Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0c6d3a-71e3-3f96-83f2-85e5accc31b3.roa
File:                     db0c6d3a-71e3-3f96-83f2-85e5accc31b3.roa (raw, json)
Hash identifier:          pxsJMwQFxavuJJCh5vU+8EYvvGWVu8jYFd/5N1rjgTo=
Subject key identifier:   FC:86:62:64:EE:06:DD:F2:84:0A:E5:5D:1F:F8:42:26:CE:94:78:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB258328FE4FE5923FB9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0c6d3a-71e3-3f96-83f2-85e5accc31b3.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.216.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:25:83:28:fe:4f:e5:92:3f:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=0e5727c7-d73f-4564-afad-825492cab961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:30:ee:96:bf:e9:f3:8f:17:66:4e:e8:a1:
                    a1:3e:a6:92:51:68:ad:6e:f5:fd:6f:ab:91:29:4f:
                    90:68:e7:c5:bc:99:63:0a:71:59:24:30:76:7a:81:
                    db:cd:ce:84:da:ca:a8:db:d3:e3:16:03:5d:58:84:
                    53:01:ed:98:79:78:e9:39:5c:10:ac:4b:ae:32:ef:
                    5d:76:e0:4c:14:d6:b7:23:d6:22:2e:e9:4b:8b:d0:
                    c6:96:91:bb:1b:df:0f:51:88:af:70:d9:17:1c:ed:
                    7d:d3:1c:d2:4c:23:9b:09:43:10:cd:5c:12:b3:f4:
                    9f:7c:3f:7a:2f:26:fe:13:bb:74:d6:db:69:f7:be:
                    fe:0a:9e:e8:e9:0a:27:aa:01:e9:31:be:a1:8e:b3:
                    e4:6f:63:b3:0e:f9:41:6d:1b:50:70:0d:f9:b6:8a:
                    8c:6c:60:30:66:1f:cf:5d:6e:0d:20:eb:6a:5f:98:
                    8f:95:d0:91:f5:22:b9:f5:ab:69:2f:ac:77:2f:bc:
                    26:e3:46:20:b6:46:9b:27:d8:7b:00:b5:ab:cf:e7:
                    24:21:b2:63:2b:5d:4f:cd:cf:59:8a:59:f9:32:8c:
                    b0:fe:59:69:7e:25:1c:a4:23:c7:62:f0:f7:ca:bf:
                    c1:dd:e2:13:66:03:87:58:62:f7:e1:71:fc:f6:b0:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:86:62:64:EE:06:DD:F2:84:0A:E5:5D:1F:F8:42:26:CE:94:78:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db0c6d3a-71e3-3f96-83f2-85e5accc31b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.216.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:73:ac:6b:a1:11:cf:57:06:71:ac:27:6b:bb:3a:9e:fd:95:
         51:a8:35:cc:f9:44:e4:74:52:28:aa:fb:8d:7c:8b:3b:e2:d1:
         6a:84:5e:c1:77:2e:bd:31:44:37:0e:34:3f:59:f1:da:93:48:
         27:21:9c:12:a1:a9:14:e5:57:01:f2:2f:66:bb:5b:da:5e:35:
         81:ed:54:93:9b:c7:dc:74:16:3f:d5:f8:fb:8a:a2:16:e6:40:
         76:ed:e9:84:b6:7f:ab:f3:dc:36:86:3a:a8:e2:6f:dc:1e:8c:
         18:4f:5a:d5:fe:49:7c:b5:66:97:58:a4:24:c8:6c:df:d1:70:
         be:ba:14:e1:19:a3:ba:44:63:30:f3:ee:5c:b4:d3:ca:40:9b:
         ed:8f:bf:cb:a6:59:08:30:f6:04:b5:40:5c:43:61:b6:b6:eb:
         ae:2a:3a:81:8b:fe:d8:a8:df:f4:0f:ff:02:cd:36:c4:8f:5e:
         7a:de:41:ef:5b:c5:f0:7c:72:f1:1a:5f:2c:9a:c0:6b:54:ba:
         a0:81:ff:a9:6a:09:1b:fe:82:d2:9a:40:b2:a1:c4:6d:08:18:
         a8:43:51:da:d4:12:81:09:0e:04:13:3a:cc:e0:0c:12:1a:bd:
         09:a1:3a:ca:e8:10:90:62:e7:bb:3a:bc:fc:57:3a:24:14:84:
         ae:f8:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:43:18 2025 by rpki-client