Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d88dc63-854e-34dc-8d79-5fe5d8f10728.roa
File:                     5d88dc63-854e-34dc-8d79-5fe5d8f10728.roa (raw, json)
Hash identifier:          t9g3qvU4v0qIOg0dEifsxQmUAo3n/R/QDhHqf7BN4KE=
Subject key identifier:   5B:13:6E:00:7B:E7:2A:A6:03:1C:17:C6:0B:AE:5C:69:9E:17:39:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12E612AA033FC0823CF50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d88dc63-854e-34dc-8d79-5fe5d8f10728.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.104.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2e:61:2a:a0:33:fc:08:23:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=40d45897-65fd-4027-84d7-24f8eff11f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ec:b3:16:40:e5:0a:46:ab:8d:d2:f6:56:61:
                    cb:ad:2d:f3:a4:7b:96:d1:2d:ce:f5:fc:6c:d5:fb:
                    b0:99:ef:f4:cb:24:eb:cc:00:d2:28:9c:74:b6:1c:
                    14:e8:0b:57:d7:34:e3:a5:99:e8:a5:d5:c0:00:e5:
                    33:07:06:8c:30:73:9e:79:52:6a:cf:1e:4f:32:e1:
                    dd:53:ce:1a:ca:7b:26:6d:24:d5:1b:ce:f7:fc:4e:
                    45:5c:39:c2:db:90:5a:39:c1:3a:4b:1d:f1:f4:dc:
                    44:e1:54:ae:37:5d:90:64:40:b6:3c:c7:b7:8d:2d:
                    7b:d3:a1:74:81:55:f5:d6:0b:74:48:94:25:79:db:
                    20:3b:d7:08:ab:7c:88:2f:b9:25:4c:63:7b:e8:eb:
                    96:e6:f7:be:9c:b2:8f:30:84:b2:bb:13:45:a2:de:
                    b7:8a:a5:75:3b:21:2f:98:05:c0:70:0b:da:39:cc:
                    e3:8e:06:af:2b:4d:ae:0a:79:a3:df:df:40:5a:b5:
                    2d:7a:dc:79:98:0e:17:64:9a:cb:11:4b:6e:8e:14:
                    91:ad:d7:1b:47:db:43:ab:d8:b5:4f:61:0f:5a:f3:
                    36:1e:26:62:15:a1:ea:47:ee:4f:cb:88:e0:f8:2a:
                    3d:62:27:2a:28:04:1f:69:22:5e:d6:0a:b6:c1:39:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:13:6E:00:7B:E7:2A:A6:03:1C:17:C6:0B:AE:5C:69:9E:17:39:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d88dc63-854e-34dc-8d79-5fe5d8f10728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:dc:cd:76:b7:5a:97:a7:bd:1e:e3:11:52:3f:ea:5f:1a:
         28:2f:81:56:af:ec:b4:2d:ed:ab:0f:13:24:18:52:00:55:b5:
         f1:67:31:15:2b:46:bc:9b:0b:a5:1e:b4:05:15:99:34:3e:3a:
         7c:b5:6c:64:0d:83:1f:48:82:42:c5:5a:d6:5b:b1:37:51:4f:
         75:e9:6b:e9:b6:91:d3:0f:b0:aa:67:3b:a9:be:5a:56:07:2e:
         2d:88:ab:55:43:40:b4:a0:bc:ec:e5:dd:29:5a:a7:92:13:ba:
         3d:5c:d8:49:7c:43:ba:8f:a1:f1:ca:63:04:73:f1:31:5d:bb:
         ca:4b:14:1a:fb:db:2f:c9:84:92:60:a9:a1:36:3d:d9:84:76:
         53:95:41:0d:1b:e8:0f:79:8b:6c:dc:cc:1e:f0:86:3e:3e:f4:
         ca:b6:df:07:cd:fa:e7:be:18:19:4b:70:23:7e:17:70:75:f1:
         4e:3e:0c:35:57:90:35:34:1c:b9:51:aa:21:05:ce:62:6c:ec:
         a5:2d:c8:fc:94:48:d4:e7:c5:95:da:39:2c:8e:ed:5b:ea:c8:
         ed:c1:19:a2:67:e5:8a:b6:48:aa:41:06:85:a9:27:7f:7c:5e:
         4f:72:1c:c0:5a:8e:d5:07:3d:f1:20:27:0f:68:a0:02:a1:11:
         ed:74:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:23 2025 by rpki-client