Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/965d8392-b7d8-3bea-9d7d-44fe4c29b827.roa
File:                     965d8392-b7d8-3bea-9d7d-44fe4c29b827.roa (raw, json)
Hash identifier:          PIiz/6l6FxItJiVtEWufK5LGAkPT5g61VlqQJ+QCkfA=
Subject key identifier:   9A:86:AA:12:A8:35:CC:AD:FE:F5:C1:6E:A3:69:32:22:EE:F1:29:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A61F37107212C63435F75000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/965d8392-b7d8-3bea-9d7d-44fe4c29b827.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        72.103.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:37:10:72:12:c6:34:35:f7:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=30dcc010-2950-42f2-82f0-4f8b7023b01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:92:c9:8e:14:e5:2e:c9:30:23:e9:9d:1b:
                    ae:c6:c0:54:61:99:67:20:32:cc:87:1f:c0:a2:cd:
                    3e:97:6b:aa:99:22:bf:34:20:7d:a9:9b:3d:c0:12:
                    d5:67:ea:f4:ab:a4:9d:eb:c9:e7:15:03:d3:c5:ab:
                    64:58:e3:54:eb:9d:f2:0f:7e:0d:ca:a8:ae:c2:ac:
                    de:18:40:24:06:c9:c4:aa:8b:a6:b1:bf:9f:32:e6:
                    a4:77:dd:03:3d:e8:b4:d2:0c:77:9d:0b:e7:16:51:
                    38:99:b1:d7:59:5e:2f:5f:91:a8:22:f6:25:45:40:
                    60:8f:63:4b:bb:bd:cb:05:b4:94:f0:f2:b4:23:87:
                    79:78:3e:2f:ed:c7:e3:ba:49:96:99:16:f5:94:eb:
                    e6:f3:bf:3a:b0:ef:5f:6f:7d:3e:21:01:c8:bd:1c:
                    9e:ce:5c:73:8b:e8:0f:ab:f9:5f:d7:97:9e:19:ed:
                    51:08:79:87:05:48:00:b7:5d:32:d7:fb:e9:06:56:
                    49:cb:b1:62:3e:f4:f8:53:62:08:45:70:03:57:ab:
                    50:04:61:b7:2f:e1:3a:8e:b5:61:f1:b2:9f:89:5e:
                    9e:df:14:b7:ab:e4:da:c9:1b:4a:ee:57:77:9b:0f:
                    d1:50:df:8d:27:aa:f9:92:7b:ce:8b:fd:0e:34:a4:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:AA:12:A8:35:CC:AD:FE:F5:C1:6E:A3:69:32:22:EE:F1:29:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/965d8392-b7d8-3bea-9d7d-44fe4c29b827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:64:9b:17:d1:cf:f0:ca:58:74:ff:f1:96:6e:2b:24:1d:
         f0:bd:48:c6:6c:90:76:94:a4:58:39:ee:c6:e6:f8:35:25:5a:
         e2:31:f1:0a:8a:20:85:f5:fc:7f:64:58:7b:16:74:5d:5d:fa:
         8c:5c:fb:e3:1f:4c:7d:6f:73:65:69:25:a2:43:af:3f:33:e2:
         f3:74:b3:94:dd:38:18:bb:85:56:b2:66:83:6c:9f:51:51:28:
         b5:a3:9a:b7:59:8c:fd:d4:71:d9:51:0c:5b:45:1b:fc:fe:08:
         f2:40:6d:6d:c9:4a:35:ff:68:d4:0e:5f:88:71:a7:7c:68:1c:
         d8:ef:00:fa:ed:2b:7d:e1:c9:75:4a:ce:91:f0:37:ef:35:90:
         ae:8a:4c:2c:06:34:11:b8:d5:92:c3:0c:ed:bd:26:37:6a:80:
         d3:82:dd:fb:7a:75:6f:99:10:1f:76:bf:15:ad:07:ac:ba:35:
         d0:85:45:5a:b5:63:e4:71:ee:1b:fb:82:77:82:dd:85:db:23:
         b8:f2:8c:67:02:95:47:47:b0:45:b9:bb:42:ba:99:0f:1b:48:
         9c:7d:a9:00:07:d1:b3:14:06:be:06:99:a3:cb:9e:2b:47:7a:
         1a:6b:1c:3b:80:5c:42:79:b3:ac:aa:c5:bd:2f:94:93:50:1c:
         50:36:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:57:24 2025 by rpki-client