Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa
File:                     ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa (raw, json)
Hash identifier:          gzQUndb5N508LedMYMHP8ddEhjJ6eR93q0kWp4MBX8E=
Subject key identifier:   19:CE:0D:A3:62:00:D7:7E:EB:CF:05:7B:03:9B:ED:94:AC:82:63:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12E3175B90D0A41FC2EE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.104.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2e:31:75:b9:0d:0a:41:fc:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=dcefc10e-3ff1-4ced-881b-c80c195c28dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:eb:60:12:44:a2:4c:87:af:cf:bf:01:40:
                    71:da:12:f0:72:51:d5:f7:85:95:eb:ca:5a:63:79:
                    eb:88:ac:55:94:88:93:03:8f:4c:e0:0b:4e:20:0c:
                    a3:4e:a9:6f:5e:d0:31:a6:42:d0:94:af:24:da:a3:
                    7b:2b:42:49:01:86:f9:22:a3:4f:c3:18:43:36:39:
                    72:12:1a:bb:1c:03:2e:f3:ef:09:88:92:3d:9c:45:
                    b8:6e:65:bf:d6:61:c0:52:36:be:d5:52:0d:97:09:
                    a5:09:8e:c2:88:38:79:55:9a:b4:08:3b:13:4c:d9:
                    94:23:00:5f:f2:56:d5:99:bf:30:04:9a:41:ba:88:
                    04:ef:1e:b6:27:76:6b:96:0c:d5:c8:08:50:71:d8:
                    55:9c:0c:f4:6d:0c:fd:7f:19:6b:b3:16:07:ff:4a:
                    84:10:5f:3a:59:65:3b:99:b9:aa:ee:b9:c7:11:6d:
                    4e:9f:c0:cf:ac:db:d7:f4:0c:ad:30:fb:86:85:09:
                    e2:ee:7c:b9:c6:fd:a6:e9:67:3d:e5:0d:84:09:0a:
                    0a:a3:7c:45:1f:ce:76:76:d5:6a:e7:49:ea:04:74:
                    aa:9c:f6:34:57:4f:1a:4f:e1:8a:da:f6:ff:de:18:
                    8f:82:d0:e6:c3:4c:34:26:82:44:5d:fa:cd:9f:2c:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:0D:A3:62:00:D7:7E:EB:CF:05:7B:03:9B:ED:94:AC:82:63:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:80:ac:d8:e7:95:6d:19:78:9b:7f:43:1e:7f:ca:9d:da:a5:
         bc:f9:9b:ac:ef:d2:69:a8:f4:82:45:87:56:52:5d:b9:cd:15:
         04:7b:f5:c6:67:30:da:7f:0c:01:be:e0:55:e6:dd:98:46:84:
         fe:3f:ab:38:4c:09:c3:64:e7:3e:b0:cc:c2:d1:56:e3:88:4b:
         9e:07:11:59:01:52:1f:0e:a9:6a:75:00:77:5b:c1:d6:b0:b5:
         34:f8:cb:f4:1f:86:db:20:21:c9:36:94:30:7e:b2:a0:1b:5d:
         02:07:37:30:6b:3a:5e:e0:01:15:2d:b0:a8:a2:e2:78:7c:5a:
         3d:ea:fd:37:92:9f:f1:42:9a:35:fa:da:39:ca:97:66:39:c8:
         75:dc:b5:1e:a4:69:91:7c:41:46:e4:4e:cb:da:29:a6:e9:48:
         78:e4:75:5a:23:f6:7c:a1:b8:fe:d7:e4:b9:91:39:24:57:87:
         e1:15:9e:b7:0e:53:22:fa:8e:af:52:c6:ba:c0:a3:71:d8:08:
         20:31:7d:a1:b0:00:4b:a3:1a:c1:8f:85:cd:b3:7a:05:03:ad:
         6a:40:5e:08:58:42:3a:6d:e2:59:df:1c:02:5c:72:e1:59:9e:
         2c:81:c6:88:ec:35:72:a2:c2:6c:01:f3:48:86:27:78:d0:1b:
         e1:02:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:21:22 2025 by rpki-client