Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258cdab1-df0d-30ce-a553-0d8ebaf5c24f.roa
File:                     258cdab1-df0d-30ce-a553-0d8ebaf5c24f.roa (raw, json)
Hash identifier:          AzrM0QNBzW75M+ntTlif+gvSr7ZOetaqw97yPQNfYWU=
Subject key identifier:   36:4D:58:E9:B0:DB:C5:BA:BB:D0:50:50:C2:A4:C4:D0:61:11:E2:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D139E15284B44A6DBA57A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258cdab1-df0d-30ce-a553-0d8ebaf5c24f.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.96.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:39:e1:52:84:b4:4a:6d:ba:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=cfe47665-8804-457a-bd66-6076afac2860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:58:7b:44:7e:f4:0e:8a:cd:25:74:83:f5:
                    82:2b:cf:d2:0d:6d:2c:99:79:14:19:06:91:45:fe:
                    47:4b:7e:53:a6:1d:79:7e:f9:da:d1:71:a5:b5:4c:
                    b9:ff:9d:c1:a8:2b:0d:63:27:c3:6b:fc:e2:50:7f:
                    e0:34:4a:64:53:24:2c:67:49:f8:7e:6f:2e:66:3b:
                    62:9b:af:24:2b:a6:91:26:6f:12:8c:93:c9:2b:6c:
                    2e:84:e0:26:b0:56:ad:52:35:42:70:59:86:73:80:
                    fa:97:b7:5e:28:ae:9d:96:7a:66:7b:8e:af:d9:0c:
                    74:2a:7a:d9:14:58:6c:bf:19:93:89:f2:23:1d:e5:
                    8e:5c:ea:8e:11:69:d3:52:59:3c:84:08:5f:15:67:
                    a8:83:b9:ca:0b:76:57:f1:53:81:ef:68:7c:36:21:
                    e9:17:ad:97:54:b6:84:c9:f7:ad:3d:95:78:64:e7:
                    1c:5a:0f:7a:4c:8e:d3:7b:02:97:6d:5b:46:c9:a1:
                    23:55:0f:97:64:a6:96:d7:37:81:ad:ba:3e:bd:67:
                    95:ee:e0:95:f8:8e:26:da:75:e5:73:32:7d:97:ac:
                    fa:97:c6:12:ea:e4:ca:81:82:58:73:68:ca:2a:75:
                    ab:58:b1:58:a9:95:97:8c:75:21:4d:5c:69:5c:d4:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:58:E9:B0:DB:C5:BA:BB:D0:50:50:C2:A4:C4:D0:61:11:E2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258cdab1-df0d-30ce-a553-0d8ebaf5c24f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:43:bc:72:05:a5:15:45:d1:25:b8:55:18:4b:7f:da:77:
         ff:eb:2d:3c:90:b8:a4:dd:3c:0f:fd:21:2e:ad:b8:26:87:c3:
         25:f1:84:9c:3e:aa:b5:28:ec:c0:71:c2:ef:71:ab:f2:5b:76:
         01:76:aa:7e:3e:a0:25:e3:f6:96:42:dc:9f:ed:41:bd:6b:96:
         7a:91:b2:11:50:4a:3c:ea:25:c3:4d:a5:4b:9a:f8:71:a9:56:
         b9:c9:5b:97:41:c2:15:e2:a2:b9:cc:67:a0:4b:e2:69:7d:89:
         be:e9:6b:1c:df:2f:08:37:e7:28:c4:c1:a3:24:6c:63:7b:22:
         3c:39:22:78:57:b9:55:4a:c2:34:4b:2b:60:0f:a4:39:37:11:
         25:09:cc:71:41:bd:23:b1:43:9c:a2:4d:65:e4:94:c8:70:7f:
         1c:54:b4:9e:6f:25:b6:6f:16:84:54:55:86:4c:3b:3c:32:21:
         5d:49:d8:b8:05:f2:4c:cc:5c:02:d7:02:ec:44:3c:f2:24:8d:
         f0:28:a1:0e:f0:00:7b:28:f9:46:20:48:6c:7e:a6:43:8a:4b:
         f9:0d:65:f3:0c:04:78:3a:48:ab:43:77:18:52:35:08:59:f2:
         51:fb:b3:02:81:2a:f9:77:28:5b:ee:f6:b3:45:13:cd:c8:f6:
         ed:3b:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:19 2025 by rpki-client