Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f72b71d-bcc9-3721-b4d4-55b14bfe2722.roa
File:                     9f72b71d-bcc9-3721-b4d4-55b14bfe2722.roa (raw, json)
Hash identifier:          XnBtxCNue0ciQ8OA8TT3ecJ+qoks1zT4jPJ5zZj+BGc=
Subject key identifier:   EB:F8:70:8C:17:0A:1E:57:D2:02:DC:B7:A7:B1:3D:E7:5B:8B:B7:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B24970028CC52EFBBEC4E3250
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f72b71d-bcc9-3721-b4d4-55b14bfe2722.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        75.244.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:97:00:28:cc:52:ef:bb:ec:4e:32:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=cfbc8d18-c8cc-4ba2-90a5-e4b7154922bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:4d:c4:f8:c5:8e:97:9c:7f:19:09:0a:1c:
                    b8:b2:ad:68:ef:78:da:c6:de:b9:22:70:be:94:4a:
                    d2:4b:ff:63:02:3c:dd:0c:5d:26:4d:5f:9c:3f:a8:
                    8c:d4:d0:e7:f2:f9:be:df:49:ee:01:81:95:0f:22:
                    34:93:1c:8b:de:8c:36:16:70:9d:61:dc:c0:3d:33:
                    a6:99:13:5d:fc:12:3f:59:77:c7:45:b2:ea:cb:85:
                    c3:26:9e:9d:0a:75:08:99:52:dd:0f:1a:54:15:39:
                    d4:21:d9:52:c6:a0:a0:d2:69:54:3f:ff:36:62:ba:
                    10:9c:54:71:44:57:5d:58:82:97:22:73:99:81:f6:
                    5a:69:d5:0e:c1:84:d3:70:ec:24:8d:97:bc:2e:fa:
                    e6:c5:34:65:8b:1e:d2:be:7a:f3:12:00:08:c1:a0:
                    b3:3c:71:ba:98:c7:d7:ae:38:be:47:90:37:a6:61:
                    74:49:90:fa:33:3f:59:e3:04:bb:3a:2c:0c:d9:40:
                    fa:de:49:39:63:fb:b3:71:37:5b:19:83:ec:fb:9d:
                    e2:a8:b2:c2:77:6a:bb:39:b8:9a:35:43:dd:ad:7a:
                    c7:8e:29:d4:14:b3:09:d6:1a:ca:8d:c8:72:4c:06:
                    ba:c5:1e:3c:ca:a3:bc:1d:cb:d8:10:86:68:1b:5a:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:70:8C:17:0A:1E:57:D2:02:DC:B7:A7:B1:3D:E7:5B:8B:B7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f72b71d-bcc9-3721-b4d4-55b14bfe2722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.244.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:71:2c:d9:57:6c:aa:61:e5:c7:a5:e5:f9:b9:7f:f4:34:
         24:77:b4:0f:91:12:2d:14:cc:a7:3a:c0:93:b9:76:62:cc:b0:
         43:67:db:4e:cd:58:65:de:b4:f0:af:83:cf:10:14:e3:0e:e5:
         9b:ef:c2:a6:fa:d0:b3:06:2b:ef:f4:f0:f5:de:bf:9d:a6:83:
         b5:0d:f6:d6:81:aa:89:ec:03:c4:44:e0:78:d1:ac:32:f9:0d:
         6c:3d:72:6b:3f:82:77:21:ff:67:3b:84:a3:7a:05:52:57:8b:
         ca:a7:32:33:77:83:76:1a:03:8c:23:dd:1b:49:e2:50:4b:ab:
         5a:32:2c:e0:85:7c:63:b0:4f:c7:74:4e:a0:62:3a:bd:5a:6d:
         e8:8f:ec:8f:d4:b1:0b:d9:0a:3a:43:64:b9:b1:6d:b7:13:a8:
         28:0c:0a:d1:c3:fc:25:1f:06:0c:5a:cf:37:6a:85:39:10:43:
         ed:41:f2:86:a6:da:5e:e4:c4:9e:8c:97:9f:c3:9c:6a:65:43:
         86:f6:4b:ce:78:e2:2d:6f:fe:ba:c0:a3:f5:f5:35:08:c1:9a:
         7b:75:94:7e:e3:3d:c5:f4:09:0f:97:45:64:d0:a0:b7:48:40:
         9b:b2:fb:e3:2a:4a:04:08:24:3c:ca:30:74:bc:39:27:dd:d3:
         ae:7c:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:54:54 2025 by rpki-client