Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa
File:                     b559110b-5d04-3e56-a4ff-131551edc642.roa (raw, json)
Hash identifier:          P+9Kon2qRDxpklxxCkI1uTdU1gCk8yOOUgLu8PaabNc=
Subject key identifier:   70:E1:43:1F:DF:A0:4E:70:C4:4D:DF:54:6A:03:1D:DB:53:3B:1E:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B87B237D7EA4CDF06FFB018E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        174.244.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:37:d7:ea:4c:df:06:ff:b0:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=93eca1d9-18db-4f16-aa21-3118ec11f50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:07:65:d0:df:88:38:75:ac:4d:c8:30:6c:
                    44:2e:f9:c6:5f:9b:4d:2e:a4:d3:46:bc:f1:3e:64:
                    4b:5b:54:aa:d1:4a:10:fb:08:b2:0b:92:3d:4f:1d:
                    e5:47:ec:45:5f:4b:fb:13:2e:f1:36:8a:30:d3:59:
                    66:2f:62:4e:2b:a3:6e:23:b7:42:81:88:1b:47:96:
                    cb:72:be:1e:85:a1:29:ce:13:14:f1:12:de:73:6b:
                    77:d4:8d:0f:99:6a:1d:4a:bd:57:36:d9:41:5a:3d:
                    37:29:fb:5b:c8:79:0b:69:57:4f:e4:6f:71:16:0f:
                    da:c7:0d:2f:05:e3:fb:a0:0c:20:82:af:18:a3:3d:
                    78:a8:18:cf:2e:72:6c:c2:24:22:53:d4:5b:8b:50:
                    8e:27:9e:f5:f5:09:f4:db:9e:e2:db:a9:21:97:4c:
                    11:c9:49:16:f2:f7:59:8a:bb:5c:2f:4b:f4:04:4e:
                    57:62:7d:ea:c7:5a:28:85:06:8c:aa:ef:e9:c7:40:
                    2c:51:7b:05:51:26:9c:80:f5:94:05:8e:06:bc:2e:
                    49:4f:4d:90:0d:75:27:34:0c:2f:62:6c:7f:e3:59:
                    74:52:11:3e:e6:68:ad:53:2b:72:b1:a2:9d:cc:49:
                    0e:17:c3:b9:1d:86:5e:49:aa:27:c5:17:6f:63:42:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E1:43:1F:DF:A0:4E:70:C4:4D:DF:54:6A:03:1D:DB:53:3B:1E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b559110b-5d04-3e56-a4ff-131551edc642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:26:18:d5:ef:d8:7b:83:3f:3b:9b:94:9e:d7:40:94:24:
         1a:40:fe:0d:43:59:92:77:52:3d:aa:3d:85:11:a0:79:46:c5:
         dd:ad:82:bf:70:83:36:04:bd:4b:e3:39:5e:23:57:8f:8a:bb:
         17:b4:f9:1d:25:16:45:53:7b:c3:d4:f7:98:a4:fb:63:0e:6e:
         f2:6e:c9:be:92:d8:97:a4:78:58:86:e3:24:b1:38:ac:45:01:
         52:7e:3e:5d:ca:d7:4c:e5:e7:3b:2f:c0:9d:0b:82:5f:13:04:
         2e:f3:eb:87:fb:4a:06:4d:4f:35:d0:77:fa:e8:67:36:20:e3:
         32:ff:d7:a3:d3:f1:82:95:7a:e7:5f:89:7d:70:3c:a7:18:56:
         35:5e:1d:4d:f5:42:d3:4e:41:b7:f7:34:ce:c7:6e:f3:e9:41:
         cf:20:fb:24:88:f9:9f:87:31:88:95:c7:ce:b8:e9:62:3e:5e:
         39:b6:ee:ae:2b:b3:a8:b5:ba:9c:19:6f:e6:7e:f4:9b:23:ae:
         c8:fd:ca:09:23:30:95:6a:96:f8:82:e7:60:d3:7c:8f:f6:04:
         63:a5:24:b1:71:7b:dc:63:92:0b:02:57:2d:f2:04:a7:c5:f0:
         07:07:e2:04:ae:6c:18:5a:8b:b6:93:a7:c6:ab:cc:04:43:51:
         e5:d8:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:09:40 2025 by rpki-client