Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3a21ebd-28d3-3243-ad85-a1762bf73e41.roa
File:                     a3a21ebd-28d3-3243-ad85-a1762bf73e41.roa (raw, json)
Hash identifier:          pHtHpY1RVYgTvuuR+n2WGglTSlvNXrhEQzx1AhGWm7A=
Subject key identifier:   64:A4:90:31:24:0C:09:16:42:07:C1:16:B5:13:5F:D0:9E:A0:33:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB1EF7024D967DD81A7100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3a21ebd-28d3-3243-ad85-a1762bf73e41.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.197.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:1e:f7:02:4d:96:7d:d8:1a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2700367d-006d-4bd3-a841-d248026e020d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:57:1e:d8:09:06:c8:a1:a6:82:1f:ea:47:
                    de:46:af:2a:df:fb:2b:3b:fe:04:60:6e:1c:ba:61:
                    99:52:6f:a8:c3:57:0a:89:c7:32:0c:49:c3:e2:aa:
                    e0:36:dc:54:75:10:c0:0e:f6:6c:2e:18:f4:78:bd:
                    18:15:97:88:45:e8:ce:49:c8:91:7a:3e:a5:53:90:
                    eb:9e:64:5f:74:06:d7:29:45:3c:a9:f9:0c:da:09:
                    4e:14:48:9c:57:a7:83:20:b4:9d:53:8f:68:92:06:
                    28:26:5f:5e:4c:54:03:ef:8c:e4:99:05:9a:cd:cc:
                    d9:82:cc:e2:2e:b9:f1:7e:d6:b1:e4:2f:90:db:89:
                    cf:66:d7:87:cc:c0:4e:1b:5e:bb:d7:6c:2e:f7:36:
                    8a:66:c5:a8:f6:60:ed:1c:2a:e6:83:0c:a0:12:d4:
                    27:86:66:1f:93:46:c0:55:1f:a9:62:c1:ec:2e:68:
                    2c:f9:db:03:0b:6c:26:6a:0d:cc:8b:56:48:e3:50:
                    e7:2e:55:ee:3a:8a:28:b7:0a:dc:e6:c8:f2:37:d9:
                    77:00:a7:3a:66:06:12:d0:9e:68:d2:06:73:f8:d5:
                    0c:75:9c:a8:ba:e6:c0:27:3a:67:81:ec:e0:07:0d:
                    da:56:b0:a6:bd:30:1a:05:36:89:19:48:da:29:9e:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A4:90:31:24:0C:09:16:42:07:C1:16:B5:13:5F:D0:9E:A0:33:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3a21ebd-28d3-3243-ad85-a1762bf73e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.197.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6c:38:f3:5d:b4:01:61:e6:c3:c2:0f:a5:89:75:ab:cb:4b:
         14:c5:dc:e2:0f:f7:f6:cc:5c:ba:89:e8:ba:d0:b0:8e:66:06:
         aa:3c:e4:56:8f:8b:83:36:14:11:7f:25:a4:fa:0b:8d:2e:5c:
         21:5e:3e:7a:0f:03:db:d5:28:69:15:58:25:ba:86:46:0c:10:
         d2:c1:b9:08:73:8b:27:a2:7f:ec:8c:49:54:8a:00:ee:e5:d5:
         d2:e2:96:a6:d4:68:57:87:6e:8e:74:c6:1d:5b:29:52:8c:fd:
         1e:ca:57:aa:3e:5a:c3:15:5b:6f:af:79:6b:70:5a:03:4c:29:
         16:3c:85:25:5c:37:48:98:7d:07:6e:40:27:39:bf:ee:d1:22:
         59:07:94:56:0d:1d:6b:2d:c4:89:87:6f:bc:f6:6a:57:27:d3:
         39:87:70:3b:25:c3:c1:9a:13:f8:9f:51:37:62:08:84:00:14:
         28:4d:03:48:e4:fc:12:1c:09:81:b4:9a:b9:38:ce:be:c7:2b:
         3e:43:be:71:39:50:60:0f:7d:c6:ff:82:ca:4d:1a:7d:11:47:
         92:1c:b0:af:81:d9:c9:0c:a5:03:69:ee:bb:1c:6f:48:f1:a1:
         ad:31:22:4a:eb:ea:49:eb:c6:f0:07:94:93:fb:77:0c:87:5f:
         7e:0f:05:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2x73Ak2WfdgacQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
MjcwMDM2N2QtMDA2ZC00YmQzLWE4NDEtZDI0ODAyNmUwMjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaJXHtgJBsihpoIf6kfeRq8q3/srO/4EYG4c
umGZUm+ow1cKiccyDEnD4qrgNtxUdRDADvZsLhj0eL0YFZeIRejOSciRej6lU5Dr
nmRfdAbXKUU8qfkM2glOFEicV6eDILSdU49okgYoJl9eTFQD74zkmQWazczZgszi
Lrnxftax5C+Q24nPZteHzMBOG16712wu9zaKZsWo9mDtHCrmgwygEtQnhmYfk0bA
VR+pYsHsLmgs+dsDC2wmag3Mi1ZI41DnLlXuOoootwrc5sjyN9l3AKc6ZgYS0J5o
0gZz+NUMdZyouubAJzpngezgBw3aVrCmvTAaBTaJGUjaKZ5gJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSkkDEkDAkWQgfBFrUTX9CeoDPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTNhMjFlYmQtMjhkMy0z
MjQzLWFkODUtYTE3NjJiZjczZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS8XgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVsOPNdtAFh5sPCD6WJdavLSxTF3OIP9/bMXLqJ6LrQsI5mBqo85FaP
i4M2FBF/JaT6C40uXCFePnoPA9vVKGkVWCW6hkYMENLBuQhziyeif+yMSVSKAO7l
1dLilqbUaFeHbo50xh1bKVKM/R7KV6o+WsMVW2+veWtwWgNMKRY8hSVcN0iYfQdu
QCc5v+7RIlkHlFYNHWstxImHb7z2alcn0zmHcDslw8GaE/ifUTdiCIQAFChNA0jk
/BIcCYG0mrk4zr7HKz5DvnE5UGAPfcb/gspNGn0RR5IcsK+B2ckMpQNp7rscb0jx
oa0xIkrr6knrxvAHlJP7dwyHX34PBX4=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:53:00 2025 by rpki-client