Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab317ac5-2bbe-3754-9684-dd30545773cb.roa
File:                     ab317ac5-2bbe-3754-9684-dd30545773cb.roa (raw, json)
Hash identifier:          2qQVnD3MuLWQGYmB9MtHoFzwzDwopjdFxflMyK8b0po=
Subject key identifier:   10:1F:A4:C4:26:33:D9:C1:6D:75:F1:A7:5B:5D:3D:2D:6A:47:D5:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AFEE6BB074629733BB5F33380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab317ac5-2bbe-3754-9684-dd30545773cb.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.102.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:bb:07:46:29:73:3b:b5:f3:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=961a00c1-3cc7-4fea-9d25-141509fd8f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:b7:51:10:70:15:15:01:de:fc:6b:b9:ae:
                    a4:d0:b9:f5:73:7c:7b:f4:91:a6:d4:b2:43:9d:7c:
                    31:89:eb:ec:ab:71:6e:56:0f:af:e7:86:ff:36:e8:
                    33:98:2a:5f:be:12:0f:4a:c3:35:9b:bc:e0:8e:13:
                    60:96:21:57:44:f8:f9:50:d9:a6:24:5e:fe:62:bd:
                    05:8d:1f:51:fb:43:ad:f4:53:d8:ae:94:6c:2a:f5:
                    fc:f6:7e:25:fb:fe:69:29:ec:34:5d:d2:cd:37:e1:
                    ee:67:56:7c:1a:eb:f2:2e:04:39:93:b6:10:e1:0b:
                    40:19:0a:44:30:0a:af:25:da:7f:67:21:ce:0a:44:
                    49:bd:65:7e:9f:d3:57:a0:58:f3:4d:d2:b7:50:43:
                    bd:d5:04:5f:67:ca:c0:6f:4c:ce:48:10:25:27:2c:
                    64:58:8a:c2:1f:1a:89:84:fb:fc:28:d4:6b:d4:5b:
                    91:8d:09:f8:37:4f:5e:62:b0:97:c1:b0:ad:e6:56:
                    3b:a9:96:5e:ae:07:d8:97:c7:61:ae:46:8b:26:25:
                    f2:51:fb:ab:48:9d:7a:65:75:dd:8a:35:d2:1f:05:
                    ef:fe:64:84:b6:39:58:0b:7e:62:65:2f:82:8b:51:
                    41:17:da:f9:96:d8:29:e8:4b:73:e3:fa:85:fd:37:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:A4:C4:26:33:D9:C1:6D:75:F1:A7:5B:5D:3D:2D:6A:47:D5:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab317ac5-2bbe-3754-9684-dd30545773cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:47:8e:6d:01:da:32:c2:b0:59:84:91:a9:c8:8d:1a:3c:ae:
         8a:c7:d4:09:db:8c:0b:59:93:ce:9d:e9:f7:ad:e7:14:69:88:
         a8:ea:76:24:54:83:8d:ad:82:c8:6c:94:ec:e1:9c:5f:dd:10:
         77:5d:66:51:cd:07:3d:35:85:19:f9:12:b7:4d:c3:b6:12:08:
         61:72:d5:66:17:bf:54:f9:ae:78:73:e3:7b:bc:5b:29:da:88:
         81:6a:e8:8c:e0:35:af:aa:73:46:4a:e7:97:97:63:10:2c:87:
         9e:7c:02:47:5c:13:58:ac:4f:b2:1f:ca:01:41:5c:52:d3:bd:
         50:6d:b1:31:7c:94:02:99:89:88:37:7e:7f:01:19:72:e7:49:
         ff:f8:cf:f1:e7:cc:4c:bc:7f:17:e6:df:b8:ce:8f:43:85:13:
         89:76:e0:d0:81:f6:46:5e:2c:10:13:02:58:ac:9b:7f:8e:15:
         70:bc:5d:db:9c:a4:f5:3a:b8:21:06:b8:13:96:63:32:e7:be:
         74:58:00:9e:02:52:35:2e:c0:39:7f:03:51:5e:2a:f6:9c:ee:
         f2:1e:58:b2:20:10:3e:a5:eb:89:6b:22:82:a5:34:55:8b:68:
         1f:cc:5e:0f:95:5d:35:5d:e8:08:93:62:a0:46:af:07:95:e8:
         3a:a4:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:21 2025 by rpki-client