Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a196403-d98a-36c7-a21c-5576705f3aa2.roa
File:                     0a196403-d98a-36c7-a21c-5576705f3aa2.roa (raw, json)
Hash identifier:          csqnHmXaaat8fm4pg6v8Yv1bG20Jq8L1541qWIAFXDg=
Subject key identifier:   C6:E6:55:8D:3D:90:0A:D0:FD:35:F9:6C:7F:CE:EB:2E:F2:4B:EB:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6BF510295BBE6A6499BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a196403-d98a-36c7-a21c-5576705f3aa2.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.107.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:bf:51:02:95:bb:e6:a6:49:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=1f2b07a1-45fe-47d9-be8d-18bab8dd66c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:e6:90:6f:c4:75:fa:0e:70:d1:b3:b0:68:
                    c9:ec:9d:97:57:dd:60:c5:f0:e0:75:c5:2b:53:63:
                    47:84:80:61:04:d1:4a:ea:9d:e0:9a:f3:63:31:0e:
                    00:dc:82:25:93:b1:d4:e5:ca:b3:d4:0d:c3:85:84:
                    8c:78:82:5e:30:ed:2b:75:77:49:c8:ed:df:4b:7f:
                    31:49:54:ec:e9:45:0a:7a:5a:16:0b:49:36:8f:c6:
                    1d:12:65:0a:11:b9:7d:b6:87:77:7e:9e:11:30:1a:
                    be:15:f3:ad:a4:06:39:a3:9a:fb:f2:84:fa:db:31:
                    1b:3a:8f:ae:0d:35:47:76:a8:f5:54:83:00:0e:cd:
                    7d:a8:b2:61:17:2f:6b:ba:bc:1c:ac:79:52:80:eb:
                    a6:fd:d5:29:ee:a7:0e:d6:c0:f6:3d:15:12:11:36:
                    9e:f9:65:30:db:dc:c8:1d:15:b4:19:e1:84:9e:33:
                    ee:cb:2d:4b:3e:2c:37:cb:3f:b8:06:79:e7:f1:b4:
                    71:cd:c7:b7:b7:4a:70:30:cb:70:1a:25:ed:24:92:
                    f8:b4:51:a5:06:60:6f:07:6a:d3:73:9b:dc:b7:c6:
                    08:07:8c:1e:e4:a8:4f:b8:b0:98:f0:aa:23:5d:ae:
                    88:9d:8b:92:43:c4:e0:1b:a0:5e:8b:0d:aa:21:b0:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:55:8D:3D:90:0A:D0:FD:35:F9:6C:7F:CE:EB:2E:F2:4B:EB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a196403-d98a-36c7-a21c-5576705f3aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:21:11:f0:21:1a:bd:d3:70:20:06:09:56:e1:3f:ae:4c:21:
         07:95:81:02:08:45:cc:a6:36:9d:d5:c7:5f:4e:d0:50:7f:c7:
         64:8e:6c:de:92:34:9f:b9:52:67:0d:9e:19:8d:d0:24:28:f6:
         15:01:e2:60:a2:9a:72:2e:46:b1:a6:55:f8:7f:1f:fa:e2:c2:
         0e:db:99:01:31:fa:71:c2:ac:55:69:fb:13:ea:00:b3:7c:3d:
         93:82:ad:23:85:33:7a:0a:70:b0:23:80:28:41:40:62:20:53:
         61:6b:db:12:42:00:5a:21:66:74:89:e6:68:e0:11:be:a5:ee:
         5e:2d:bc:71:67:09:8f:ed:1a:ad:83:60:20:42:96:c2:b1:54:
         fa:c8:a4:52:a8:65:6a:1e:cf:f5:4d:95:e8:e1:32:22:37:5a:
         e2:e0:82:5a:d0:4f:e7:67:1b:f8:29:07:62:ca:11:ad:bb:58:
         56:e4:d1:b3:33:82:4f:04:97:5f:f1:b4:2e:22:bb:5c:12:ee:
         51:c7:18:c6:83:e5:7a:04:99:8b:40:85:3a:ca:3b:c3:55:87:
         62:06:81:6f:52:bd:ca:f5:33:e8:44:cf:ed:4b:06:10:6f:26:
         91:4f:5b:06:01:fa:19:f4:f5:b5:4c:a9:12:28:9d:96:0b:f2:
         8d:df:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:20 2025 by rpki-client