Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c341f336-5573-3859-a5e7-c0d5b83a4a49.roa
File:                     c341f336-5573-3859-a5e7-c0d5b83a4a49.roa (raw, json)
Hash identifier:          g9u5BmeAfZ4DyfsT7KwjiofRG/Z/8q4E+b9K/SJ0pzI=
Subject key identifier:   D1:B3:7C:F7:8D:87:FB:41:C9:B6:63:5B:88:68:D0:A6:F2:72:53:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB23DC51EFBDD2690DF200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c341f336-5573-3859-a5e7-c0d5b83a4a49.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.211.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:23:dc:51:ef:bd:d2:69:0d:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=7f22b3b7-8676-4a57-aff5-c4a5f906a136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:d5:6c:46:8c:72:10:44:73:e7:2b:52:2a:
                    17:22:d5:b4:2e:d0:06:1e:a6:f4:f6:f0:b8:59:89:
                    85:0b:45:20:ba:47:d0:a8:5c:27:af:f5:af:9b:d7:
                    67:52:20:db:3b:64:c2:fa:68:a8:8c:8c:68:39:9b:
                    6b:a6:eb:04:5f:a6:33:2e:8a:cd:10:00:0c:aa:4c:
                    3d:6b:68:45:5c:6e:32:28:e6:db:d1:a2:60:e8:ad:
                    c8:1c:8f:79:ad:57:11:cf:33:8b:a0:90:06:d9:10:
                    a2:3e:58:8f:54:da:9f:c5:3b:04:c4:09:22:de:3b:
                    44:59:94:38:33:75:35:d9:0b:3a:f9:ae:49:51:1a:
                    f9:26:7f:7a:39:0d:62:97:af:cf:2f:97:56:71:e1:
                    29:6f:fc:6c:3e:5d:12:3f:d2:8b:70:9b:eb:96:e7:
                    b8:4c:22:b4:5f:e8:34:e0:3e:0c:ec:d5:a5:06:f2:
                    f6:30:94:38:d4:12:a7:2c:09:54:83:51:67:7e:00:
                    79:60:1a:68:e3:26:ea:08:b3:ab:87:28:2d:28:88:
                    40:9c:bd:ce:b4:67:b4:ee:85:ef:d7:d9:c0:c8:ee:
                    2c:f3:52:d6:13:fb:c8:ae:16:4c:92:78:8e:e2:53:
                    7e:df:50:2a:61:42:c8:08:aa:94:a5:a8:8e:05:be:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:7C:F7:8D:87:FB:41:C9:B6:63:5B:88:68:D0:A6:F2:72:53:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c341f336-5573-3859-a5e7-c0d5b83a4a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.211.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:86:f1:2c:31:15:54:16:5e:ee:5d:e3:b6:82:c1:7b:2b:
         ab:65:b1:ff:e9:47:59:d1:83:9e:92:11:71:cf:40:76:fb:88:
         6b:1c:d0:d0:3b:a4:10:5b:19:cf:bd:5d:5e:7a:d0:8b:b4:c5:
         8c:ce:b7:e1:76:05:c1:f5:24:7e:c4:f2:30:ee:b6:7b:1d:1c:
         2e:73:4a:69:67:e9:1b:87:65:fb:de:b9:62:ae:34:05:74:f3:
         06:57:c6:14:b3:6a:17:e1:b6:de:ab:55:83:7f:75:a3:c6:d3:
         56:51:23:d4:0d:13:c6:a6:da:88:19:35:35:fe:0d:4b:60:6f:
         99:f6:c4:a0:e0:4e:ec:08:29:94:50:f5:38:b7:b4:38:82:91:
         f6:e5:32:c8:1b:29:80:d3:cc:94:2d:50:2a:49:2a:d2:dc:05:
         24:50:d9:d7:0c:dc:4e:f6:ef:47:f0:47:87:13:13:52:8d:33:
         af:72:ce:5b:fe:65:ae:be:c4:ae:bd:8a:51:34:6a:d9:56:05:
         03:c8:30:3f:e1:3c:99:76:f4:69:20:b5:19:b5:61:70:66:df:
         be:3d:aa:f8:5a:c6:ea:c3:9b:76:68:6c:04:a2:84:db:ad:d9:
         db:67:6c:fa:c2:f1:a2:a4:80:08:1f:a1:ff:d8:89:6e:24:dc:
         60:6a:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:05:45 2025 by rpki-client