Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de57bbb6-46f5-3f99-bbf0-671057d9a354.roa
File:                     de57bbb6-46f5-3f99-bbf0-671057d9a354.roa (raw, json)
Hash identifier:          93J3eEBBHrSAfTyiluLiphewgNMaW/eL+Bh4lxRIKno=
Subject key identifier:   95:40:48:DD:88:B0:61:52:4D:AA:16:B4:43:10:FA:BB:E5:4C:FC:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D13056A549025EF9910E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de57bbb6-46f5-3f99-bbf0-671057d9a354.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:30:56:a5:49:02:5e:f9:91:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8c1c8c01-b337-48c9-a97d-47e8a4cb3faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:84:35:fd:2e:ea:5d:70:82:3c:01:f4:69:
                    66:23:84:47:0f:0c:f0:89:90:f2:25:73:5a:aa:e3:
                    e0:4d:f8:03:ed:3a:4d:50:2b:1a:56:29:ad:e1:4e:
                    99:5e:50:fc:ba:80:15:ea:48:42:e6:9b:8b:da:9c:
                    49:79:73:9a:01:53:dd:65:aa:f0:8d:60:3b:a0:fd:
                    9c:d0:0e:a1:d2:22:e8:a3:39:22:e2:b0:6b:99:ae:
                    a9:d1:d4:d0:37:f2:4d:fd:b7:e6:7a:eb:d5:53:82:
                    24:4c:87:08:cb:34:65:b4:22:94:dc:0a:b7:59:5e:
                    8c:cb:ea:e8:3d:6b:11:2c:27:cb:32:4f:3d:e2:6b:
                    4f:68:ef:29:9c:f8:f4:22:04:fa:b7:a3:ef:15:3d:
                    ee:ef:7d:ca:ca:77:ba:5d:51:a4:31:dc:86:21:c5:
                    e5:4e:e3:7f:e3:76:12:51:67:be:1d:59:52:fb:0c:
                    d6:1a:7f:13:30:88:5f:4b:5d:f9:3b:37:21:9f:23:
                    95:da:4d:54:92:c6:59:93:04:f1:a4:3a:19:85:c2:
                    77:c4:c6:e5:53:bc:c7:ed:13:9a:9b:50:41:dc:64:
                    d8:fb:70:52:56:51:43:86:de:86:1a:d7:a4:10:e2:
                    24:ea:8b:29:fd:97:26:07:6c:9e:1e:c1:32:1f:33:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:40:48:DD:88:B0:61:52:4D:AA:16:B4:43:10:FA:BB:E5:4C:FC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de57bbb6-46f5-3f99-bbf0-671057d9a354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:75:87:6a:78:2a:c4:7e:35:e6:f6:81:d4:b4:28:de:7f:
         d1:7c:98:be:34:f5:58:24:d1:31:02:fe:d3:6f:d8:4f:bd:1e:
         f4:c8:36:cc:60:8d:64:1b:a9:b7:ea:a1:89:2b:77:ef:05:79:
         d4:81:7e:57:d3:55:3e:aa:5d:ad:76:01:43:b5:20:b2:4b:90:
         5f:18:72:7f:ec:d5:ed:ee:ef:5d:08:36:7d:2e:bf:f2:9d:14:
         f6:c3:d3:39:42:24:c5:e5:28:72:eb:b9:9b:a4:21:53:14:0d:
         c6:5c:c7:80:00:2b:4c:a2:e0:8f:83:a6:67:37:ea:a0:fa:5e:
         35:7e:08:45:99:4c:64:58:40:87:86:27:05:41:e9:9d:1c:73:
         2a:34:e8:2c:99:74:86:e4:b1:e2:bd:5d:29:6e:36:51:fb:03:
         f8:61:26:f5:ba:0a:20:3d:63:d8:88:bc:f4:b3:85:07:6d:54:
         b7:d4:5d:bf:58:59:fd:7b:01:72:37:6d:f7:f4:1c:62:68:b9:
         01:3a:b6:a5:1b:19:c9:23:21:af:5f:7f:c2:40:2d:1c:65:cf:
         52:a9:e9:a6:b0:14:d6:59:fd:2d:fc:34:f5:d8:84:ea:09:83:
         37:74:8e:46:e5:51:10:d2:18:da:cb:20:3a:0e:69:d2:a3:bc:
         ca:bd:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:10 2025 by rpki-client