Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ba7edfd-d0b9-3eae-9319-dbc090305591.roa
File:                     0ba7edfd-d0b9-3eae-9319-dbc090305591.roa (raw, json)
Hash identifier:          8VeREp8OLFIIJwRXRHKfhWGFotRXblLIp2RDO7stREc=
Subject key identifier:   6F:2D:4F:D5:97:E9:8C:CB:96:16:36:46:56:DD:AB:68:7E:FD:FF:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB88D33E7DD1866DB95741800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ba7edfd-d0b9-3eae-9319-dbc090305591.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     6167
IP address blocks:        72.105.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:33:e7:dd:18:66:db:95:74:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=63c5a8c9-a775-4e0f-94e6-4ec12473be4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:93:f2:f0:b2:af:5a:56:af:dc:0f:d4:cf:
                    ae:40:ee:77:7f:3b:6e:b8:70:ee:de:e6:83:0a:a0:
                    51:fe:cb:96:ee:ea:00:11:63:60:ac:6e:06:99:69:
                    f4:50:6b:83:1c:1d:a4:57:ea:2a:6d:1d:98:53:9e:
                    b8:57:10:95:b5:07:e4:1c:9a:bb:cc:c1:d9:52:9d:
                    5b:ea:16:05:23:ff:6b:d9:48:8f:34:7e:98:f9:63:
                    c1:8d:17:0d:c6:fa:0d:e0:14:36:69:75:a7:4b:f3:
                    ec:ae:69:b5:e2:6b:81:dd:06:0b:e0:be:2f:7c:22:
                    83:94:d0:48:cf:4a:ee:b9:fd:0c:05:eb:42:e1:b3:
                    74:7f:49:88:67:cb:5e:50:39:29:67:e1:9f:96:a3:
                    34:b5:43:6d:13:f1:8d:a6:72:80:de:21:d9:31:c7:
                    f5:b8:dc:20:f7:6d:37:8a:0f:fa:f2:e3:04:84:87:
                    81:94:09:37:9c:33:0e:af:2c:f4:3d:1e:95:57:be:
                    03:08:bc:93:2a:d0:af:7b:e4:40:64:06:be:6a:2b:
                    9e:bb:9a:0b:e4:e6:2b:35:7c:3a:6d:06:dc:ee:af:
                    98:49:42:93:60:e8:4d:1f:33:cc:fd:99:3c:01:2b:
                    ee:90:1f:15:3f:7a:90:78:69:d0:47:0a:84:1c:30:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2D:4F:D5:97:E9:8C:CB:96:16:36:46:56:DD:AB:68:7E:FD:FF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ba7edfd-d0b9-3eae-9319-dbc090305591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:00:34:d6:8a:e3:3c:f3:52:ad:5a:d3:49:30:75:c0:53:c9:
         90:c6:8f:94:8c:71:92:99:c5:fd:52:52:78:b5:e4:85:8e:72:
         03:89:66:d7:1b:75:4a:10:1e:e3:12:8e:7a:7f:64:ff:b4:64:
         a0:f4:fc:77:65:74:7a:08:15:bb:d6:85:96:c8:3b:4f:91:a4:
         11:41:37:6a:a9:6c:66:15:4a:45:ae:88:b0:27:3e:86:3a:83:
         2d:8c:60:29:89:46:cc:6c:c5:6c:4c:43:37:90:65:95:f3:20:
         a0:24:4c:18:b3:1a:3c:29:95:36:be:0d:41:ed:00:b1:7b:26:
         f5:05:47:69:b1:bc:fa:9b:0a:60:da:e2:b6:3e:8e:2d:3f:c2:
         a9:c8:8c:f4:74:12:4b:d2:a5:b2:e1:73:a6:4d:b7:63:3b:17:
         69:39:6c:5f:73:fb:f0:43:38:0c:6b:66:e3:19:17:fb:25:a5:
         bf:00:97:a9:63:59:02:b9:d9:61:73:99:c6:b0:ae:35:de:31:
         29:3c:42:ce:38:ba:96:65:ac:5c:41:00:bf:70:65:2e:ef:f3:
         7d:b9:53:d4:f5:d1:49:7f:a1:7e:d0:77:cc:0e:a1:33:60:cc:
         e8:5d:66:3c:f2:92:d0:60:06:cc:bf:5e:6f:e7:95:48:16:fd:
         ed:3d:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:54 2025 by rpki-client