Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4e7702d-bd25-3e37-9cd1-4cf6eb27d78e.roa
File:                     e4e7702d-bd25-3e37-9cd1-4cf6eb27d78e.roa (raw, json)
Hash identifier:          cdcqZu1E11jaztXWciPZPmXnMxmYNGvI3t1hZH+4W2M=
Subject key identifier:   40:7C:15:1C:B1:31:BB:19:82:EC:84:82:94:4C:B4:72:D1:97:D8:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0FD865E547827644A960
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4e7702d-bd25-3e37-9cd1-4cf6eb27d78e.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.106.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0f:d8:65:e5:47:82:76:44:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=ad9540b5-db62-4682-a8c5-fca89d84031f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:76:c4:12:15:d7:9c:e9:fa:e6:99:11:e5:
                    d6:16:c9:19:d4:05:53:84:4b:35:11:9a:22:d7:29:
                    fd:b0:1f:ec:98:ec:95:ec:63:4b:f3:6c:ae:65:a7:
                    dc:43:65:a6:d0:b9:35:53:35:c6:ab:56:59:b4:49:
                    06:7a:94:ab:ca:c5:1b:c2:1e:ed:5f:b3:34:f2:35:
                    65:81:47:d4:cb:e9:58:a3:a0:9b:ed:c1:48:58:ca:
                    a0:f3:a6:74:54:2e:70:68:07:18:8f:2c:02:1d:21:
                    9d:fc:73:7c:31:72:7b:af:6e:b6:3e:cc:ed:c1:1c:
                    04:0b:b0:69:5e:8b:63:a5:be:7b:20:19:e6:de:8c:
                    8e:ad:7b:cd:e0:59:8d:29:48:ae:8a:0f:20:e6:49:
                    91:65:6a:22:d0:f0:a2:0b:df:3f:f8:75:aa:88:5d:
                    48:8c:36:22:ba:27:64:4b:2b:11:c8:0a:09:ca:ad:
                    5c:d6:97:45:29:1f:e6:49:f5:f0:e7:27:4e:58:9a:
                    2f:e6:35:5f:3e:3e:8f:6b:64:81:c2:f8:97:c9:cf:
                    5d:c4:69:78:ea:a0:58:cb:20:67:ae:e4:4a:50:2f:
                    d0:fb:fc:75:ff:9b:5c:b5:c6:da:e3:a5:72:04:c2:
                    b3:20:b7:ef:6b:30:c2:c1:d9:05:26:93:12:e0:bc:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7C:15:1C:B1:31:BB:19:82:EC:84:82:94:4C:B4:72:D1:97:D8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4e7702d-bd25-3e37-9cd1-4cf6eb27d78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:96:3c:85:85:85:d8:d8:32:78:81:83:68:3c:21:d6:7e:
         4c:9d:c1:66:66:20:9f:9c:cc:15:97:24:55:53:be:d1:a3:45:
         42:8b:5e:e4:49:d0:da:39:ba:6c:db:fc:5a:7f:3a:1f:92:07:
         cf:cf:65:6e:0e:66:2a:f7:98:aa:91:d6:2d:43:51:4e:11:19:
         1c:49:1c:11:50:08:40:0a:1c:ff:5d:b9:ef:45:af:e7:46:a2:
         54:d0:b6:0a:e2:bb:8b:a6:0d:e3:30:9a:ca:6a:d1:d8:75:95:
         88:03:fd:48:5a:0f:03:bf:44:3a:39:7b:32:d6:af:73:a6:23:
         95:d7:bf:be:61:64:62:d6:08:23:a3:c9:2a:ec:3f:dc:15:9c:
         06:03:ae:e4:43:d0:9c:d2:66:b6:aa:2e:7f:0b:97:e5:20:e3:
         f7:06:ea:1d:c5:c4:ab:af:2e:17:e0:0b:23:96:40:69:6c:ac:
         c7:47:c9:60:86:79:60:fb:b7:c5:93:07:4e:47:dc:c9:7b:0b:
         58:c6:a9:55:59:91:db:b1:93:c1:6c:61:f2:ed:0e:a0:c8:70:
         7c:e2:87:be:e6:46:80:4e:1f:32:56:a3:20:e0:95:a9:f7:8a:
         4d:58:57:38:4a:f9:f3:12:1f:d1:e1:5f:7b:2f:26:6a:2e:a3:
         a9:ca:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:41 2025 by rpki-client