Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c75bcba9-446e-3993-bf3e-8484505f0766.roa
File:                     c75bcba9-446e-3993-bf3e-8484505f0766.roa (raw, json)
Hash identifier:          JG5ZcoS3ktCygSfXNaamlz7arPWQcEfDgWf7eE8aa/w=
Subject key identifier:   16:0F:9D:A2:91:91:6B:BF:7A:27:44:C2:17:3F:71:C9:8B:D8:30:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0877BE2C09D5A9B68100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c75bcba9-446e-3993-bf3e-8484505f0766.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.105.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:08:77:be:2c:09:d5:a9:b6:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=b0c1d58f-021b-4c1b-bbf5-4787a7f297d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:7f:42:13:76:2f:ba:3d:9e:54:c7:ee:ad:
                    34:d3:62:b4:8e:b8:5d:e0:5c:81:9c:0a:14:58:1e:
                    6f:05:d6:58:84:0a:77:b8:9d:2a:c8:90:67:ce:23:
                    7e:5d:d1:98:49:e1:01:0d:17:26:5d:2f:81:d4:d3:
                    ba:6f:f3:0f:c7:27:b6:6e:c7:d7:93:48:19:9c:0b:
                    7a:69:c1:9a:45:c7:09:f7:8f:39:95:a4:df:cf:6a:
                    bc:5b:31:87:58:73:a3:4c:4a:b0:61:2c:b8:ac:f6:
                    fc:ca:9e:c0:57:c3:90:03:29:67:02:e0:9d:bc:49:
                    bc:b7:69:8e:ba:70:ea:9d:a2:0a:76:ac:39:7c:6d:
                    72:24:12:6a:3e:12:f8:d3:f1:00:ee:2b:bb:f2:da:
                    ac:f7:c2:9c:02:dc:45:8c:38:45:3d:6c:21:e0:2c:
                    d5:5b:36:5e:db:48:2a:01:56:a5:f4:84:28:4c:69:
                    3c:75:df:4a:1b:74:3e:72:bb:58:65:69:72:4c:b4:
                    35:26:35:c0:9f:c9:08:e2:b3:dd:06:38:79:49:37:
                    63:4d:4d:7e:54:9a:99:43:cd:79:0e:5b:27:59:61:
                    fa:5f:9e:4f:8d:39:17:76:c9:8e:39:6e:a1:e5:71:
                    a5:38:2f:d5:90:21:13:29:f5:b8:e9:0b:5b:66:2b:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:9D:A2:91:91:6B:BF:7A:27:44:C2:17:3F:71:C9:8B:D8:30:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c75bcba9-446e-3993-bf3e-8484505f0766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:05:fc:19:04:7c:77:b8:2f:04:d1:a2:48:5b:c7:75:88:30:
         ed:85:5d:8b:b0:13:46:93:35:a4:40:98:13:44:75:ca:6f:96:
         39:ee:56:98:0a:98:af:7b:67:08:ea:62:df:67:3d:15:f2:38:
         33:d3:ad:22:ee:2b:6b:a9:22:91:0e:34:bb:a3:98:cd:5f:a1:
         50:a6:23:9d:27:d9:1f:24:89:80:dd:23:e0:3a:4b:cf:39:71:
         8e:3d:3d:1c:9e:06:95:40:e8:a8:eb:d3:3d:9b:70:44:dc:32:
         6d:12:cc:cc:21:43:37:9a:20:74:55:85:21:2c:32:a9:7b:3a:
         50:4f:73:e6:ce:fe:71:13:70:1a:42:5c:ba:a6:21:68:1b:64:
         7c:ab:8d:32:de:fe:cd:12:8e:54:ae:d6:e7:9b:bb:fb:11:0d:
         38:9e:57:da:0b:5d:c1:57:f6:1e:69:96:29:1c:b0:23:83:94:
         e0:df:3e:90:fb:95:b9:18:f3:fd:c6:b8:8a:1d:22:58:a2:55:
         db:f0:01:2f:89:93:95:b5:ca:6c:84:e5:d2:96:a7:29:35:2d:
         17:24:11:1b:ce:65:c9:b1:d7:5f:d2:d7:48:5c:59:83:07:ec:
         87:a6:26:5f:63:1a:99:e2:f6:f1:ab:54:72:fe:b6:08:ce:9a:
         94:af:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:05 2025 by rpki-client