Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562f858-5992-347b-a1ea-567709f6c154.roa
File:                     3562f858-5992-347b-a1ea-567709f6c154.roa (raw, json)
Hash identifier:          zJsSmx29yLnwZ0gcvnKCXX7oFLtwYYudvhYhktRdWTM=
Subject key identifier:   8F:8F:C4:D2:ED:AE:42:6E:D8:66:B2:2A:75:3A:EE:0C:3A:2A:AD:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB88D42597FCB0417BEBAD198
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562f858-5992-347b-a1ea-567709f6c154.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     6167
IP address blocks:        72.105.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:42:59:7f:cb:04:17:be:ba:d1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=fab9a1c3-d245-46fd-8704-fa4f233ba631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:ce:44:1c:ad:2a:3a:19:63:bb:07:2b:b3:
                    2d:dc:39:e8:5b:b0:d7:1f:bc:8c:81:db:21:e1:d1:
                    fa:e5:41:a0:d7:65:a3:ec:d3:86:27:8e:63:6b:bc:
                    69:5d:b1:99:fd:36:86:9c:48:0d:65:07:f8:7e:01:
                    11:c9:ef:3a:f1:c5:2d:08:06:a0:61:62:0a:37:07:
                    d3:e4:d5:03:ce:37:66:eb:6b:e8:96:35:51:09:42:
                    90:a4:b4:a9:d4:db:ec:ad:bd:3e:d5:00:97:49:b7:
                    a8:94:7d:e8:17:fe:35:17:cd:87:44:83:ae:5d:50:
                    9a:0e:cb:87:3a:0d:a7:30:a6:a7:7f:d4:31:fb:06:
                    eb:af:35:36:7a:cb:76:eb:b6:22:53:dc:3e:7a:40:
                    28:5e:bf:8f:54:22:18:de:f7:ae:20:5a:05:37:27:
                    46:bb:ee:e2:2c:24:e8:0b:42:23:52:c9:d2:0f:0f:
                    07:ba:9c:47:8f:fc:cb:4b:ee:e1:53:99:63:2c:65:
                    7f:6a:41:ea:8a:cb:88:27:a4:41:f1:e9:c3:92:37:
                    a5:a9:6f:2b:40:4e:79:8c:e3:3a:df:1f:30:b4:1a:
                    b8:65:c1:15:86:a7:44:3f:3f:f7:b8:44:aa:47:42:
                    54:20:d7:06:91:8e:52:3f:96:1f:14:ba:54:2a:74:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:C4:D2:ED:AE:42:6E:D8:66:B2:2A:75:3A:EE:0C:3A:2A:AD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562f858-5992-347b-a1ea-567709f6c154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:dc:00:8e:8e:34:56:d4:61:6d:d8:34:ef:be:8c:95:44:
         1e:5b:92:aa:b7:a2:8b:84:77:8c:35:0c:e8:80:1d:af:37:87:
         7a:cb:1d:61:72:1f:22:12:e6:87:12:40:d2:67:84:c3:47:64:
         b5:42:01:4d:e4:04:51:e9:fa:13:9b:31:5f:8e:9d:cc:ca:c5:
         8b:5e:fa:9c:31:8e:fa:15:de:10:c1:19:84:f9:80:cb:c2:b8:
         b7:6e:72:09:9c:5d:b1:ec:41:59:0a:b9:57:69:e9:ca:d1:d0:
         a7:d6:87:14:a8:45:56:2a:72:51:32:c8:87:51:58:d7:67:95:
         0d:9a:63:04:2e:2f:40:ce:8b:c5:b0:cc:e1:fa:57:a5:09:1e:
         28:01:1c:d6:df:54:5e:fc:57:17:0c:21:d9:fa:74:30:6f:dd:
         9d:d1:e3:1a:ee:6a:8b:b3:a8:bb:5d:01:a7:c8:90:3d:0c:e5:
         fc:74:4e:34:a8:e1:f6:1a:2b:d9:bd:75:15:e3:bb:54:60:61:
         3f:d6:2c:e6:02:78:0f:d7:22:23:d0:29:8d:59:fd:60:46:b5:
         25:37:2b:31:47:ad:f3:b2:b6:59:6d:21:b4:f1:27:cc:eb:f9:
         09:a2:d0:5f:f3:0f:30:86:04:87:08:9d:ed:4b:b0:5c:0f:8b:
         4c:d1:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:27:13 2025 by rpki-client