Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5931d015-876a-3b5c-b1d3-7121cbc03304.roa
File:                     5931d015-876a-3b5c-b1d3-7121cbc03304.roa (raw, json)
Hash identifier:          WjJpZlsw7W52NaUNN945VEop1IYwbsuPu8T97kNpWjk=
Subject key identifier:   4C:07:3C:71:DD:52:C0:D6:9F:9A:D0:8F:D5:EE:FE:CC:6E:2D:CF:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0BEACC1E5C96613B36C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5931d015-876a-3b5c-b1d3-7121cbc03304.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.97.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0b:ea:cc:1e:5c:96:61:3b:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=51c83f89-9eb6-4e0b-97c2-e9e5e5ee663e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:5f:e3:d4:ec:de:23:1e:a9:9e:e3:dd:90:
                    ef:e6:c0:2f:e8:1b:96:b4:42:95:55:d2:93:d2:44:
                    b5:ac:b4:dc:9f:7d:a6:c4:a3:79:5d:b2:31:24:93:
                    65:92:0a:c0:1b:b5:d4:13:aa:0c:76:45:20:c0:4f:
                    c3:a8:62:70:f2:0e:4c:19:e1:fe:d1:ef:94:0d:9e:
                    4c:44:30:30:b6:3d:c4:80:d8:8f:68:ac:c1:fc:61:
                    5d:df:98:49:c0:d5:d3:03:e4:bb:82:7b:b6:87:bd:
                    6c:3c:9d:11:ca:01:bc:2d:4d:a6:4e:18:6c:79:98:
                    6d:9c:96:d1:9a:f5:49:ee:08:75:7b:ec:ec:c7:78:
                    3b:ab:7c:38:45:d3:3d:73:ec:de:a0:77:cb:02:36:
                    07:6a:54:c0:1f:cf:80:de:0e:69:55:98:44:c4:d4:
                    35:b3:bb:5e:54:65:10:05:f9:f1:dc:22:46:a8:64:
                    29:77:cc:7a:dd:3d:d2:f6:23:14:55:32:ea:85:10:
                    f9:6e:d3:02:8e:a2:2d:25:53:ce:97:01:f6:d8:09:
                    8b:a8:7c:36:76:ce:fc:84:b1:a2:7c:e3:a1:52:61:
                    e3:6e:a3:f3:32:5c:19:89:72:9a:e0:c5:6f:56:3d:
                    d1:a5:f9:04:e1:e7:d6:99:21:c5:19:43:df:02:95:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:07:3C:71:DD:52:C0:D6:9F:9A:D0:8F:D5:EE:FE:CC:6E:2D:CF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5931d015-876a-3b5c-b1d3-7121cbc03304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:3a:af:be:3e:9e:a1:85:57:7e:23:21:7f:6a:07:02:9e:
         2c:22:d0:fe:92:65:2c:4e:12:6a:b3:a2:16:92:e7:76:cc:cd:
         0c:af:b1:bb:8c:f2:3c:6e:6e:57:e5:66:4e:37:55:e3:f3:ed:
         e1:5c:af:af:2f:ca:5d:0d:9a:27:bd:5d:f2:b6:85:73:0d:21:
         27:c3:c5:c6:47:d2:68:c9:5d:8a:a5:e7:6c:02:14:9d:22:50:
         e9:00:c5:b7:8b:eb:79:d4:dd:1a:8b:0b:f4:4e:c3:eb:00:71:
         11:7e:b7:aa:75:d5:28:60:f3:b6:5d:ff:36:30:cb:51:a5:33:
         8f:9b:16:68:8f:56:53:e5:c7:f2:e5:32:0f:88:b0:8a:5f:b8:
         32:54:f4:a9:17:be:78:2a:bf:00:b0:ba:79:7c:e5:f1:c8:7b:
         d8:40:68:5a:56:43:45:fc:fb:b4:0b:66:94:78:56:1c:49:db:
         ad:cd:9f:87:e9:e3:64:27:c8:ed:54:59:40:61:d7:a9:dc:16:
         07:62:84:b6:85:dc:be:ba:04:2c:94:f1:77:aa:a6:69:4b:c1:
         19:8f:73:bd:bb:7f:2d:d6:61:c4:7a:f1:a4:e3:d6:c8:05:4b:
         9c:4c:1b:57:f9:18:ba:09:6b:7a:cc:76:47:89:66:fb:d7:e2:
         06:59:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:39:01 2025 by rpki-client