Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
File:                     3c653d29-3ae2-334a-a734-b80722690ac3.roa (raw, json)
Hash identifier:          gm4zuJtFp/kzm0u6ZtCy5xx/MmLcK/E+wD6BdqkSMuE=
Subject key identifier:   5F:AB:FE:C6:80:2D:93:30:92:33:88:B2:61:66:5D:CC:75:65:56:FB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12E10F1F9A18A91FCDA20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.104.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2e:10:f1:f9:a1:8a:91:fc:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=b1a81055-3f0f-4fdb-bcbe-40d2570e6db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:fb:6f:ba:79:a8:06:ba:4f:50:c1:18:44:
                    64:db:a5:72:95:29:b9:7c:4b:99:23:96:96:4b:9e:
                    db:a8:f7:7d:4c:eb:e5:2c:8e:cd:2b:09:09:af:56:
                    ea:8e:7c:97:f9:8b:69:52:68:1c:27:56:c8:6c:21:
                    85:04:da:43:b4:58:ac:c2:21:9b:b8:48:88:31:88:
                    c9:78:f5:4b:24:f3:02:6d:36:a0:04:a0:aa:24:18:
                    6e:76:31:d0:1d:5a:35:89:ef:44:e4:0a:5c:f5:38:
                    bc:8f:4d:99:73:04:27:47:f5:94:a3:2d:cb:c7:d6:
                    22:7d:85:90:6a:d2:9b:12:14:b7:1e:ac:f5:75:ca:
                    2e:b2:16:f5:02:8e:66:fc:7b:62:b9:f9:b9:38:68:
                    d5:37:ab:5b:13:9c:d9:6a:8b:0f:43:77:db:e2:28:
                    bc:be:4d:e5:bb:51:d3:e6:76:c5:8d:54:12:7e:31:
                    e6:39:84:df:ff:e3:fb:af:70:1a:83:b0:eb:8e:58:
                    b0:65:83:95:12:a3:d6:cc:d1:d3:b2:dd:33:b7:63:
                    b9:cb:9d:07:2c:37:de:fa:34:07:c0:04:35:fe:95:
                    31:c3:6f:db:b2:41:05:38:bb:e2:9a:56:9e:9e:68:
                    63:b2:5c:95:9d:05:4b:b0:ce:26:9b:f3:f8:17:6e:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AB:FE:C6:80:2D:93:30:92:33:88:B2:61:66:5D:CC:75:65:56:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:47:37:1a:28:69:30:f0:cf:58:57:16:8a:b3:28:9f:cc:
         2d:d9:20:7f:03:f9:db:79:b0:16:03:05:ad:10:60:4a:b9:65:
         88:62:9c:1b:c1:bb:a5:e1:a1:68:2e:53:ca:ac:29:ff:3a:bc:
         e8:73:ed:16:a2:b3:04:77:14:ff:c5:f7:05:f1:7c:07:3a:7b:
         c0:df:b5:c1:ad:70:4d:f1:43:7b:59:ee:3b:e4:3e:08:9a:a0:
         d1:fa:82:d6:fd:08:95:d7:55:b0:bf:fe:9a:6b:64:fe:46:13:
         6e:21:d4:a1:59:11:05:72:6e:12:9c:26:d3:4f:df:21:c2:de:
         52:de:2a:d1:cc:64:89:80:2b:d8:8b:64:28:4f:09:e1:51:d9:
         6b:78:fd:7e:5e:3f:59:da:f2:6f:a6:ca:e1:0e:31:be:c3:a1:
         9e:14:f0:f1:de:cb:24:ed:ef:ac:91:57:bb:f0:13:7b:3c:fc:
         f3:70:e6:7f:d3:aa:90:84:67:ea:27:6c:61:e4:1d:46:7c:41:
         32:75:a1:b4:87:eb:09:24:f2:18:92:f1:a6:b9:fa:4b:d2:a4:
         7e:7b:9d:a9:f0:23:6e:95:5b:0c:d6:af:5d:d4:e7:9f:52:ed:
         03:c4:ad:63:bd:c8:8b:cb:f7:64:ac:2a:e6:b6:c8:1e:4c:e1:
         d5:ac:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:56 2025 by rpki-client