Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/762db675-2f9a-3e7e-abac-11c12bab4614.roa
File:                     762db675-2f9a-3e7e-abac-11c12bab4614.roa (raw, json)
Hash identifier:          JLkcgqDHHzgwuIFcDxu6HRqz60fsoGUBqATxmcYDIC4=
Subject key identifier:   21:76:D7:04:A9:33:FD:73:2A:EB:C5:A0:F5:75:7E:F1:15:34:43:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0CEB3A0E650242E446C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/762db675-2f9a-3e7e-abac-11c12bab4614.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.103.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0c:eb:3a:0e:65:02:42:e4:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=101d0986-a137-4c48-b6b4-fcb52d2b23ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:62:3f:e0:a6:0d:39:42:76:a0:59:3f:e0:
                    02:cc:1c:5f:1d:94:46:32:7f:2f:81:c5:b5:54:93:
                    7a:8b:3e:cc:73:3d:45:c7:49:15:99:97:b7:0f:1d:
                    13:73:59:ff:6e:c6:66:9e:0a:a5:64:13:6b:0e:b3:
                    a6:20:b4:76:f6:fd:7c:ee:91:0f:56:dd:b3:95:22:
                    e6:f5:89:bc:66:44:a2:f9:bd:2a:43:05:bb:f2:d9:
                    4e:71:e7:1a:a2:dd:66:14:51:d8:dd:30:47:38:6a:
                    bb:b2:73:db:f8:fd:4e:83:d2:23:00:03:57:e0:ec:
                    44:8c:84:21:cd:57:17:2f:d3:35:19:58:e7:20:0d:
                    bc:7f:df:fa:15:93:4c:33:fe:8f:97:d5:b2:d1:32:
                    59:07:a7:94:ef:2b:90:19:39:0d:d2:78:59:d8:30:
                    70:2f:9f:0e:3b:3c:11:e2:97:e5:a7:e4:1f:aa:ca:
                    cc:6b:d5:dc:a2:1e:37:08:61:b3:3f:e9:6e:56:17:
                    1c:69:71:9c:3f:16:b7:85:25:48:4e:aa:41:e9:98:
                    ef:e8:ad:01:20:95:1d:02:20:00:a6:bb:7c:68:f3:
                    24:1d:ac:5c:ab:cd:ad:4d:95:56:b4:03:40:63:19:
                    19:13:d5:64:d5:01:f0:00:71:54:97:3f:25:68:31:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:76:D7:04:A9:33:FD:73:2A:EB:C5:A0:F5:75:7E:F1:15:34:43:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/762db675-2f9a-3e7e-abac-11c12bab4614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:98:ce:49:2a:35:1a:ce:1b:24:35:70:81:ae:28:67:a3:00:
         e6:dd:c1:2f:4e:23:8a:f1:e5:ac:15:78:b3:0c:1d:0f:db:87:
         1c:06:be:2d:30:a6:48:c5:c0:58:61:a0:61:d9:b9:4b:71:8b:
         99:d5:0c:78:7f:9d:8d:98:36:70:d0:99:11:c0:a5:b7:8e:90:
         48:f9:81:7b:bf:90:90:e6:35:00:25:aa:64:b8:30:d9:07:f2:
         2d:cc:ed:26:39:d7:be:30:db:dd:52:ed:35:34:a1:33:df:24:
         f9:62:86:50:2d:69:86:58:f7:3d:a6:78:ee:77:84:fb:d6:fb:
         e7:4a:80:8b:11:5d:2f:40:5b:3f:d6:62:ba:dc:2a:53:15:8c:
         f2:4f:b2:01:5f:67:ec:9a:ec:60:c4:6c:d4:6c:f5:e7:cf:6a:
         c0:46:83:25:e5:f0:c5:2d:0d:a7:4f:78:36:59:2c:08:4a:96:
         85:87:16:f6:0e:cb:d4:af:d7:74:05:19:05:12:5d:f4:61:d6:
         78:8f:44:4d:8b:4d:36:0c:51:be:a4:c5:15:25:f7:83:30:1e:
         c2:82:38:7b:14:c3:6a:a4:8e:1b:87:92:5d:5c:fa:7d:4a:b9:
         9d:1c:8b:0e:48:40:d6:fa:53:1a:ed:53:ec:85:41:bf:35:a1:
         c0:b4:28:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AzrOg5lAkLkRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTAxZDA5ODYtYTEzNy00YzQ4LWI2YjQtZmNiNTJkMmIyM2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtFiP+CmDTlCdqBZP+ACzBxfHZRGMn8vgcW1
VJN6iz7Mcz1Fx0kVmZe3Dx0Tc1n/bsZmngqlZBNrDrOmILR29v187pEPVt2zlSLm
9Ym8ZkSi+b0qQwW78tlOcecaot1mFFHY3TBHOGq7snPb+P1Og9IjAANX4OxEjIQh
zVcXL9M1GVjnIA28f9/6FZNMM/6Pl9Wy0TJZB6eU7yuQGTkN0nhZ2DBwL58OOzwR
4pflp+QfqsrMa9Xcoh43CGGzP+luVhccaXGcPxa3hSVITqpB6Zjv6K0BIJUdAiAA
prt8aPMkHaxcq82tTZVWtANAYxkZE9Vk1QHwAHFUlz8laDF5/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCF21wSpM/1zKuvFoPV1fvEVNEMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzYyZGI2NzUtMmY5YS0z
ZTdlLWFiYWMtMTFjMTJiYWI0NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiYzkkqNRrOGyQ1cIGuKGejAObdwS9OI4rx5awVeLMMHQ/bhxwGvi0w
pkjFwFhhoGHZuUtxi5nVDHh/nY2YNnDQmRHApbeOkEj5gXu/kJDmNQAlqmS4MNkH
8i3M7SY5174w291S7TU0oTPfJPlihlAtaYZY9z2meO53hPvW++dKgIsRXS9AWz/W
YrrcKlMVjPJPsgFfZ+ya7GDEbNRs9efPasBGgyXl8MUtDadPeDZZLAhKloWHFvYO
y9Sv13QFGQUSXfRh1niPRE2LTTYMUb6kxRUl94MwHsKCOHsUw2qkjhuHkl1c+n1K
uZ0ciw5IQNb6UxrtU+yFQb81ocC0KLk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:47:25 2025 by rpki-client