Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47eec9cb-0632-3626-982c-fdc1b065c3bb.roa
File:                     47eec9cb-0632-3626-982c-fdc1b065c3bb.roa (raw, json)
Hash identifier:          E1AHtGVj3dkHk7dhqUkaIll3EdPeLxy3CMHiUonrpa4=
Subject key identifier:   ED:85:84:73:CC:28:52:32:81:05:12:02:F5:66:DE:60:CE:26:79:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6BFBF97F4A7F3B5C38080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47eec9cb-0632-3626-982c-fdc1b065c3bb.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.107.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:bf:bf:97:f4:a7:f3:b5:c3:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=f4cd2cb0-6299-435d-890a-d192d7e69dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:50:fb:22:8f:06:e2:56:cc:e6:3e:03:29:
                    9a:3b:16:89:89:72:ae:cf:78:37:95:a9:de:94:20:
                    4b:58:a2:69:b7:b5:b1:b9:35:ae:5d:8f:c8:bb:9e:
                    01:41:0c:2f:41:42:e6:56:83:44:e0:eb:24:7d:32:
                    d7:03:cc:9a:05:70:48:c7:98:79:eb:5d:9e:f8:86:
                    12:a3:18:fb:0d:b1:99:43:63:d6:e1:16:90:77:ff:
                    a8:43:32:73:b7:59:91:fd:6c:40:ce:f2:bd:9d:2a:
                    5f:0a:69:21:b4:3b:ae:f4:06:0f:e8:70:e9:3b:ab:
                    3c:af:02:79:57:08:c6:15:ce:ac:22:8c:90:b6:72:
                    23:b3:c1:1d:1d:5f:ea:be:7c:f4:d7:3e:89:10:43:
                    6d:c8:2f:64:6b:48:cb:17:c8:67:cb:ec:ad:da:4a:
                    4e:ce:8e:33:57:89:e7:ed:61:0a:1b:6d:7c:6c:bf:
                    b7:11:ea:a4:33:4f:88:47:97:70:2e:9a:1b:83:a3:
                    a6:bc:3c:1a:bc:a1:e3:8f:5e:fe:6c:ad:4e:3f:d4:
                    d4:b2:8b:7f:8f:d4:28:6c:24:2b:16:8a:2d:46:88:
                    61:e6:af:f5:cb:e5:42:09:91:6d:69:49:51:dc:1f:
                    da:c6:e0:d4:32:03:d0:e2:b5:53:80:9e:40:8f:4b:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:84:73:CC:28:52:32:81:05:12:02:F5:66:DE:60:CE:26:79:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47eec9cb-0632-3626-982c-fdc1b065c3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:74:8b:71:12:5b:b9:7f:29:af:0b:af:a6:cf:b9:df:26:
         ab:49:f2:e5:ae:35:92:51:1e:e1:57:66:2b:67:d3:da:bf:c5:
         27:da:88:71:12:2c:34:37:68:21:ff:f0:30:bf:d9:56:6b:09:
         14:2b:51:a1:38:46:c2:d8:d6:48:48:db:57:de:51:d4:58:c4:
         ca:f7:2d:b5:57:b1:d2:e4:3a:be:52:ce:1d:72:02:16:ce:c7:
         f1:af:a7:f4:b7:c7:0b:f2:8e:24:a3:c9:3b:6d:07:31:f7:f2:
         96:6c:3c:c3:0c:26:a9:74:24:d3:ef:e2:e6:03:fd:75:12:d0:
         44:d2:1b:5c:cb:9c:2e:ef:8f:dc:a4:f8:fc:71:40:f1:dc:39:
         a5:1a:1f:1c:42:f9:94:fe:3b:fb:df:46:a0:25:99:4d:e1:b7:
         8e:22:db:1f:f5:e0:b0:1e:ab:67:9f:29:11:19:e3:1c:8a:5d:
         da:8e:26:12:18:43:6d:ee:6b:4b:8d:c3:a1:32:df:d1:3b:cd:
         34:e7:dc:6e:3a:91:76:1f:b8:4d:40:53:d9:78:4c:46:8c:52:
         36:91:35:61:fe:6b:4a:9d:c7:06:02:0f:e5:94:46:dc:5d:33:
         fe:c9:6c:b7:1f:7a:27:f4:62:42:74:fa:63:ed:b0:d2:42:aa:
         63:19:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:34 2025 by rpki-client