Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c602457-9d8b-39a3-acb3-4ec21e6394af.roa
File:                     0c602457-9d8b-39a3-acb3-4ec21e6394af.roa (raw, json)
Hash identifier:          4TQUv2aIdsRNNnU8fjM1L7UP457K3rdLK6GJt3g5tRY=
Subject key identifier:   35:BE:0D:45:CE:A2:6F:93:00:7D:A3:5E:87:F9:9E:E4:23:CE:5E:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB414DC78534796BCAD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c602457-9d8b-39a3-acb3-4ec21e6394af.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.107.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b4:14:dc:78:53:47:96:bc:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=2e0059ec-dab7-44c1-b7f4-882bc24ee3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:02:20:6d:fb:5e:8e:eb:de:7e:fd:88:a6:2f:
                    35:ad:55:3b:71:a1:7d:5f:c2:1a:78:da:7d:4c:98:
                    1a:2c:7c:0d:68:20:36:fa:63:43:17:50:3b:c1:8d:
                    41:6a:55:1e:e3:a0:65:fb:9e:76:79:04:6d:13:d7:
                    f8:6e:61:ac:40:cd:ec:ab:93:ec:30:ae:e4:e2:5f:
                    a7:98:36:42:dd:ef:d5:c8:12:bb:0b:32:e0:a8:e3:
                    e2:8c:68:ce:a3:15:70:9e:ef:04:83:0f:d5:aa:1f:
                    79:34:33:dc:37:10:2a:06:ff:7a:f2:c7:90:68:eb:
                    c3:f9:5f:94:b1:ae:3a:75:44:ce:f4:86:cf:a8:6f:
                    3e:33:88:14:4a:3a:e9:7b:5e:90:23:4f:6b:1d:dc:
                    21:e4:79:89:fc:74:6b:1f:ee:8c:c4:c8:e4:5b:aa:
                    be:91:9e:2d:ed:4f:18:b2:57:2e:b1:d5:5d:f5:ba:
                    5b:8a:ad:fa:f9:65:f0:7f:93:ae:13:55:5c:7b:7a:
                    3a:1e:2f:82:ba:ff:42:2b:c0:86:9d:c8:21:81:9b:
                    4f:93:e2:2e:8e:5e:6d:6e:d9:8c:d1:ea:55:6b:e5:
                    a4:d1:5a:dd:fc:12:b9:86:1b:dc:54:73:80:a2:65:
                    eb:32:2d:9b:91:ac:c9:cd:ba:81:3a:8b:c6:12:29:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:0D:45:CE:A2:6F:93:00:7D:A3:5E:87:F9:9E:E4:23:CE:5E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c602457-9d8b-39a3-acb3-4ec21e6394af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:68:05:75:25:7d:90:9a:f9:dd:8f:ff:0b:d3:2b:72:bc:82:
         7e:77:02:b4:72:91:61:fc:41:14:33:f1:7c:2a:73:6c:31:21:
         d4:41:55:f3:58:16:48:c7:15:89:3d:2e:b8:44:7b:41:2f:11:
         d3:38:1f:c0:98:5c:e5:03:03:79:4b:d5:74:22:1b:be:22:b7:
         74:9c:9d:17:6d:cd:d8:57:42:dc:2e:de:c2:ef:44:1c:45:3e:
         e3:88:11:a3:c7:3e:a3:0c:c8:cc:0c:9d:55:66:f7:92:2c:2c:
         cb:a1:49:a0:7d:a0:4b:ee:9e:ba:f1:bd:ff:22:06:81:a9:80:
         0e:d8:2c:32:0f:54:15:80:41:fc:b4:5c:fa:d1:8e:9a:23:e0:
         41:02:48:71:89:78:c3:de:e3:a0:0a:57:56:7f:a6:8e:45:5e:
         6c:92:46:a1:2d:0d:b3:76:76:1a:ae:e6:12:ad:09:7e:97:02:
         0f:cb:48:39:9e:d1:78:56:93:23:9e:20:71:2c:6c:76:e8:93:
         83:c2:e5:86:b7:be:e2:2b:63:d2:00:f6:cc:c7:7f:07:04:2a:
         96:37:e3:e5:1e:c8:68:1c:49:49:ea:39:f9:cd:6b:11:9b:81:
         53:63:b3:7b:43:75:fb:f6:9d:24:2e:fb:a8:b2:f0:d1:2d:ef:
         0f:70:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:32:51 2025 by rpki-client