10:21:ae:51:0b:a1:b5:bd:52:c4:cf:cc:6f:68:6b:87:
         2a:8c:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:04:45 2025 by rpki-client