Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa
File:                     9616acc1-d051-3148-b53e-b4dbc9a2f093.roa (raw, json)
Hash identifier:          5+SOeHY3h9k7NJDsWvlaKraAe8oYhXaMENHBUXXT/tQ=
Subject key identifier:   14:B2:B5:1E:58:B2:F9:7A:FE:25:B9:6F:1E:FB:0B:3C:77:31:E1:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6B2C51585E05146E36E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:b2:c5:15:85:e0:51:46:e3:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=4f95f1c9-5922-4853-a220-45b75294490b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:54:af:c9:13:41:52:03:32:63:bf:32:2d:
                    e6:74:0f:d3:e7:1d:5f:23:23:a2:c3:2c:e5:7d:a0:
                    79:80:3e:00:5f:2f:ab:11:c2:89:58:b6:12:c3:53:
                    b3:b5:ad:61:bf:fb:db:fa:f7:94:08:fd:a6:7b:94:
                    a0:54:21:69:22:12:b8:03:08:f7:f2:d4:b3:e8:b9:
                    f3:18:a0:5e:79:3a:c6:5a:71:e1:53:74:74:c0:44:
                    47:e7:e0:bb:6e:c7:33:32:84:73:cd:c7:3f:dc:63:
                    bc:b1:63:28:01:f7:62:9e:ef:6e:77:da:1f:43:f3:
                    87:34:13:9e:34:b3:cc:3a:8c:86:3e:61:61:2e:68:
                    24:0d:85:17:94:d5:ed:cf:cd:c5:4b:b4:ea:7f:f7:
                    45:9a:61:a2:89:57:1a:dd:55:45:3c:99:d8:ea:7b:
                    43:0d:a0:0b:1c:a8:a2:44:f5:2b:0d:e0:4a:58:2b:
                    1e:df:11:f2:a9:e3:69:3c:83:cb:65:91:6a:c8:36:
                    fc:1d:7b:c5:94:05:3d:d8:06:11:ce:da:a3:14:41:
                    2e:18:d6:96:a2:b6:80:d4:d7:3f:e9:fe:a9:3e:e5:
                    3b:6b:f1:63:87:c1:dd:4d:81:42:35:48:18:f5:30:
                    8c:df:8d:10:2b:9c:37:da:c9:99:3d:53:46:68:f5:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B2:B5:1E:58:B2:F9:7A:FE:25:B9:6F:1E:FB:0B:3C:77:31:E1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:4b:6e:1a:0d:96:db:28:57:e0:a2:e2:3c:d5:74:06:64:
         c8:a8:d8:3f:8b:bb:c4:71:a9:36:22:32:dd:53:da:be:c5:1d:
         12:b2:2d:2b:8a:34:68:0a:64:f9:8d:23:02:af:3e:88:a5:51:
         c8:8b:ff:6a:47:69:53:f4:f7:b6:eb:ae:3a:d7:2f:b1:44:f6:
         8c:87:90:94:89:b0:94:41:59:df:b5:9f:1b:4d:e7:33:90:bb:
         a1:c5:27:50:16:5d:e9:ca:07:f8:08:17:f6:5e:aa:48:87:41:
         32:15:9d:9a:c3:6c:88:e5:da:e6:4d:5c:99:8b:b6:f3:c8:31:
         54:00:cd:cf:4e:6a:8a:91:38:a4:47:18:5b:a7:38:64:ee:39:
         6b:92:9f:b3:66:46:ad:49:49:2b:46:f9:58:4a:4b:d2:75:c0:
         87:a3:0c:29:b1:14:a6:57:e0:e2:b0:cf:69:47:bd:14:c7:f4:
         f1:44:a3:5c:bf:af:9a:c8:e7:24:25:a1:72:82:f6:b3:be:29:
         7b:74:31:58:91:6d:78:84:54:d7:2f:7a:21:f3:61:eb:6c:41:
         a6:3d:9d:a0:23:2b:b4:67:d4:ef:cc:f3:1d:ad:1e:6d:d2:10:
         b8:7e:e9:8c:ea:37:05:2e:91:af:e3:3b:50:8c:93:80:18:3e:
         da:88:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:15:33 2025 by rpki-client