Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67433747-7053-39a5-8e0c-bef558eb1ab8.roa
File:                     67433747-7053-39a5-8e0c-bef558eb1ab8.roa (raw, json)
Hash identifier:          cHJMF2/k6cOyQgUL9iIKVK46mXwFIkN+CLhZrDSj284=
Subject key identifier:   61:A3:8C:5E:D9:CC:2F:CF:95:47:BF:0C:67:81:B3:4E:74:4D:D6:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6B4AFAEC93E0DEA52FD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67433747-7053-39a5-8e0c-bef558eb1ab8.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.106.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b4:af:ae:c9:3e:0d:ea:52:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=c28e3d9b-c9ea-41c0-b6cb-ac4372387fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:ff:39:c3:cb:10:c5:63:79:28:c5:0b:b2:
                    3a:63:6b:d9:53:2b:b1:4b:44:65:78:2d:5b:66:78:
                    8b:be:93:4a:18:84:bb:6c:1f:7d:2c:2f:49:84:37:
                    2a:69:21:0c:d0:74:18:19:be:89:42:cd:3a:ae:00:
                    3c:9e:0a:2d:2c:99:8a:a7:48:a1:f5:8c:8c:8e:5a:
                    1a:39:96:81:30:67:c3:39:42:6b:41:89:6a:86:72:
                    08:e2:af:2b:df:84:6d:ee:65:97:53:8e:2b:26:56:
                    23:75:71:10:6d:bf:63:5b:46:37:33:4f:b7:c8:6e:
                    e0:7b:8a:fa:6a:01:9b:78:b7:ec:6e:a4:66:b2:8a:
                    7d:3a:46:43:05:c2:5e:fe:09:21:7d:3e:e0:4c:2a:
                    c7:29:22:ed:79:4f:2c:39:66:56:61:da:ab:35:2f:
                    94:8d:d6:08:04:8d:d4:39:6a:9a:5c:60:98:30:51:
                    af:76:2e:3c:97:2f:42:78:52:38:f6:09:f1:ab:f9:
                    fd:74:2a:41:01:b7:89:1d:84:16:b4:20:f6:dc:84:
                    4f:a8:05:4a:18:bc:d9:43:9f:6f:f0:71:75:b3:69:
                    83:28:31:db:11:01:12:7f:ac:82:4a:05:fa:52:82:
                    e1:d3:17:bb:12:0c:cf:71:01:92:87:86:64:12:bc:
                    99:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:8C:5E:D9:CC:2F:CF:95:47:BF:0C:67:81:B3:4E:74:4D:D6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67433747-7053-39a5-8e0c-bef558eb1ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:86:aa:01:e3:d4:7e:1b:96:62:b2:eb:3d:4f:4e:d0:fa:
         02:17:23:91:d4:ce:aa:4c:c0:c3:4f:c9:be:9d:53:50:95:ce:
         78:15:dd:61:ed:b5:f9:03:cf:cd:da:25:03:94:c1:2c:18:fb:
         8d:ef:24:8d:8a:30:ce:4f:06:e2:61:4c:a2:87:1a:73:54:0f:
         e7:ce:e0:fd:cc:07:cd:86:5a:99:b7:63:5f:27:65:1e:c7:08:
         de:61:26:f8:81:56:24:0c:d6:70:bc:2c:e7:1c:33:30:92:35:
         d2:18:e4:55:d7:aa:0a:99:2d:45:98:1c:e1:3e:5b:88:88:92:
         5b:ae:5c:bb:bb:1b:c7:cb:5d:da:1f:15:65:81:5d:4d:47:74:
         ae:60:e7:2a:a0:2e:bd:0d:f0:d6:0d:91:c5:c9:2d:b0:e2:9b:
         a4:a6:bf:dc:dc:73:6b:cb:b3:4f:f5:36:31:34:eb:a9:b4:9f:
         c5:ac:d6:66:53:56:39:33:a9:fd:63:34:41:89:2d:5c:11:66:
         8a:b3:eb:ec:46:ab:63:6c:ea:50:83:4a:4a:ad:e0:ed:90:8e:
         0a:41:3f:7c:d8:02:f8:fe:e6:3a:f8:bf:c0:64:e0:52:77:be:
         c0:29:ac:d7:c5:a6:eb:99:59:8b:18:ff:9f:74:f4:4a:7b:5e:
         6c:52:0c:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rSvrsk+DepS/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
YzI4ZTNkOWItYzllYS00MWMwLWI2Y2ItYWM0MzcyMzg3ZmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPX/OcPLEMVjeSjFC7I6Y2vZUyuxS0RleC1b
ZniLvpNKGIS7bB99LC9JhDcqaSEM0HQYGb6JQs06rgA8ngotLJmKp0ih9YyMjloa
OZaBMGfDOUJrQYlqhnII4q8r34Rt7mWXU44rJlYjdXEQbb9jW0Y3M0+3yG7ge4r6
agGbeLfsbqRmsop9OkZDBcJe/gkhfT7gTCrHKSLteU8sOWZWYdqrNS+UjdYIBI3U
OWqaXGCYMFGvdi48ly9CeFI49gnxq/n9dCpBAbeJHYQWtCD23IRPqAVKGLzZQ59v
8HF1s2mDKDHbEQESf6yCSgX6UoLh0xe7EgzPcQGSh4ZkEryZvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGjjF7ZzC/PlUe/DGeBs050TdbUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjc0MzM3NDctNzA1My0z
OWE1LThlMGMtYmVmNTU4ZWIxYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSehqoB49R+G5Zisus9T07Q+gIXI5HUzqpMwMNPyb6dU1CVzngV3WHt
tfkDz83aJQOUwSwY+43vJI2KMM5PBuJhTKKHGnNUD+fO4P3MB82GWpm3Y18nZR7H
CN5hJviBViQM1nC8LOccMzCSNdIY5FXXqgqZLUWYHOE+W4iIkluuXLu7G8fLXdof
FWWBXU1HdK5g5yqgLr0N8NYNkcXJLbDim6Smv9zcc2vLs0/1NjE066m0n8Ws1mZT
Vjkzqf1jNEGJLVwRZoqz6+xGq2Ns6lCDSkqt4O2QjgpBP3zYAvj+5jr4v8Bk4FJ3
vsAprNfFpuuZWYsY/5909Ep7XmxSDJI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:22:03 2025 by rpki-client