Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d568b97-cf15-3489-b925-45945add08e7.roa
File:                     2d568b97-cf15-3489-b925-45945add08e7.roa (raw, json)
Hash identifier:          X12ZQ5WTOw5vgjZk+3Z2GvPSapPoI+FB3j0SU3d6HB0=
Subject key identifier:   CB:DA:A3:E6:0E:79:F0:28:01:B9:0D:02:6C:31:4A:91:FB:C9:D7:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAF64107DCB76F4EBE6CC
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d568b97-cf15-3489-b925-45945add08e7.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:af:64:10:7d:cb:76:f4:eb:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=a221d997-8e3b-4951-b9b4-36f11b0216bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:18:04:3f:01:fd:98:24:73:04:ea:44:a5:
                    19:ab:ea:a1:16:7a:c8:a4:92:e0:b8:03:6f:3f:d1:
                    25:3f:db:63:8d:91:44:79:7e:9d:61:d2:7f:df:ab:
                    00:29:32:5c:1d:6e:34:45:73:b8:2b:68:fa:32:ec:
                    22:c9:b4:10:f2:5f:66:68:fe:3c:5c:20:d0:3e:8a:
                    8d:80:05:3b:98:b4:6f:f3:44:f1:cb:7e:79:c4:91:
                    ac:89:8f:e4:90:e6:84:b5:0d:a4:ed:af:08:7a:62:
                    00:94:d6:70:c9:e7:62:ed:38:2b:b5:59:37:9a:9f:
                    44:d1:ea:e8:ad:35:46:19:a3:91:d0:19:da:03:a6:
                    30:4a:4a:45:1b:4b:da:d9:a8:44:35:db:88:6c:44:
                    9b:a1:b8:f0:2b:2a:a7:ab:7d:af:e2:cf:b7:46:5a:
                    7c:04:59:3b:65:b4:19:d7:83:9d:8b:72:dd:22:36:
                    2e:f4:f2:3e:97:1c:d3:c3:7d:1a:6a:e1:ad:cb:f5:
                    19:28:0f:3c:a1:f0:f3:df:ad:4c:27:97:ad:9b:e7:
                    d6:98:ca:2a:18:ed:2e:48:a5:d8:e9:5e:b2:49:0e:
                    6d:72:d3:1b:55:d8:d1:10:e6:64:37:02:62:ca:78:
                    53:1f:6b:3a:64:09:c8:ee:83:17:62:8b:90:79:75:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DA:A3:E6:0E:79:F0:28:01:B9:0D:02:6C:31:4A:91:FB:C9:D7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d568b97-cf15-3489-b925-45945add08e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:19:b6:02:3c:e6:f9:55:fa:ad:7b:dd:9f:0e:2f:39:32:
         3a:dc:36:ff:95:76:89:d5:a5:04:93:e6:5b:fb:48:d5:f3:df:
         6c:79:6e:7e:9b:2d:da:0b:04:8a:c9:da:69:f4:0e:a1:cd:5e:
         fa:06:95:67:ab:89:ec:8f:48:6b:f6:cd:58:aa:74:d4:36:b6:
         ee:37:1a:95:4b:ae:31:21:01:b7:6a:e2:91:4a:fe:03:c9:b3:
         ae:65:d5:59:c9:c1:b7:eb:16:60:41:7a:84:8f:14:fd:3b:78:
         2e:66:bc:52:05:31:4d:cd:3e:db:00:2a:23:c7:d5:b2:0d:05:
         07:83:69:82:41:82:aa:96:c1:54:ea:e2:ab:f4:c7:82:cb:e0:
         43:c6:d9:61:fa:a8:60:c0:b8:b8:16:1d:36:b5:f4:05:14:a8:
         41:c6:10:10:f1:dc:01:0a:42:24:c8:ae:78:cd:07:5f:1d:7c:
         67:8c:cd:c0:c1:d1:0e:d2:eb:bf:3a:f3:a0:82:22:0d:08:21:
         de:27:88:56:e2:64:04:50:6a:68:94:84:d8:bc:15:45:8a:54:
         86:94:7b:bc:9c:d7:8e:35:7b:cd:f4:42:56:8c:9d:7a:16:8f:
         65:89:fd:0b:45:60:c2:04:96:55:9c:fd:a3:da:5f:5b:c8:1c:
         55:39:0c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:27:15 2025 by rpki-client