Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43297765-3eff-3caf-a107-2315568fced0.roa
File:                     43297765-3eff-3caf-a107-2315568fced0.roa (raw, json)
Hash identifier:          43pplsR47pr+5P3VUHYtqo1hEIDYiXBKaZx+RjgHyfU=
Subject key identifier:   AB:A6:38:24:D5:DE:C6:B2:55:1B:5E:8D:F9:86:AE:D2:DA:D8:EF:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6B1D945A43F3CFC23A380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43297765-3eff-3caf-a107-2315568fced0.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b1:d9:45:a4:3f:3c:fc:23:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=043444b1-04e2-4383-9025-59ce9c7423ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:5e:ef:7b:35:a9:18:46:df:4f:01:db:ea:
                    7e:c3:1e:70:cd:f6:49:cc:60:b5:e4:5f:f8:62:54:
                    a6:c3:bd:5b:76:d9:3f:ba:a9:6b:85:f2:85:4e:04:
                    18:62:24:1c:0d:e6:cd:57:20:40:dc:d9:cb:19:ac:
                    b5:ef:7f:8a:f8:e3:24:ba:cd:45:48:15:58:cd:0f:
                    c8:1b:0c:02:97:63:c0:c1:d9:5c:4a:a3:47:6e:92:
                    2c:27:91:78:18:16:e7:86:1c:85:fd:9f:3f:68:78:
                    8e:64:70:6f:91:f6:8a:51:77:ef:45:92:a8:29:c8:
                    22:a2:6b:99:97:c0:5f:8e:b5:39:aa:8e:71:10:67:
                    11:95:88:ab:be:52:1d:5e:ed:8e:eb:bb:4e:c4:ef:
                    e3:81:ec:7d:4c:12:bc:d3:31:67:d0:88:8a:64:fd:
                    73:76:97:b3:c8:5f:24:ac:be:93:df:59:e1:ad:b6:
                    44:c6:2c:1f:8a:f1:00:5d:35:20:0d:20:8a:db:22:
                    c7:9f:87:ba:18:20:92:41:2e:c3:2e:3e:14:73:bc:
                    29:cf:80:41:5f:85:bd:3e:26:a8:57:61:d4:98:21:
                    ea:3b:e5:67:6b:56:8e:2d:fb:05:8d:52:10:b7:1b:
                    90:86:c0:4d:6b:5c:7f:91:e6:a5:6b:89:eb:77:5e:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A6:38:24:D5:DE:C6:B2:55:1B:5E:8D:F9:86:AE:D2:DA:D8:EF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43297765-3eff-3caf-a107-2315568fced0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:da:d4:d7:13:12:48:cc:8d:e3:bf:35:3a:0f:4c:93:a2:
         74:14:24:57:ff:14:b0:7c:94:39:1e:c8:d7:4b:dc:3b:ad:26:
         8a:62:a4:7a:e8:95:35:10:05:c2:4b:4d:be:a1:e0:a0:54:e4:
         81:3a:90:5e:f4:21:06:67:a8:31:2e:9f:5d:85:e3:5a:35:29:
         04:83:57:22:6f:50:f4:a9:ea:d7:d6:25:ef:43:fb:d6:c7:82:
         d9:8b:64:b5:df:44:cf:19:30:31:30:be:ba:b4:b3:66:68:b3:
         29:7c:90:91:62:72:24:9e:29:d7:b3:20:31:48:e7:ab:f6:53:
         93:dd:cc:1a:c4:1b:91:28:1f:16:7b:55:bb:68:fc:e4:a6:86:
         d6:b5:29:ab:29:57:f9:b5:44:a8:1d:82:0a:80:b1:80:06:de:
         80:34:7a:0f:24:35:ef:b9:8f:dc:f7:8a:71:da:60:aa:95:a6:
         e9:36:24:8f:9a:d0:3f:79:a1:b5:96:bd:fd:6a:e2:7e:41:19:
         ff:fe:97:4c:fa:ac:39:ac:5c:39:3a:d6:1e:ee:d0:49:07:52:
         1c:1b:1c:2d:46:75:b1:a8:30:55:54:78:ea:92:b5:29:ce:55:
         b3:93:46:ad:d2:14:ff:f1:60:31:f8:56:58:99:c2:53:9b:c0:
         df:93:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:42 2025 by rpki-client