Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
File:                     c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa (raw, json)
Hash identifier:          snQrGFeMuY9z/+X7ZDsGswFocv/jaoZgyuNmiwGQ2L0=
Subject key identifier:   06:E9:D5:16:3E:61:13:54:A6:B6:8E:B5:9A:2E:63:95:5A:DC:FC:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800883562FA9F02D2C2D20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        71.183.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:08:83:56:2f:a9:f0:2d:2c:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=42d60be5-1e28-4579-91fa-7bac19601012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:38:5b:54:88:2a:bc:b5:f4:b3:09:9d:84:
                    56:e3:4e:5c:86:68:f4:86:3b:a8:60:c9:05:6b:33:
                    11:64:e2:24:98:b8:c8:bc:9f:07:31:46:ae:71:37:
                    5f:e8:dc:09:ac:56:b4:22:fc:1e:71:fe:62:80:ec:
                    03:3e:58:a2:c3:fe:d7:2b:b3:7f:00:e9:b1:84:b7:
                    75:ba:5d:31:67:d1:3e:bd:bb:ad:fd:7b:72:df:1b:
                    23:5a:1c:10:82:81:9a:af:2f:88:58:fc:55:19:6c:
                    a1:73:8c:0e:51:1f:5b:2a:7d:67:df:37:2e:ec:74:
                    4d:fa:cc:cb:37:e1:54:32:d1:fb:7a:1b:be:44:71:
                    74:5e:a9:bd:b5:aa:ec:0c:f1:50:60:11:e4:ed:dd:
                    8d:ee:5d:e3:50:eb:34:d2:08:19:98:53:e9:70:52:
                    6a:2a:49:15:e4:c9:7a:f5:b4:40:a0:48:b0:0b:6b:
                    eb:a8:36:94:fc:a6:c1:62:e9:89:8e:c7:3e:b2:5a:
                    75:de:a5:09:de:39:46:b7:ef:b0:15:3d:22:e6:d7:
                    34:a2:ac:c0:f2:15:b8:c5:48:26:14:c9:25:60:44:
                    f0:61:2e:88:50:63:29:79:22:31:b5:1a:c0:7c:8a:
                    02:e7:c8:7f:1f:67:75:3b:1b:2d:56:44:45:5b:4c:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:D5:16:3E:61:13:54:A6:B6:8E:B5:9A:2E:63:95:5A:DC:FC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.183.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:22:1d:c5:11:b4:46:52:0e:10:2c:ea:5b:0f:db:16:af:0f:
         bc:21:69:63:a3:c1:53:61:fd:27:f1:99:43:ec:86:e5:0e:37:
         21:14:bb:d0:cc:2c:41:08:14:c7:e6:41:0b:f1:3d:44:aa:57:
         3b:e9:6f:91:bf:e3:85:33:d7:8b:cf:aa:15:ce:c0:d3:07:41:
         8b:35:88:c3:84:2e:08:f3:4c:93:02:84:74:c0:10:6c:ae:09:
         6f:e3:73:30:29:03:18:57:9e:29:e4:32:a4:ee:53:bf:28:b7:
         ec:66:5e:62:34:a8:41:40:b8:32:7d:9c:6f:d3:1b:f6:8e:ab:
         46:4f:a2:41:33:d2:fe:11:92:3b:59:2e:2e:4d:8a:d4:4a:bf:
         89:9d:1c:83:6e:2a:00:36:57:fe:58:d7:26:1e:72:30:3b:a2:
         33:f4:6e:ad:78:0d:86:b7:4a:e6:c0:47:a6:2e:1f:16:ca:a7:
         c3:63:0b:d2:ff:f1:df:78:d4:5b:8e:bf:17:06:a5:6c:15:bb:
         1e:89:d4:e5:4a:b6:1c:21:9d:8f:e0:5f:87:35:8b:d8:72:96:
         f7:a6:7c:f8:c4:7b:b9:f0:75:dd:07:cf:0c:64:0e:fb:d2:d3:
         70:a7:d1:b0:6c:28:9c:8d:e5:8c:71:9b:56:50:8c:a1:69:e5:
         7f:13:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:05:57 2025 by rpki-client