Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
File:                     ec68203b-77b6-3b06-9edf-d20bc17949be.roa (raw, json)
Hash identifier:          cYc5Utkq9X8iGUVWUFb2C0qynV62gW0JKZZZXlnLi0M=
Subject key identifier:   1C:B1:CE:C3:A0:FE:F4:EA:0C:02:49:5B:18:49:C4:7B:F9:7C:60:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC05BD837838572C321500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.96.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:05:bd:83:78:38:57:2c:32:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=32d6f693-dee2-4a16-9358-2953bb825718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:33:93:24:00:11:d7:a4:57:4f:41:6f:86:
                    88:d6:d7:9e:ca:27:76:39:71:2d:76:af:24:54:60:
                    6a:ed:99:33:ab:cf:6c:37:6f:21:1b:26:b0:f2:d8:
                    6c:00:d6:9d:b4:15:ed:ba:8c:87:00:b1:ca:f7:15:
                    34:52:f4:b3:64:aa:a5:dd:b6:1a:56:f7:30:48:e5:
                    d5:3f:33:e0:3e:08:5d:e3:d1:e8:d3:2a:6c:e9:40:
                    29:40:2e:1c:64:b9:79:df:87:04:98:78:0d:e0:df:
                    b3:d2:01:75:2b:23:74:05:33:19:a7:65:b7:7e:31:
                    4c:7c:11:6a:6e:ff:4b:11:f4:7d:2e:e9:5c:4c:c2:
                    c4:4d:12:f3:87:77:39:39:dd:b3:d6:83:ef:be:79:
                    e4:ec:00:f2:09:ce:4f:e8:98:ac:5d:a9:ae:88:d9:
                    6c:ce:f5:59:63:ad:33:25:97:ce:d9:d8:91:ce:ea:
                    f9:2f:c9:bc:33:cf:6e:4e:67:7c:c7:2b:84:82:2a:
                    ab:eb:9e:28:7f:72:dd:80:ff:87:2f:ae:1b:13:fe:
                    59:d4:0e:c4:58:b5:51:0e:53:52:e3:bf:db:02:18:
                    22:71:2a:48:80:67:ea:d4:27:34:d9:66:54:89:d3:
                    a9:bd:72:3d:1f:93:91:53:37:37:49:3d:f2:c1:8c:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:CE:C3:A0:FE:F4:EA:0C:02:49:5B:18:49:C4:7B:F9:7C:60:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:62:29:dd:55:dc:9e:d3:af:8b:51:6e:ef:0b:33:e7:30:a5:
         01:34:71:9e:c3:f6:35:5e:7e:b6:71:48:f1:ad:d4:cd:fe:71:
         d0:1d:43:2c:5e:a9:97:21:91:2e:61:d9:72:2d:04:3f:20:b7:
         9c:fe:bb:57:cc:1f:b8:84:f6:65:22:f0:8d:62:ff:94:96:d1:
         13:87:09:e9:f7:31:c2:6d:90:97:a2:c1:76:a4:dc:e4:47:92:
         57:c4:aa:95:b1:ce:3e:e0:30:12:32:c9:da:02:43:8e:4d:a1:
         4b:95:d9:5f:b3:e6:e0:ac:eb:2d:04:8e:f4:d2:5a:0f:94:51:
         1e:6e:5e:9d:11:fa:bc:fb:18:74:60:27:e1:d9:8c:71:7d:be:
         14:b6:38:73:98:48:97:04:d9:7e:09:e6:56:9b:df:05:5f:db:
         68:b6:5b:7e:ed:e3:a9:d8:8b:84:04:64:90:6a:ad:fd:3a:9c:
         e1:fa:56:20:09:bc:c2:de:2d:1a:b4:ac:e3:1c:13:3d:32:83:
         8b:21:d5:48:8b:dc:f0:96:aa:4a:91:ef:93:91:4a:0d:4f:6f:
         c7:bb:0b:78:aa:55:f2:86:cc:4b:7e:af:b5:9b:d9:7d:c3:d2:
         c3:d4:a0:8b:61:b2:09:a5:b3:e6:5e:db:20:86:fe:b5:9c:28:
         d5:73:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:04 2025 by rpki-client