Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb9d7b6f-a91f-3678-a380-b1e8291e2d61.roa
File:                     bb9d7b6f-a91f-3678-a380-b1e8291e2d61.roa (raw, json)
Hash identifier:          ISaiswtY/f6jdSDYYf9BqRd74TrOr/cIV0rzhXiF4KA=
Subject key identifier:   C4:54:01:68:7E:0C:50:67:4D:3C:69:6D:0D:11:29:71:B6:75:78:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12CB465C140A8E341DC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb9d7b6f-a91f-3678-a380-b1e8291e2d61.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2c:b4:65:c1:40:a8:e3:41:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=5f33da4d-cba6-4af3-9ada-4c69bfb677f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:85:7e:84:41:27:a3:16:d0:2c:c0:3b:c0:
                    3c:c4:79:10:83:66:4b:7b:e6:c9:e4:85:cc:8e:91:
                    68:0c:44:69:9e:4c:70:b0:c6:4e:01:c5:81:0b:36:
                    ce:ed:78:44:48:dc:d0:89:e1:60:45:db:fa:74:c8:
                    6f:ed:38:6f:40:00:47:72:52:f6:6c:ca:36:38:fd:
                    2f:e8:2b:cc:b1:fd:71:6d:94:60:af:d1:10:d2:0f:
                    bd:ac:ef:86:a2:b3:f2:bf:52:c9:31:e3:a4:14:f5:
                    f8:a2:b0:12:2b:9e:10:01:46:a7:16:05:1b:5d:2d:
                    cc:a1:0e:b7:e4:ff:bf:ec:56:6c:64:6c:7c:c8:8d:
                    61:6b:17:7a:58:ee:8c:28:62:d7:46:21:1b:f9:7c:
                    c4:58:1f:c3:a5:c3:1e:eb:f4:85:cc:43:32:f9:52:
                    4b:a2:20:70:e0:e8:d7:0e:9a:0a:30:f5:f8:0a:93:
                    ca:8b:5b:4b:ef:38:a9:87:db:9b:44:36:db:18:37:
                    ef:6f:00:e8:b3:33:7e:44:54:4e:75:06:71:56:70:
                    9a:96:67:9d:ad:e8:63:78:53:5f:15:9b:d8:ab:4c:
                    9e:0d:f4:05:55:1f:f3:00:15:da:e1:14:4b:9d:09:
                    81:6b:18:1e:34:b5:1e:96:27:47:7b:08:96:0d:2d:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:01:68:7E:0C:50:67:4D:3C:69:6D:0D:11:29:71:B6:75:78:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb9d7b6f-a91f-3678-a380-b1e8291e2d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:15:2d:3d:1d:06:53:de:e7:22:4d:f9:3a:9d:c9:f9:50:
         9e:15:c9:2e:b5:b0:6e:6c:de:e8:7e:06:ff:34:a9:78:62:9e:
         09:46:af:39:0a:78:f1:ef:1b:f2:8e:aa:b0:6f:c2:85:29:4a:
         36:a0:c4:c3:ba:2e:fa:e5:e3:9d:c6:ca:d2:9a:2f:21:99:8e:
         fc:fb:67:b4:2c:ff:60:70:87:02:9b:68:96:8b:f0:eb:a7:35:
         b2:d5:e4:fb:15:85:6f:52:b9:af:1f:c6:6e:8f:03:08:8a:64:
         6f:02:4b:67:0c:0c:00:6d:36:15:83:ba:87:cf:17:3b:6f:23:
         92:5e:4b:b5:c6:a9:a9:6b:28:ca:a3:27:c7:81:0d:02:96:45:
         1c:20:a3:3e:0a:65:55:c9:3e:71:62:ad:25:ec:78:be:0f:d6:
         f9:3f:c4:07:af:80:ba:29:be:7e:cc:0b:50:cc:b8:e1:1f:93:
         8f:7f:de:bc:d2:b9:87:46:dd:0e:84:a5:ed:d6:b5:7c:ec:43:
         0e:01:75:05:95:ee:a4:f1:86:09:06:8b:22:ff:ce:3e:84:0c:
         c2:c4:2a:7b:41:d6:a4:ac:ea:ea:85:21:d3:43:42:64:1b:ce:
         c3:64:60:95:88:71:e9:8c:7d:33:db:58:fe:8a:f1:9e:ca:36:
         32:13:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:16 2025 by rpki-client