Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c1cbf91-5d09-3927-94d0-437179f1f149.roa
File:                     1c1cbf91-5d09-3927-94d0-437179f1f149.roa (raw, json)
Hash identifier:          SeljcRDWiE21aX6wjgw0xwqir3aV7it5TtBPFOdISvE=
Subject key identifier:   17:D9:08:09:BA:9D:DD:9D:DC:CF:D0:C4:F2:04:D2:32:5B:8A:BA:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6BA52BB93E627447ECC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c1cbf91-5d09-3927-94d0-437179f1f149.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.106.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ba:52:bb:93:e6:27:44:7e:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=7b1b34e6-3e1d-40ff-a44e-4d3a9f85f8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:79:83:ea:e5:71:05:ae:a2:47:ac:71:1d:
                    0d:de:1c:f9:35:1f:00:83:25:6f:30:da:b6:e3:45:
                    58:e6:b8:75:6a:03:39:aa:4f:28:83:23:99:a1:e6:
                    aa:b0:99:05:43:db:c3:8c:d7:b1:54:80:b8:41:f1:
                    fd:b5:45:8a:5f:71:b5:60:ba:8c:87:71:65:9a:88:
                    3c:a1:d1:69:63:27:6c:cd:ca:6e:f5:4a:68:b1:cd:
                    9b:e1:dc:f6:ba:6b:e3:e3:ef:d3:d7:ad:7f:56:df:
                    80:60:77:e2:bc:f1:41:9f:2e:a3:ef:3f:db:55:0f:
                    a9:de:b9:e0:4d:da:49:7e:25:dc:37:50:49:b9:04:
                    bd:f7:7b:24:d1:48:86:c5:cd:57:cd:90:ee:27:0a:
                    8a:20:b9:b3:2c:b1:2e:b9:87:00:5a:7b:61:19:b8:
                    7f:1f:93:3e:f6:9b:4e:6e:7d:f8:f4:ba:86:57:b7:
                    55:eb:c0:68:33:7e:fd:f8:78:52:89:bc:7f:cb:76:
                    2b:04:30:fe:34:6d:2a:79:f7:80:1d:02:4d:cc:ab:
                    78:10:be:9b:48:d3:57:c2:2c:e0:34:16:4e:a8:75:
                    d2:f9:de:f8:ea:5f:19:fd:93:a6:a7:5f:0e:e5:b9:
                    77:56:89:ae:a5:4d:1d:27:9e:f4:49:fb:f0:36:ec:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D9:08:09:BA:9D:DD:9D:DC:CF:D0:C4:F2:04:D2:32:5B:8A:BA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c1cbf91-5d09-3927-94d0-437179f1f149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:33:0c:1c:69:9c:cd:03:6b:e6:58:2a:93:ad:55:4b:ff:b4:
         69:ef:1e:c1:d9:c0:24:79:bb:c6:5e:2e:8f:2e:60:27:2d:29:
         54:84:41:78:d2:92:36:4a:76:ae:57:a6:49:cc:ce:71:98:cc:
         5e:9c:b6:7f:55:8d:c8:da:c5:d6:ba:b9:b8:f4:3a:9c:1f:27:
         11:f3:0c:60:bf:b4:13:b6:2f:01:0d:00:af:ba:b8:05:2c:a7:
         1e:2d:6e:75:f5:bd:77:e4:f6:1c:e0:53:5a:d3:dd:14:ee:d9:
         46:bc:7a:3c:a4:94:76:ec:f8:6b:13:1e:11:4f:2d:11:c1:c5:
         cd:38:89:d6:df:44:7f:81:f5:01:2e:ad:44:5c:91:1b:b2:0a:
         d5:82:70:3a:2b:8d:28:c3:57:ae:dc:2e:4e:da:ee:2f:5b:cd:
         a3:04:4d:0f:0c:24:ca:3b:46:14:4e:03:c8:e6:ea:a5:b3:45:
         a5:02:e8:fe:ec:7c:ff:ae:5f:34:72:04:08:5e:82:a9:fe:96:
         4f:00:c1:a8:5f:29:86:25:c0:91:79:b6:a9:db:c6:0f:1c:9e:
         c9:07:1d:70:8b:52:e8:8a:2a:c3:fc:46:5a:03:3f:54:a3:82:
         73:25:fa:17:f6:77:b0:6b:81:6d:cf:b4:07:28:23:7d:7c:ec:
         46:9f:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:17 2025 by rpki-client