Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0421c8ad-c56e-38c7-8cc0-743e398945a3.roa
File:                     0421c8ad-c56e-38c7-8cc0-743e398945a3.roa (raw, json)
Hash identifier:          CSycJjKZkVfutMZ5LaT3n/jPMEtjlZlSvW9m+GMmQXQ=
Subject key identifier:   DB:70:24:64:CB:AD:EE:20:03:A8:8F:71:2B:46:7D:D7:3A:FB:EC:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6ADFA4AC59D417F9829C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0421c8ad-c56e-38c7-8cc0-743e398945a3.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ad:fa:4a:c5:9d:41:7f:98:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=532d28e0-d759-4b5b-96b5-58078f91b23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:d8:ad:76:b6:f3:66:32:c0:e8:5a:09:23:
                    d8:66:d3:25:0e:e0:1f:eb:d6:09:7d:48:c5:6c:bb:
                    8b:1c:b6:e1:d3:5f:03:76:76:c4:0a:5b:f4:67:89:
                    22:b1:a9:d3:77:95:ce:42:85:ad:4d:87:3c:68:58:
                    53:76:6d:f0:c9:65:76:34:77:b0:0c:4b:cf:f3:f5:
                    f9:7c:fc:79:cb:12:1a:68:1c:b2:2b:15:26:af:2d:
                    db:14:b9:be:6c:3b:f0:5a:32:d8:e4:6d:1c:84:47:
                    65:3b:6b:73:7b:c0:fc:eb:b9:2a:f4:55:24:02:96:
                    27:ca:27:9c:ae:6c:2d:18:4a:17:2b:35:01:06:f3:
                    de:1b:1b:a6:8b:77:75:9a:b2:71:56:f5:3c:92:f6:
                    23:db:73:f8:eb:29:db:30:6e:b0:fd:8b:54:54:cd:
                    77:01:f6:a8:05:c6:64:36:18:d3:a0:55:f4:c1:d5:
                    d1:46:45:7d:95:e7:0a:38:83:fe:e2:3d:31:1f:2c:
                    e5:57:ee:d5:36:d1:fd:47:32:cc:e3:e9:de:61:15:
                    3a:a2:0f:2c:c8:a9:0d:53:7b:ae:58:e1:1f:c5:e3:
                    74:f5:23:51:30:f0:73:6f:26:15:5c:58:b6:9a:85:
                    b1:82:0e:a0:49:80:4f:fe:d3:07:3d:0f:a8:18:c1:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:24:64:CB:AD:EE:20:03:A8:8F:71:2B:46:7D:D7:3A:FB:EC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0421c8ad-c56e-38c7-8cc0-743e398945a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:a6:fa:b6:d3:39:0c:7e:5f:18:a4:75:a6:06:86:14:19:
         24:4c:74:bd:ac:32:da:21:1d:9c:69:d7:e9:57:8c:53:37:8f:
         0d:8f:40:59:12:c3:96:4c:67:86:64:a2:d6:60:c9:91:56:8f:
         b1:46:a4:f2:16:4c:3e:c7:f1:82:45:5f:be:94:24:88:27:c7:
         a9:05:5a:47:0e:67:8e:9b:65:d2:9b:f2:16:01:4a:d1:91:65:
         d3:99:77:6f:84:7f:8d:33:fe:09:f9:5a:e3:89:14:9f:b1:6b:
         7f:a1:e6:48:d6:a6:79:74:4c:bc:6a:e0:e5:12:c6:e7:54:97:
         ed:3f:b6:0f:df:4d:c2:90:63:5e:22:f2:13:ef:10:2c:d7:3f:
         2b:e9:cc:9a:99:79:86:be:c1:0b:0e:92:16:3f:91:46:b0:05:
         53:cf:35:94:70:ac:10:1c:9b:c6:18:28:81:74:db:83:cd:0f:
         ff:b2:8e:9a:f1:3f:4d:ac:7a:b2:20:59:02:3a:59:3a:3b:27:
         14:f5:6a:32:d7:2d:1d:05:bb:0e:4e:69:21:df:99:6d:86:c4:
         95:bc:a8:51:29:fb:81:cd:39:5c:12:65:4a:f5:57:78:c4:bd:
         a3:7e:a1:b1:f7:98:2f:4c:54:07:60:85:3c:99:b7:c6:af:c8:
         20:0d:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:21 2025 by rpki-client