Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e277607a-1f7a-3dbf-bc80-3cc7f27c867c.roa
File:                     e277607a-1f7a-3dbf-bc80-3cc7f27c867c.roa (raw, json)
Hash identifier:          T3Av5SU5DIfZRGcI50Vh9Er//8rBl0hvTQUqsyApgkQ=
Subject key identifier:   FF:20:16:86:FF:FF:91:AC:01:B9:53:33:33:7F:DE:32:58:96:F2:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A43DB23A95DD923F0AB9E6E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e277607a-1f7a-3dbf-bc80-3cc7f27c867c.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     6167
IP address blocks:        75.211.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:23:a9:5d:d9:23:f0:ab:9e:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=3f91415a-e4f5-4536-9b10-e0aae61c18e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:c0:36:05:09:57:6f:a6:76:ae:2b:d0:c9:
                    2d:65:09:9d:27:f6:84:6f:2d:b8:ee:d3:3a:24:cb:
                    3d:d2:00:09:52:63:96:6d:20:ba:0c:36:eb:12:c7:
                    65:12:fe:15:da:0f:eb:e6:22:ff:44:5c:92:19:71:
                    44:30:51:f3:55:a0:84:e5:13:fc:3c:f4:f8:a5:41:
                    85:99:08:a9:36:b1:d9:3b:1c:cf:05:93:2a:8c:f8:
                    f7:b4:56:6c:0a:60:84:57:d6:e6:34:fd:21:fb:2b:
                    2c:db:46:bf:11:20:4d:85:58:e4:44:f1:fe:5f:a4:
                    ca:8c:78:4f:19:23:94:47:9f:20:8b:0d:42:1c:f0:
                    d4:7c:f7:7f:ac:d6:4c:87:b7:26:fa:71:ca:d7:8d:
                    51:42:b9:07:bd:4f:3e:e7:d6:98:14:03:b1:41:fd:
                    cf:f0:b4:67:af:a5:5b:1a:2a:58:d7:2a:4b:f9:75:
                    70:04:df:06:2c:55:92:38:b1:df:bf:c5:47:e0:3d:
                    ae:cd:7b:dd:eb:ae:96:65:53:bf:be:a8:3e:52:b4:
                    db:7c:9b:47:e3:7c:ab:15:2a:bb:85:7a:93:2d:76:
                    72:94:41:ce:7e:48:20:04:b6:4c:30:3a:7f:bc:a9:
                    db:3b:ed:a2:ba:49:26:88:4f:42:f0:a8:e1:f4:c5:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:20:16:86:FF:FF:91:AC:01:B9:53:33:33:7F:DE:32:58:96:F2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e277607a-1f7a-3dbf-bc80-3cc7f27c867c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.211.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:90:04:9b:dc:ef:54:b6:54:28:d9:fc:db:b3:d4:c6:2e:13:
         a5:b6:a5:02:4b:73:89:33:30:7c:ad:02:08:a4:df:96:1b:55:
         78:a2:f2:c2:b6:9f:8c:93:47:80:c0:7c:94:91:d8:0a:d8:b0:
         90:2c:7f:4a:f4:ab:a2:7b:49:23:cd:8c:e6:f9:17:64:20:52:
         a6:89:83:5f:85:b6:ef:64:a5:01:14:8a:19:e5:f2:54:cd:9b:
         22:35:ec:ef:8e:c4:1d:54:ca:cf:d7:1f:49:c0:45:75:34:02:
         26:15:2c:7e:ed:cd:d4:92:2b:e1:32:eb:a4:a6:28:96:83:8a:
         a1:32:bc:bf:f1:71:9f:d3:dd:00:4a:85:b5:ff:72:d7:88:90:
         68:d6:81:c3:b3:7f:84:4a:b3:c3:ab:e6:4d:d6:1a:5a:4b:f3:
         5b:7d:e3:ac:be:e6:f9:43:c4:1b:fc:3a:da:39:cd:ec:2f:65:
         75:c4:4a:ed:f5:85:d7:f5:dc:ff:ff:78:cb:73:6a:50:00:5d:
         02:ff:11:ab:09:43:ba:5c:ff:44:77:20:12:ac:97:75:55:48:
         65:49:49:2f:0f:22:fa:59:5d:61:2b:d8:0d:e8:5c:65:11:74:
         cf:75:9e:6b:e2:7d:9f:9b:6b:f7:0a:ae:6f:e2:b0:cf:b3:7f:
         d4:98:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:59:21 2025 by rpki-client