Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
File:                     1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa (raw, json)
Hash identifier:          pWOX1GdIwV7abeRbUycLg6nu/MDS3CJy1QBUgV+gKew=
Subject key identifier:   28:86:96:1B:E9:01:1F:8F:AB:FA:DF:04:61:54:BC:2B:10:7B:7D:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12E96DA0D45B765960D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.104.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2e:96:da:0d:45:b7:65:96:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8fd5bd89-d0fa-4d78-a364-3132644a18f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:bc:55:8d:01:9c:3a:ab:a0:12:c0:87:c9:
                    1f:19:8e:c7:40:56:e8:fd:49:b4:bb:e2:e4:16:d7:
                    3b:7f:00:9c:2b:5b:e0:43:d1:e5:e1:5d:6f:f5:c3:
                    f2:ba:19:70:6f:29:9d:ab:34:d0:56:02:df:88:e4:
                    82:ee:5a:54:81:69:6c:16:02:b3:87:fe:85:63:6b:
                    3e:92:85:ca:1b:b6:b1:0c:0c:fc:2d:14:10:05:88:
                    a9:74:10:41:9e:30:df:1d:ce:4e:4c:d5:ae:d4:cf:
                    c2:f1:9f:0e:a1:18:87:8d:21:92:6b:d2:12:cf:42:
                    e7:0f:db:d0:40:3e:8f:89:89:fc:c8:c4:ec:c1:57:
                    0a:ed:13:4c:4f:c0:f6:51:9f:dc:ab:35:84:1d:da:
                    8e:ba:9c:0e:bc:71:10:12:d2:14:9c:e9:28:28:c2:
                    c2:f6:4c:4b:e4:00:8d:88:a2:a0:ef:3e:31:c1:2d:
                    e5:bf:cb:8f:f3:ae:d4:36:2a:bf:3d:9a:77:ff:f1:
                    8c:87:ad:e9:26:72:09:76:8a:3e:bc:65:73:40:8d:
                    05:2b:23:90:08:66:a6:a8:d5:34:95:83:cf:0f:67:
                    c5:9a:95:f4:3d:92:05:7c:34:6f:d7:66:33:86:62:
                    ef:07:ee:9b:4b:7d:63:04:71:f2:49:c7:88:47:92:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:96:1B:E9:01:1F:8F:AB:FA:DF:04:61:54:BC:2B:10:7B:7D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:18:3a:4f:fe:df:54:27:2b:46:b0:2e:a2:b7:b8:50:6a:03:
         64:8a:4e:e4:3c:e5:e5:df:ad:b0:f3:a8:66:c6:74:33:88:cd:
         cd:5c:8b:44:94:dc:38:22:d5:ef:7f:39:63:ba:b0:86:95:72:
         cb:24:cb:fc:db:f2:8f:b6:2a:d7:62:f3:09:47:36:c6:2e:46:
         79:1c:7c:56:54:6b:03:17:e9:13:7c:af:1c:9b:6d:99:db:d4:
         53:9e:33:5c:1d:74:0d:4c:03:1f:91:73:1d:00:1f:e8:ca:7b:
         93:89:a7:01:53:f9:92:bb:6c:22:3e:0a:73:82:c3:79:09:5f:
         63:2b:a2:a7:a9:7e:67:28:f5:69:f4:10:53:48:ac:f2:22:cb:
         bd:c8:93:db:91:13:85:75:e0:08:00:4e:32:b2:30:9e:cf:54:
         30:11:3d:33:39:36:54:e6:f0:b6:77:fe:7a:7a:9e:7f:b2:00:
         73:f7:94:39:1c:ec:e1:c5:0c:bb:de:59:eb:56:e8:51:59:9e:
         f8:16:cb:e9:42:f4:27:41:27:a1:17:22:75:6f:35:a1:5d:70:
         e9:be:82:b3:2f:a1:1a:6c:9b:a0:62:51:f5:6f:85:35:eb:46:
         e5:61:d0:a4:a3:00:c4:58:ee:eb:78:fd:00:cc:4c:9c:05:79:
         f5:97:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:58 2025 by rpki-client