Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a04f667-968d-3747-8fba-de90ea34c808.roa
File:                     7a04f667-968d-3747-8fba-de90ea34c808.roa (raw, json)
Hash identifier:          5JyHVyAJunwmjpslsx/H9saL/P6avYt/VSD5C/r9k2k=
Subject key identifier:   33:E2:BF:D8:9F:8C:C5:C7:0D:47:C1:F5:DF:19:31:38:97:05:D0:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6B5C168090FD20A815FE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a04f667-968d-3747-8fba-de90ea34c808.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.109.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b5:c1:68:09:0f:d2:0a:81:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=c0b552ea-783d-49ca-b9fd-f3b1162bbee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:42:c8:fc:7a:7c:d6:44:d0:c2:1e:8a:6f:
                    cf:11:34:e5:68:50:5e:69:27:99:38:16:5e:b7:38:
                    fa:12:90:7c:d1:3f:dc:47:9f:46:34:74:c1:32:c8:
                    bf:97:cb:6b:cd:93:b0:a9:85:2b:1a:3f:ac:8c:fb:
                    25:08:8c:eb:f1:bd:3e:67:22:d2:4f:ae:e2:bc:49:
                    ce:c5:ed:d6:a3:c4:cc:6c:b0:2c:b6:65:1b:15:e8:
                    cc:0e:8e:ca:d2:7c:d6:29:96:04:60:f9:0b:e2:48:
                    9e:fa:06:16:aa:af:a7:9d:7f:67:76:41:f9:f5:ef:
                    c1:20:4f:75:89:b2:ab:1b:f1:69:67:81:e7:96:60:
                    38:ef:17:ed:4a:3e:43:8b:f9:b7:69:2d:b2:bc:c4:
                    29:c4:77:83:04:d6:1d:c0:91:6d:7d:54:c5:af:61:
                    16:12:06:88:aa:90:45:b5:c7:7b:22:63:f4:73:dd:
                    13:2e:2d:9f:ad:c2:22:44:f1:48:b2:e1:6e:32:29:
                    6c:0c:d9:51:7a:74:28:c5:51:af:85:bd:ac:af:e1:
                    38:e6:bf:0f:f4:e2:71:9a:e6:52:66:3b:69:14:b3:
                    1d:de:d0:93:74:f4:a1:c2:94:c4:75:b5:95:61:60:
                    fb:c2:e7:7e:08:c9:b1:08:4e:00:e9:8a:9c:63:65:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E2:BF:D8:9F:8C:C5:C7:0D:47:C1:F5:DF:19:31:38:97:05:D0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a04f667-968d-3747-8fba-de90ea34c808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:69:90:33:aa:29:b2:35:fd:e8:6b:8a:0c:8d:c9:4e:38:
         69:f1:0b:e7:bc:13:78:3a:d3:61:2e:32:49:6a:8d:8f:8a:55:
         b6:d2:ef:92:09:ac:68:e3:65:ac:c2:f0:9e:26:59:43:19:95:
         27:3b:d7:db:ad:d6:fe:c6:38:af:43:65:60:09:5c:78:8d:b6:
         58:62:8a:e8:60:5a:2d:87:1b:26:ca:7b:0f:a2:2d:e1:d4:25:
         a1:13:b7:44:97:6c:8f:68:05:a0:a0:36:14:0f:25:32:dd:1f:
         ab:47:2d:0f:1d:dd:bf:9d:cc:28:99:7c:7d:87:83:5a:b2:fa:
         57:6a:96:27:bf:e8:f4:9f:81:b9:2a:5d:53:89:08:41:e3:77:
         2c:a4:89:f6:8a:32:bd:34:83:47:72:5f:82:b7:79:47:cf:ec:
         5a:aa:9d:f3:04:d8:fd:94:b1:b5:24:3e:5c:a6:6f:ee:fa:33:
         07:83:7f:06:ab:39:41:48:77:5e:4a:cd:c8:f0:83:35:2c:d1:
         59:47:f2:24:41:bf:f4:99:5b:ac:7f:72:08:57:8d:50:c6:8d:
         7c:f8:b3:d6:9d:f7:12:fa:98:f5:2d:6f:d0:2c:89:6a:b7:71:
         a9:f4:cb:60:34:ce:a5:b3:b7:e1:1c:eb:ba:ef:5c:6b:cb:b4:
         9f:11:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:10:46 2025 by rpki-client