Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c733e021-e463-36a8-b207-52aa4b9eedee.roa
File:                     c733e021-e463-36a8-b207-52aa4b9eedee.roa (raw, json)
Hash identifier:          f5VF8kGMTOPrLJgWXP9T37jVRwVgvXKwvIbrP4bREfU=
Subject key identifier:   9D:80:99:75:52:A3:87:1F:ED:24:CF:43:EB:C8:C5:F8:91:63:17:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2ABA7E50484F6F752E5E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c733e021-e463-36a8-b207-52aa4b9eedee.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.97.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ba:7e:50:48:4f:6f:75:2e:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=a2e1d2bd-73ab-4edf-b883-f908b78dfd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:2d:70:73:6a:c7:48:9a:b5:28:bc:97:9a:
                    dc:d1:53:bf:49:c6:3d:5a:80:96:75:cc:3a:28:48:
                    83:8f:88:c5:b7:ba:9e:48:95:cf:b6:89:40:c3:e6:
                    43:16:45:3d:8a:37:04:1f:ca:f5:24:ff:ce:fd:b8:
                    be:41:b7:54:7b:f5:af:bb:65:17:42:4f:90:26:0e:
                    71:76:2f:c4:b2:c9:6d:3d:c0:23:a8:b8:44:64:34:
                    f4:ff:50:71:46:c4:a9:3a:61:65:13:8c:6d:b0:a6:
                    b1:fe:7b:46:7f:78:17:b2:c9:d1:2e:2f:31:be:cf:
                    00:ab:29:5c:53:55:71:77:7d:03:f8:01:c9:c6:fd:
                    67:a9:8a:52:02:7f:4a:6e:68:02:89:47:f2:16:8b:
                    fb:44:8b:73:03:db:57:56:80:b6:1c:c2:4f:77:04:
                    87:2d:1e:dc:96:64:d2:71:12:08:dc:7d:4f:91:26:
                    63:8c:7c:d5:9e:3b:5f:72:3a:71:de:9f:bf:52:24:
                    bb:a4:3a:90:b9:c8:c5:bb:07:46:9b:59:dc:ef:10:
                    a9:d0:3f:96:c5:66:b8:a2:9a:df:df:2a:b6:8f:8f:
                    52:57:ec:31:db:8f:c1:60:9a:24:00:80:39:b8:90:
                    75:8c:7b:56:1f:e3:d3:0b:38:36:6f:29:de:48:3d:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:99:75:52:A3:87:1F:ED:24:CF:43:EB:C8:C5:F8:91:63:17:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c733e021-e463-36a8-b207-52aa4b9eedee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:e5:12:16:02:af:32:68:80:e7:33:59:f2:50:89:ab:e0:
         17:e9:c3:56:df:ce:d5:cd:5d:12:d7:2f:a5:ac:bc:9e:c6:27:
         40:ae:0d:8b:46:64:5f:ea:22:09:b4:ab:30:5e:31:a3:2f:46:
         1d:c5:7a:98:48:b2:29:c4:d3:ec:98:52:4b:26:73:fc:09:2e:
         d3:02:e6:24:c2:7c:25:94:70:9e:05:c3:e9:1e:ec:68:4a:e4:
         e3:a9:77:ea:8c:e3:ba:bb:44:12:9a:06:da:42:c1:81:a1:56:
         de:87:fa:40:8f:d9:72:68:ba:08:9b:a2:c9:23:c5:1d:96:55:
         e0:e9:3e:fc:e9:8d:10:1e:9a:e1:e7:57:de:e8:e3:53:88:8c:
         06:59:01:60:86:a4:c3:76:a5:a1:e1:21:8d:a0:0a:ae:63:e7:
         eb:b5:b1:d3:17:08:fc:b8:4a:d5:fb:74:f5:34:0d:d8:e9:7f:
         97:d5:28:8b:4d:b5:45:d1:87:d6:b7:7c:a1:20:64:0b:94:91:
         7d:79:0f:1d:8b:6d:71:2b:f5:93:7c:d5:42:bc:1d:a9:b3:4c:
         84:66:f9:62:ea:42:56:4b:70:76:01:d9:81:bc:15:54:67:2d:
         71:bb:43:c7:5c:73:cd:b2:33:04:b6:7d:c7:20:0f:40:83:e4:
         54:de:7c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:52:14 2025 by rpki-client