Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa
File:                     2f7d2626-4199-3dd4-8286-283337f7fe2d.roa (raw, json)
Hash identifier:          90fV3tLOpLvOFY9O+P40ToU5YXelnKY6NCB65QcouLU=
Subject key identifier:   C2:FB:AA:DF:46:34:95:EA:FF:A9:99:30:40:AF:5F:6F:94:14:AC:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F809247AD811DEB51C5F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        72.69.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:09:24:7a:d8:11:de:b5:1c:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=d253db81-e72a-4b19-af04-1ddc90432a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:06:19:04:df:2a:80:f9:e5:27:f5:70:b5:
                    b4:1f:27:c7:bf:69:14:fe:ff:8f:3e:68:85:cc:16:
                    95:89:c9:14:09:3d:53:08:56:ff:65:f1:f7:f4:6f:
                    e1:c0:83:45:71:bd:7a:96:8e:a2:26:c5:3a:66:e8:
                    c4:46:f7:b8:e1:23:98:6b:ee:ba:81:d5:2b:48:e7:
                    82:95:fe:ef:e5:21:f7:d4:8b:84:61:ad:11:9a:c5:
                    fe:37:77:77:86:bc:1e:11:bf:46:ef:28:82:8a:e9:
                    a7:57:72:91:82:06:0e:28:45:5b:0a:57:0b:78:fd:
                    c2:18:95:d5:a7:1e:06:7d:19:13:f3:07:fe:c2:37:
                    ea:01:5e:ac:a9:f2:71:d3:a8:96:79:f0:c0:a3:9b:
                    25:8d:71:2d:cb:cd:52:b3:cb:bf:8b:50:f3:0a:da:
                    f0:74:34:e5:3d:98:01:81:44:f4:91:63:59:4e:60:
                    65:98:cc:60:a8:a2:98:55:36:1f:fb:b3:e4:d3:31:
                    6d:aa:0a:cf:07:86:9a:7a:33:ea:56:93:1c:32:5f:
                    b4:ac:67:43:78:fb:c2:20:f2:2b:cd:3c:4b:42:76:
                    df:1a:ed:33:b4:b7:02:f0:79:7e:86:e4:80:2a:43:
                    9f:92:3b:9f:4f:e9:f7:1c:89:b9:42:4f:e3:af:1a:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:AA:DF:46:34:95:EA:FF:A9:99:30:40:AF:5F:6F:94:14:AC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:e4:e0:9d:07:f8:64:79:4e:b4:c9:b5:0a:ac:4e:69:b4:
         b1:03:ad:7b:f0:2b:0e:ec:c7:21:2a:9e:f7:34:98:5e:68:4e:
         55:0f:6e:bd:58:53:f4:31:be:a7:80:d2:18:66:7d:ea:05:b1:
         58:b1:52:43:82:86:df:c7:7f:6d:fe:a9:7c:b5:9c:71:a4:53:
         de:19:24:75:e9:5d:2a:69:49:11:a3:15:95:8c:5e:83:03:63:
         80:85:f2:19:19:32:6b:48:5f:c7:e1:b9:3c:32:dc:ed:60:94:
         47:05:b6:f4:bf:1e:fc:93:7f:a0:7c:3f:75:f1:c6:e8:e1:f7:
         16:24:0b:e0:9e:73:90:e1:29:39:86:af:75:27:e1:74:90:10:
         d5:e4:ef:e0:18:89:47:36:22:85:d5:d5:86:c2:05:88:a3:a9:
         d5:7d:e7:bb:c5:e2:23:27:11:9a:61:27:fd:09:24:d1:d9:d0:
         d7:41:8a:ac:53:78:92:94:33:db:5f:50:95:c2:a4:52:6e:d5:
         8e:92:f4:f0:f0:58:51:8e:4a:f3:5f:53:ee:2e:90:62:07:01:
         7f:46:78:9f:ea:84:35:a0:b5:7b:2c:01:25:46:3a:23:e1:da:
         29:a8:75:a0:77:1b:d3:97:04:1e:10:a8:6c:89:31:9e:34:6c:
         07:f8:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:09 2025 by rpki-client