Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
File:                     e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa (raw, json)
Hash identifier:          7WYZiDSGoIEfShbX7t7tc93eEr5KDxQbfJFl3uL3sAE=
Subject key identifier:   1C:B8:32:52:C6:CB:9A:35:B0:DA:14:1B:34:B7:34:C4:76:35:8A:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F1800CE126576EF0B8613A20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        173.64.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:0c:e1:26:57:6e:f0:b8:61:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=32db7b34-b25b-4184-b368-57e51a38a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:ea:22:a2:2b:7d:94:1d:5a:ef:e1:fc:05:
                    cb:36:6d:8e:c2:64:ce:65:6e:dd:3b:5f:84:6f:cd:
                    e6:05:a6:2a:bb:67:cd:4c:e6:8d:0f:b6:04:f9:89:
                    ca:37:9a:fd:15:c9:cc:8d:36:c7:ea:22:19:3f:be:
                    d6:ba:e4:c2:cf:a1:46:02:7c:b2:1b:bc:b4:c4:69:
                    f6:19:8e:eb:99:39:99:ab:c3:20:17:f5:9a:2d:bb:
                    be:2f:47:ae:9e:94:bd:12:05:cb:28:d5:f6:5d:d6:
                    22:b3:40:5a:f2:7b:8c:f5:28:68:bc:57:5c:63:f8:
                    ff:44:58:2b:cb:71:e2:33:66:29:bd:a3:81:4f:83:
                    71:96:1a:ef:78:52:d3:2f:aa:6b:8a:e7:d2:7d:09:
                    74:c3:b1:6f:48:70:8c:b0:01:96:9f:6e:36:1e:de:
                    46:31:b1:46:ea:ab:8f:b6:cb:ba:cd:73:3a:a7:22:
                    24:08:a8:e5:ab:9c:6d:46:c3:12:3a:b0:06:37:22:
                    64:c8:c0:a4:96:41:45:14:30:13:0a:ea:b7:13:35:
                    c7:58:70:2b:67:af:2a:9c:52:5d:02:74:bb:5f:ac:
                    51:d3:69:b0:49:ec:fc:98:7a:65:35:63:fb:98:c4:
                    62:be:32:8a:3a:79:a3:f5:8e:78:e2:8e:dc:7b:4d:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B8:32:52:C6:CB:9A:35:B0:DA:14:1B:34:B7:34:C4:76:35:8A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.64.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:32:c4:2f:29:e7:8d:4b:70:ff:cf:f7:00:32:d3:e9:59:
         5e:5b:01:8b:bd:e5:95:88:78:d9:18:a5:4c:97:24:62:e1:26:
         5e:e0:e1:e2:51:01:42:dd:f0:52:b9:f2:d7:97:27:a3:0d:29:
         86:e8:c6:cc:d7:fc:fd:ab:6b:c2:dd:79:a5:6b:09:94:7f:2d:
         27:e5:f4:bf:ed:9a:ba:c8:35:26:62:e2:f6:f9:86:e4:62:1a:
         52:7f:69:36:46:cf:5c:7c:76:2e:00:41:0d:cf:84:75:f1:83:
         f2:b5:9b:ea:79:3f:13:bc:3a:b1:c3:93:4c:bc:4e:02:4c:a0:
         a3:5f:1d:4d:1c:1d:85:97:68:b2:46:11:06:00:56:02:3f:79:
         11:34:74:ee:fa:04:e5:51:79:e7:74:55:1e:39:48:db:5a:ce:
         a3:78:70:4b:a9:fa:bb:38:2e:48:fd:e6:5c:7e:a8:be:9b:20:
         90:0e:dd:82:27:67:b4:5d:f3:84:8b:cd:bc:ae:d8:bd:2a:96:
         76:1c:d0:fc:5b:c8:2b:a1:03:02:a2:21:c7:34:35:6a:17:8a:
         b4:81:f4:82:81:5a:55:55:ef:66:fe:c8:aa:70:88:25:03:be:
         7e:f8:1b:f4:4c:ea:23:84:9b:04:39:d1:b4:51:85:02:f7:79:
         47:05:ee:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAzhJldu8LhhOiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MzJkYjdiMzQtYjI1Yi00MTg0LWIzNjgtNTdlNTFhMzhhNWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5zqIqIrfZQdWu/h/AXLNm2OwmTOZW7dO1+E
b83mBaYqu2fNTOaND7YE+YnKN5r9FcnMjTbH6iIZP77WuuTCz6FGAnyyG7y0xGn2
GY7rmTmZq8MgF/WaLbu+L0eunpS9EgXLKNX2XdYis0Ba8nuM9ShovFdcY/j/RFgr
y3HiM2YpvaOBT4NxlhrveFLTL6priufSfQl0w7FvSHCMsAGWn242Ht5GMbFG6quP
tsu6zXM6pyIkCKjlq5xtRsMSOrAGNyJkyMCklkFFFDATCuq3EzXHWHArZ68qnFJd
AnS7X6xR02mwSez8mHplNWP7mMRivjKKOnmj9Y544o7ce01HxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBy4MlLGy5o1sNoUGzS3NMR2NYrOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTA1ZjdlMGItNTMzMS0z
YTVhLTkzYmItYTViYmMzODIzMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrUBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFsMsQvKeeNS3D/z/cAMtPpWV5bAYu95ZWIeNkYpUyXJGLhJl7g4eJR
AULd8FK58teXJ6MNKYboxszX/P2ra8LdeaVrCZR/LSfl9L/tmrrINSZi4vb5huRi
GlJ/aTZGz1x8di4AQQ3PhHXxg/K1m+p5PxO8OrHDk0y8TgJMoKNfHU0cHYWXaLJG
EQYAVgI/eRE0dO76BOVReed0VR45SNtazqN4cEup+rs4Lkj95lx+qL6bIJAO3YIn
Z7Rd84SLzbyu2L0qlnYc0PxbyCuhAwKiIcc0NWoXirSB9IKBWlVV72b+yKpwiCUD
vn74G/RM6iOEmwQ50bRRhQL3eUcF7kQ=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:36 2025 by rpki-client