Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
File:                     37671870-1971-3272-bf72-f2be3bd65b13.roa (raw, json)
Hash identifier:          dJhaDVig2Ein2Sflt4zYPJ6vkWt0JUdF1fxRlaOxlX8=
Subject key identifier:   9C:84:F9:B2:D1:53:1C:E4:31:37:08:2F:99:46:42:88:21:84:85:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6B9CCD5D788F926EC9B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b9:cc:d5:d7:88:f9:26:ec:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=8b5aa988-70ea-44a0-94e8-2958f7340f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:21:04:35:8c:59:16:c9:43:35:e6:4b:da:
                    d1:d5:9b:50:14:3c:b3:db:4c:78:b1:83:21:16:dd:
                    b8:8e:04:6c:fa:4e:cf:09:b8:28:81:99:3a:73:41:
                    03:a2:97:87:a6:84:0a:66:32:f7:ec:57:43:94:48:
                    51:c6:48:a8:d8:a4:38:dd:8c:8e:37:73:c3:e9:c7:
                    8a:c1:8c:0c:6d:f4:62:9f:79:23:9c:3e:74:14:95:
                    18:e7:81:07:f5:6f:58:c0:24:3e:cb:b3:6d:27:78:
                    74:87:68:c1:4a:8d:a4:14:05:91:17:78:a5:55:04:
                    96:5b:8c:6d:e9:2a:3d:16:49:f9:35:c6:05:e5:fa:
                    46:ee:dc:c1:2a:5c:b9:06:b8:fd:4b:2f:85:01:03:
                    85:d1:8e:92:14:cf:b1:2b:fa:b7:ec:ba:63:9b:b7:
                    ab:48:6b:66:90:1a:c6:08:5d:65:40:10:ea:35:c4:
                    cc:74:10:5f:27:00:c8:c3:9f:fb:5f:ab:85:90:81:
                    46:b5:fa:13:d2:5e:2b:da:63:18:2b:5b:38:09:d7:
                    bd:f9:a7:93:47:ac:03:f4:00:de:7a:f4:eb:1b:70:
                    82:8a:43:92:32:f3:0f:8f:0e:6b:83:34:89:cf:ba:
                    ab:11:76:e7:75:6e:10:ca:b5:d5:1b:75:31:51:f0:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:F9:B2:D1:53:1C:E4:31:37:08:2F:99:46:42:88:21:84:85:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:72:55:3b:52:4d:66:cf:7e:ea:ac:93:ca:80:3d:b0:6f:
         e1:83:13:d1:d2:32:54:48:09:11:63:ea:3f:ee:44:01:51:d8:
         2e:dd:9f:ed:9a:d5:89:14:d5:d9:d0:70:f9:1e:c0:68:d0:9d:
         d8:51:07:6c:eb:a0:e3:04:24:ed:28:0a:f6:86:6b:82:73:5d:
         c3:a6:6c:3b:5e:7d:24:f1:dd:9a:0f:52:7a:b5:de:28:ed:0d:
         89:d5:10:a1:cd:18:68:7f:76:41:e9:38:52:1c:ae:b6:88:6a:
         86:f2:2e:31:53:cd:40:27:3c:51:69:cf:32:dd:70:69:29:a3:
         8c:52:cb:f7:99:b0:68:90:3f:a4:0e:04:ef:76:f6:27:33:f8:
         c5:b1:fe:54:54:d1:f7:ff:21:2b:3d:9c:d2:5b:4d:2b:65:96:
         f1:74:7a:e5:c0:ef:0d:c3:f8:41:71:21:33:8f:73:1f:c3:9c:
         57:32:a3:5a:f4:05:d1:a8:9b:a8:d1:db:e0:54:88:15:7c:a7:
         ee:2a:4c:72:6d:de:4d:9e:43:96:26:b7:a6:7a:b6:14:d5:2c:
         32:95:13:dd:32:5c:3e:82:c3:4b:88:62:53:f7:2a:47:49:3d:
         3f:30:7c:8e:81:8c:cf:6a:23:32:b6:1b:0c:bd:31:0f:3c:80:
         95:80:d1:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rnM1deI+Sbsm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
OGI1YWE5ODgtNzBlYS00NGEwLTk0ZTgtMjk1OGY3MzQwZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPwhBDWMWRbJQzXmS9rR1ZtQFDyz20x4sYMh
Ft24jgRs+k7PCbgogZk6c0EDopeHpoQKZjL37FdDlEhRxkio2KQ43YyON3PD6ceK
wYwMbfRin3kjnD50FJUY54EH9W9YwCQ+y7NtJ3h0h2jBSo2kFAWRF3ilVQSWW4xt
6So9Fkn5NcYF5fpG7tzBKly5Brj9Sy+FAQOF0Y6SFM+xK/q37Lpjm7erSGtmkBrG
CF1lQBDqNcTMdBBfJwDIw5/7X6uFkIFGtfoT0l4r2mMYK1s4Cde9+aeTR6wD9ADe
evTrG3CCikOSMvMPjw5rgzSJz7qrEXbndW4QyrXVG3UxUfBRLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyE+bLRUxzkMTcIL5lGQoghhIXaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzc2NzE4NzAtMTk3MS0z
MjcyLWJmNzItZjJiZTNiZDY1YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGykMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACltclU7Uk1mz37qrJPKgD2wb+GDE9HSMlRICRFj6j/uRAFR2C7dn+2a
1YkU1dnQcPkewGjQndhRB2zroOMEJO0oCvaGa4JzXcOmbDtefSTx3ZoPUnq13ijt
DYnVEKHNGGh/dkHpOFIcrraIaobyLjFTzUAnPFFpzzLdcGkpo4xSy/eZsGiQP6QO
BO929icz+MWx/lRU0ff/ISs9nNJbTStllvF0euXA7w3D+EFxITOPcx/DnFcyo1r0
BdGom6jR2+BUiBV8p+4qTHJt3k2eQ5Ymt6Z6thTVLDKVE90yXD6Cw0uIYlP3KkdJ
PT8wfI6BjM9qIzK2Gwy9MQ88gJWA0ds=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:52 2025 by rpki-client