Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa
File:                     2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa (raw, json)
Hash identifier:          32nCC8bNvDYTmrJPEBDASfBidYlnAv6fLF66JZpYCDk=
Subject key identifier:   85:3B:26:B2:DB:9A:7E:DF:50:1E:4C:4F:17:B8:A2:67:8A:C0:38:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB4C0294CFBFF82736D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b4:c0:29:4c:fb:ff:82:73:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=d6a2d73c-6838-4f48-af67-cd7871762749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:31:15:da:92:f3:85:92:58:8e:f5:35:82:
                    a0:bf:c2:5d:9d:43:1e:0f:8a:90:51:09:7a:de:1e:
                    bd:e8:ff:32:4a:a1:8c:5f:15:4a:f2:a1:b7:e1:16:
                    70:e4:c7:7d:01:ae:ef:f1:6c:40:c7:21:62:d1:ef:
                    27:dd:e2:e2:2c:5f:78:0d:c0:87:e6:9f:7d:4e:b0:
                    84:00:96:49:25:42:7b:66:f1:21:28:85:d5:28:e9:
                    10:44:c2:6c:21:2d:09:60:b7:88:1b:9a:50:64:e5:
                    21:00:ab:03:b0:b6:c7:d8:e2:3d:31:7a:cb:3a:12:
                    cd:e7:3f:ee:8d:b9:67:f1:25:d4:25:12:37:be:4e:
                    39:9f:a0:da:f8:01:cc:59:e4:a5:9a:f1:44:87:44:
                    e7:86:00:48:5e:02:39:e1:74:b2:b7:40:03:63:81:
                    3b:1d:ed:39:74:9a:26:52:13:ef:4e:ce:29:84:64:
                    a1:05:df:7a:73:70:95:9d:4a:00:39:d2:3a:63:ae:
                    c3:90:0b:48:ba:bc:b9:cb:f5:4a:f0:f6:a2:7a:92:
                    a6:2d:33:a8:ef:35:68:de:6c:cc:05:b6:86:b2:5b:
                    2f:de:11:b4:39:ed:db:4c:32:f4:da:2c:05:f8:5b:
                    e3:20:1d:1e:88:32:c6:e7:d0:bc:f5:17:38:8e:5b:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:26:B2:DB:9A:7E:DF:50:1E:4C:4F:17:B8:A2:67:8A:C0:38:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bc23a41-668d-30ba-bb01-6fdd76b672e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:32:1a:72:58:d7:be:aa:d9:15:47:ae:a0:25:53:2b:f3:
         73:5c:8e:44:6e:40:16:27:73:84:85:0d:77:70:1b:f4:1c:d0:
         4a:de:67:2a:1c:5b:72:c0:82:7e:de:6a:dc:b5:99:f5:06:30:
         2e:bf:79:51:91:90:7a:b8:5e:02:a6:d9:44:58:d3:92:4c:42:
         ef:60:3f:34:a6:23:3e:6f:18:65:fd:db:67:41:0e:0d:15:77:
         55:a5:89:7e:27:d8:14:f6:54:a9:5e:30:b8:b7:be:e6:84:b8:
         a0:99:e5:82:8f:ee:57:9f:01:71:3b:3c:91:78:d7:7d:25:d7:
         79:00:4b:03:49:33:d0:2b:9f:d1:64:84:ba:4d:dd:fb:fd:f2:
         dd:8c:d1:3b:f6:ba:77:ec:de:fa:55:2b:bc:8a:89:bf:14:dd:
         7d:35:ad:51:4f:fb:75:6c:6f:e5:ef:2e:c7:ff:98:fd:b5:34:
         8d:8b:6e:be:3c:f7:9f:a6:a5:a1:f7:19:2b:a1:71:c3:3c:3b:
         38:fe:1c:fc:a3:1c:fc:6d:ed:02:c4:83:c3:3f:9a:32:81:6f:
         9a:e7:a7:71:7e:72:36:96:76:61:6d:99:c3:d8:a7:dd:d9:16:
         00:0b:4c:a3:b1:df:3c:ea:25:4e:89:b5:08:33:52:b3:ef:5b:
         02:97:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:32 2025 by rpki-client