Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fd5fb5-db1d-3570-83e1-d1a182714ceb.roa
File:                     77fd5fb5-db1d-3570-83e1-d1a182714ceb.roa (raw, json)
Hash identifier:          8fjxGQIj3PEDJipWhDYnFRD429ARz6uBR/zhUEqvciU=
Subject key identifier:   EA:0D:DF:5B:C8:1C:0C:A1:18:99:61:C6:35:E8:C0:C2:80:AA:07:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6C0AD0746614A45EAC940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fd5fb5-db1d-3570-83e1-d1a182714ceb.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.109.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c0:ad:07:46:61:4a:45:ea:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=5fe88a9c-6d70-4396-8230-91a0840140c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:01:ce:1e:39:d5:65:32:3a:31:f6:98:6c:
                    52:af:7e:59:df:76:28:33:b5:c8:bd:78:51:0a:13:
                    d7:a5:ce:55:9f:62:2f:b9:1b:51:ff:cd:0e:47:d1:
                    02:d1:d3:fe:75:99:01:3c:76:d5:53:18:6e:26:16:
                    47:8a:1f:44:4c:13:aa:48:3c:70:bc:b2:c0:a3:9d:
                    13:7b:88:2d:2e:7b:ad:7a:be:b4:31:16:d2:0a:68:
                    7e:e3:74:2b:49:60:96:f3:bf:c3:8a:10:cd:27:6f:
                    4f:02:a1:df:2b:08:19:70:b2:d2:6e:80:e5:15:2e:
                    f7:9e:91:c9:35:3d:12:cb:d5:68:6e:4e:f4:12:0d:
                    17:a3:25:a9:8f:f6:41:89:de:f1:57:3c:3f:92:91:
                    a2:5a:e9:8a:28:77:27:dd:a1:87:eb:c8:56:04:64:
                    9e:ec:7c:b1:1a:6b:c6:8c:d4:28:4b:f5:a9:d8:62:
                    86:93:94:b4:a5:42:8f:fd:f5:6a:3f:06:55:5f:2a:
                    00:28:ac:ff:16:b6:cd:70:00:e7:78:8e:60:76:49:
                    b7:00:b3:6f:e0:b4:8b:69:15:b7:9a:88:f2:5c:1b:
                    39:f8:e1:a0:ad:8a:bf:3d:ea:1d:cf:a0:e0:85:bc:
                    14:e3:5f:c1:45:57:07:41:ca:57:f1:7c:46:62:b4:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:DF:5B:C8:1C:0C:A1:18:99:61:C6:35:E8:C0:C2:80:AA:07:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77fd5fb5-db1d-3570-83e1-d1a182714ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:69:e0:d6:e7:73:50:ef:76:6a:61:f5:8f:ba:02:3d:5e:9e:
         7b:2a:97:42:bc:e3:0b:95:b1:0b:ca:17:d6:43:ae:ac:d1:35:
         67:47:f1:36:42:9c:cf:8c:6f:92:1d:b1:6b:56:5f:4a:1f:8f:
         6f:c5:17:1c:ad:ee:c6:f5:a6:b2:e3:74:f2:f3:b0:cf:a1:5b:
         07:8f:5a:0e:c3:b9:88:7e:d9:85:5c:9a:e6:47:49:d4:bc:da:
         0d:6a:96:19:25:f7:93:0a:92:01:ae:fc:3c:27:83:57:5d:f8:
         77:31:4f:2b:cd:27:ea:0a:58:12:95:21:9f:17:bd:89:37:af:
         07:62:e3:e2:cf:97:d0:18:4c:de:51:14:aa:7d:c5:a7:9b:3d:
         e0:bb:97:14:58:26:99:12:f0:21:97:bf:10:5b:60:2a:c4:4b:
         2b:66:87:80:77:e3:af:b6:03:a9:65:76:1f:dd:cb:ff:75:f4:
         82:7a:0e:53:d3:31:8f:53:29:77:52:70:81:61:cf:71:63:b4:
         cc:45:bf:1b:37:ac:1f:e8:2e:2b:53:64:82:ac:d3:82:9f:50:
         07:77:91:34:50:d4:4b:d7:29:da:47:41:f1:b3:8c:1a:3f:78:
         cb:b7:1e:e6:d1:2d:cf:fb:3e:8f:ae:9a:3b:f8:6b:55:3b:c5:
         f8:0f:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:24 2025 by rpki-client