Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10c70791-47d9-358c-903d-c4ad78a9c31d.roa
File:                     10c70791-47d9-358c-903d-c4ad78a9c31d.roa (raw, json)
Hash identifier:          TxnscjkEL5ia9gUqZ9wNrGvXIfhQqY3cwI7oLFI2AK4=
Subject key identifier:   FE:D1:32:3A:4B:94:3F:BD:E5:CC:63:05:C3:97:6A:B4:65:5B:B1:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6B25BE756CA88D416BC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10c70791-47d9-358c-903d-c4ad78a9c31d.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b2:5b:e7:56:ca:88:d4:16:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=de2f6b4b-6d6d-4841-901f-7cc3befec2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:11:97:55:8b:fc:ae:22:fe:56:1f:d2:c2:
                    cb:1d:cf:eb:22:33:f1:68:ce:d2:6a:ec:8d:80:d0:
                    60:05:76:05:0a:59:0e:f5:49:de:63:7b:d6:1a:46:
                    d3:42:a5:8c:5c:da:9c:e5:83:c6:11:63:b4:ad:59:
                    3a:f1:be:c7:d2:b2:93:aa:dc:1c:03:e1:3f:01:17:
                    34:95:32:c6:9e:12:80:04:27:df:0e:ce:44:5e:20:
                    59:b2:a0:d4:7d:20:82:db:d9:57:16:4d:c4:6b:fd:
                    27:5f:b3:de:8f:8c:4c:6d:7e:d6:0b:62:ef:5d:42:
                    4e:fb:b9:a8:42:9b:ba:54:04:12:71:2c:75:36:83:
                    b2:05:53:6b:da:af:05:0e:7c:57:80:0f:a8:16:ef:
                    4b:24:4a:22:3f:dd:d2:9e:1e:af:8e:e5:d8:50:59:
                    6a:94:e3:10:8f:34:bf:5e:6e:36:b3:62:d9:d7:05:
                    f7:20:68:35:00:59:4d:35:36:a3:50:e8:c0:59:5a:
                    22:7e:0a:4c:68:c1:ef:62:27:43:8c:f2:42:e7:20:
                    c1:dd:71:7b:36:a9:03:5b:55:fd:9b:5b:49:73:10:
                    3f:11:c2:24:1f:64:25:36:9d:d3:2d:bd:79:24:4f:
                    8b:e4:a7:98:07:16:4b:32:7a:4f:76:f0:0c:fa:49:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:32:3A:4B:94:3F:BD:E5:CC:63:05:C3:97:6A:B4:65:5B:B1:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10c70791-47d9-358c-903d-c4ad78a9c31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:70:bd:0c:85:b2:85:ea:76:38:22:06:63:cc:eb:05:11:
         74:3a:3b:53:59:b3:d9:cb:0e:cb:d7:c5:46:ac:a5:f7:8b:7c:
         12:a6:f9:8f:49:43:a4:22:eb:29:18:34:27:56:f6:b3:af:49:
         fa:60:ea:c6:fe:79:9a:1e:8a:15:d4:32:aa:8f:45:20:40:a9:
         a8:92:bf:82:b1:70:0a:42:2c:51:cb:96:2f:91:7a:a2:cb:9f:
         1a:d5:52:28:8c:78:db:69:88:31:4d:5f:61:ff:30:0d:c5:69:
         61:e3:6f:e8:64:e4:b7:15:5b:e6:a9:b2:10:08:a1:96:ba:a9:
         0d:6c:b7:34:36:11:f7:bf:c6:fa:15:9d:4d:0c:a2:7c:24:5a:
         a5:71:d0:af:19:2a:7a:e8:61:64:b4:d4:43:d2:da:cd:f4:46:
         9e:cb:1a:06:58:a8:21:8c:28:dc:ae:7d:32:59:92:a5:e2:6a:
         4c:07:34:a2:de:a2:68:af:c9:49:f1:41:53:b4:06:3b:c2:73:
         22:bf:03:bb:33:0b:5e:f9:9b:cf:bf:cd:6d:cc:50:ae:4e:7f:
         e4:df:ea:9c:d7:3b:62:29:f7:3f:1c:47:5f:ec:bf:c2:b1:a1:
         18:f5:6b:63:da:f5:88:a4:b0:2c:fe:76:bc:a4:61:a6:cc:96:
         0e:06:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:18 2025 by rpki-client