Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6953280c-4b15-3237-8115-7323bd5c0857.roa
File:                     6953280c-4b15-3237-8115-7323bd5c0857.roa (raw, json)
Hash identifier:          M2zrPkXbISCaeUNU2Nwf6YmYCsroKVgXL2sM+deVmGc=
Subject key identifier:   55:C5:E8:85:95:52:A9:8D:E6:E7:59:74:8B:58:79:A8:C5:7D:C8:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F71537B8118329A537DA6D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6953280c-4b15-3237-8115-7323bd5c0857.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.104.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:37:b8:11:83:29:a5:37:da:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f5ddd6ef-bb2a-455f-973c-a03071216746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:cf:61:46:2a:25:8c:e2:fc:13:f2:d1:d2:
                    f6:f6:ff:62:90:48:bf:5f:66:a6:51:c4:d2:18:74:
                    7e:18:76:ea:39:59:15:5c:1f:0d:1a:28:04:f5:6f:
                    f1:6a:51:98:87:ab:de:e1:f7:ec:a4:b6:b0:07:c0:
                    ec:77:f9:b9:b4:e1:95:7a:99:27:19:e0:dd:39:01:
                    92:74:81:21:0b:8d:e7:61:e5:8f:d8:f0:f5:ad:0a:
                    56:b3:90:84:85:ba:db:ea:3e:55:9e:e9:e4:e6:43:
                    25:e5:02:6f:f0:85:ca:54:75:24:3f:ab:c1:c5:48:
                    06:be:f8:81:82:78:02:83:cb:c1:04:bb:02:cf:67:
                    da:64:86:bb:e5:7d:f4:1e:53:df:39:8a:ab:d9:58:
                    67:62:0a:3a:b4:70:44:c0:69:67:4b:fd:eb:fe:ea:
                    30:55:7f:27:95:cc:10:4a:37:68:ea:d2:81:47:1f:
                    93:dd:7f:c2:50:72:69:5e:c3:4b:1e:01:a3:77:24:
                    f6:2a:42:dc:37:47:ba:0f:27:42:b9:f0:bf:56:32:
                    65:e2:f7:a0:3e:41:86:bd:67:0a:72:44:b4:2a:80:
                    04:a8:22:66:b3:b4:4e:4e:dc:23:61:be:66:8d:10:
                    54:36:94:b2:c5:ae:58:79:df:98:85:ac:77:18:3a:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:E8:85:95:52:A9:8D:E6:E7:59:74:8B:58:79:A8:C5:7D:C8:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6953280c-4b15-3237-8115-7323bd5c0857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6c:ce:b8:f6:1f:eb:04:ce:82:db:0e:d0:c9:d0:69:f6:e5:
         16:95:30:01:11:93:b5:00:fe:82:ba:8a:0c:7c:65:14:ae:97:
         7e:e0:a8:63:64:1c:ad:b7:bb:42:43:26:8b:85:b7:07:b7:b9:
         fa:11:a0:7f:be:64:c9:49:12:7a:b8:a8:b6:d8:4a:2d:7a:e2:
         8c:9a:b8:3f:18:8d:07:21:31:78:94:db:59:96:0c:71:01:8e:
         bd:0d:07:70:e4:db:50:4a:7a:1f:ab:a6:e0:cd:76:71:cc:c4:
         3b:2f:90:ab:88:ac:fa:29:55:6f:35:e9:34:93:62:a3:ab:cc:
         59:73:13:20:a5:1f:22:b3:32:08:6c:09:d2:0e:25:2a:2b:fe:
         31:da:cf:5b:be:89:e7:df:cb:07:21:de:e3:b3:4d:74:fe:c8:
         b0:8e:df:a3:2f:f9:f7:63:97:72:26:e2:f4:45:4b:cc:9b:27:
         f5:21:3e:47:11:61:be:8d:72:98:de:9b:d1:27:bc:7d:98:6c:
         4b:3c:c9:5f:a2:a2:b4:36:bc:c7:c9:2a:dd:cf:1a:09:bc:51:
         0e:b9:b3:72:6b:b4:3b:9d:06:53:57:7b:f0:6c:76:01:5a:f1:
         07:76:37:ef:bb:21:77:95:d5:bd:ac:c5:fe:62:8d:b3:e3:fd:
         21:9c:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:51:03 2025 by rpki-client