Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
File:                     1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa (raw, json)
Hash identifier:          cFWZXgiDQzQxA7FcpRUZy37RRpr5pnQ0blO3fGqOQ6k=
Subject key identifier:   CA:84:84:98:96:81:1F:F3:00:A4:EE:1B:69:66:06:E1:AD:C1:6B:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F7152BB6E116CB70597B0F70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.104.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:2b:b6:e1:16:cb:70:59:7b:0f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=5803afe7-d2b8-412e-8a5a-676d2d25c900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:e4:d4:b4:90:92:4f:98:ba:fc:01:94:ec:
                    22:cc:5a:a0:87:6a:be:e3:4c:2f:ba:ac:77:1c:57:
                    e5:06:b6:72:50:15:c3:ac:ee:ad:2a:29:ac:82:0d:
                    97:d6:8a:f5:c9:18:65:41:35:b0:4c:62:5b:54:3d:
                    27:29:c2:31:53:87:25:47:b2:fd:d3:ea:c7:d3:b5:
                    11:4b:90:ca:ce:d8:ba:e2:66:7b:8a:6a:61:0e:16:
                    1d:f1:c8:6d:4a:ea:df:f7:a0:b2:4e:32:7f:21:10:
                    70:bc:98:55:2e:c8:e8:74:91:67:b8:6d:0f:83:41:
                    a9:b5:4b:c6:24:53:9c:25:9e:02:68:20:33:1d:01:
                    33:0e:ba:90:41:5f:dd:87:e9:97:06:5a:fc:b8:23:
                    15:e3:9a:2e:1f:2c:9d:49:9b:53:7a:2f:b4:17:0a:
                    77:f4:49:5f:97:9c:a8:25:47:62:8d:2f:d2:6f:7a:
                    43:0d:e5:bc:1f:b6:0e:07:ec:05:43:e7:2c:6c:b4:
                    09:9c:72:51:f2:80:b1:83:3e:9f:01:02:14:9f:f7:
                    a2:bf:e9:f2:ed:72:95:22:cc:44:38:08:0e:79:c9:
                    8c:3e:f9:7c:7a:4f:5d:40:23:63:90:b8:af:28:7b:
                    c5:ab:d4:d3:92:e7:6f:6c:2b:0e:22:49:ee:63:d4:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:84:98:96:81:1F:F3:00:A4:EE:1B:69:66:06:E1:AD:C1:6B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7a:af:93:39:6b:b3:f5:ad:8f:e0:10:ee:fb:b5:46:79:b4:
         43:10:3f:64:88:e0:03:f7:f8:04:2c:4e:bf:16:fe:9a:0c:fa:
         ac:f7:34:55:98:e6:92:4f:2e:70:43:b2:0d:94:e2:9d:30:ad:
         19:85:de:03:6f:8f:7b:62:5e:9b:35:9e:37:9f:96:c6:4b:90:
         19:a6:e2:52:9e:71:f5:e1:33:cd:c2:80:8e:af:57:cc:99:8a:
         7d:d3:d7:74:78:b2:15:48:04:c6:d5:8e:fc:a2:7a:ef:17:2c:
         a4:78:52:e3:1e:66:c4:df:a1:e5:ee:67:de:65:3b:32:b1:e5:
         12:37:6f:76:ab:94:95:69:99:c2:ad:33:d8:4f:23:6d:ea:d9:
         d8:92:a8:09:04:5b:da:71:ee:37:b4:a3:36:1f:2a:21:f7:cd:
         a0:8c:33:08:7d:a4:df:d4:f6:bc:2c:86:d3:d3:a1:ad:24:33:
         83:49:8c:ce:f6:2c:0d:56:9e:22:dc:8f:cd:6e:cb:24:6b:fc:
         f0:c7:ed:93:a0:a9:c1:eb:b3:15:d9:08:85:f3:45:0a:f4:53:
         5c:3b:24:6f:18:c4:a2:ff:7b:dc:c1:f5:45:61:a5:33:e8:c4:
         00:2a:b5:e1:14:5c:0e:45:2c:ec:a1:4c:07:49:0b:0f:17:7a:
         96:51:2c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:56 2025 by rpki-client