Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85e14498-b212-37db-a3de-12d6098fadb1.roa
File:                     85e14498-b212-37db-a3de-12d6098fadb1.roa (raw, json)
Hash identifier:          BSyGQGhYZ0m8pqppLAd3vndyXRbFDQ8zggQjIVCFCvM=
Subject key identifier:   B1:10:C3:BA:A5:79:D5:56:36:E9:7A:00:BA:6A:55:EF:52:65:28:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B41819B99066B332BCA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85e14498-b212-37db-a3de-12d6098fadb1.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     0
IP address blocks:        72.2.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:41:81:9b:99:06:6b:33:2b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f59bf16a-7ba0-43d8-aa0c-ed755865c87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:62:05:7b:b2:01:a7:2e:05:ab:2b:0b:42:
                    e3:ec:16:38:6d:30:0f:69:47:ad:bc:6e:d6:51:95:
                    ca:e5:92:e9:e7:d1:99:8d:c0:1b:0b:39:92:a9:6a:
                    71:fa:14:61:6d:16:1e:35:3d:37:52:69:e5:32:de:
                    ab:ea:85:04:b6:6c:d5:ae:6d:f5:85:81:d6:db:c8:
                    25:28:53:2f:51:d4:4b:da:7a:45:65:d6:bf:dc:22:
                    28:9b:be:6c:6b:db:78:9e:80:9d:30:ea:b0:8a:66:
                    06:d1:25:19:bf:c6:b9:ea:e4:34:6c:7b:73:d3:07:
                    35:87:b4:60:b1:67:f1:7d:7a:ff:47:4a:0a:cd:1f:
                    eb:76:f5:c6:5d:f3:46:23:f0:b2:2c:ac:c2:dd:27:
                    06:a6:3c:ee:b6:9f:42:0b:e9:e3:cc:50:4f:b7:94:
                    9e:30:cb:ec:62:be:2e:34:50:e5:14:6d:91:03:c3:
                    61:9d:8a:30:c0:16:97:96:c2:53:03:7c:7e:e7:cf:
                    07:60:53:fd:22:ce:56:98:81:80:c7:38:72:79:1a:
                    57:76:78:bc:d5:3e:8d:9d:85:df:dc:58:e8:7a:8c:
                    97:4a:49:e2:7b:43:92:d1:f2:35:4e:f9:a1:4f:73:
                    2b:08:ce:45:c0:08:f7:44:19:c3:32:4d:e5:a8:60:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:10:C3:BA:A5:79:D5:56:36:E9:7A:00:BA:6A:55:EF:52:65:28:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85e14498-b212-37db-a3de-12d6098fadb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.2.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:70:c1:4a:f8:05:56:92:97:40:ae:90:96:34:af:61:2b:
         95:45:1d:39:53:2f:2a:06:a4:54:c5:1d:15:54:59:31:1e:87:
         96:17:37:b4:dc:30:14:c4:e1:bb:b6:61:8a:38:64:18:30:3b:
         89:9c:9b:da:df:3c:03:0c:34:71:15:34:a4:88:26:3a:55:9f:
         fa:14:52:cf:88:6f:cd:5e:f2:0a:cc:81:1a:3d:b2:2a:01:84:
         b6:92:4b:bb:de:e1:20:0d:ff:da:5b:4f:35:cd:fa:5c:f6:c7:
         1d:88:79:5f:7f:73:2f:df:8c:34:96:d7:c8:ca:c3:7b:63:6f:
         20:f6:37:29:2c:ad:63:10:88:92:12:85:7a:d8:cb:12:ab:10:
         04:d8:d3:48:b9:af:f7:2d:eb:04:cc:5a:cd:9e:53:b9:e8:f9:
         05:b3:ef:98:08:68:0e:ba:cc:73:b7:b0:11:af:38:e2:e8:aa:
         88:93:34:83:d6:dc:e3:79:62:26:e5:93:a5:13:35:4c:9a:6d:
         8e:98:6b:d9:61:57:d3:c8:34:df:45:cc:19:7f:f9:dd:21:65:
         9b:f7:39:a1:f0:83:08:27:a5:c5:9e:0a:5d:03:b4:b5:f9:75:
         7c:16:ac:97:63:3d:5c:ac:af:cd:62:d1:bd:74:b8:d1:84:99:
         bf:18:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:19:13 2025 by rpki-client