Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa
File:                     3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa (raw, json)
Hash identifier:          4fPn6X1AQ29fAgfcKNCRO1Rv2ir728eU2Wdw+qaMf6A=
Subject key identifier:   25:3F:63:5F:5D:F3:F7:A7:ED:F8:F6:DA:B3:C1:DF:B2:BF:00:E3:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F715391E67EABA320E67B180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.105.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:39:1e:67:ea:ba:32:0e:67:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=815c7d71-1e3b-490f-83c0-df527a966adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:ce:b5:5f:ac:34:ea:7c:15:4d:82:23:22:
                    b8:e4:f5:93:19:5a:06:40:ca:94:fd:69:d4:7e:2b:
                    bb:fa:32:52:0d:a9:c7:26:9a:f1:8c:d6:35:13:94:
                    db:c2:46:bb:c5:d8:0d:48:d2:1e:4b:23:5b:77:b9:
                    b4:db:b9:db:1b:17:49:df:a2:1d:2e:4a:9d:7d:b5:
                    c1:d5:61:e4:ed:d1:b5:8b:c9:c9:a7:93:a4:45:5d:
                    3c:5d:d6:f0:63:f0:86:51:91:2a:7f:30:b1:1f:90:
                    a3:fe:9f:e3:3c:12:f1:fa:d9:07:79:de:1f:9c:c6:
                    2b:b1:06:52:11:28:9b:87:5c:9b:e1:a2:67:77:76:
                    66:ba:73:f1:e0:08:c4:34:6b:a9:d4:e2:55:4d:87:
                    7b:23:81:c1:b3:29:44:8a:a2:a3:ef:aa:f0:ed:88:
                    16:cf:65:60:9e:29:f7:e7:fd:6e:d5:8e:95:6a:fc:
                    3a:a5:1a:c7:05:8f:4c:15:dc:f2:8f:af:bf:c2:fd:
                    78:76:08:db:04:d5:9f:ac:c0:92:11:80:1e:5f:95:
                    7b:b0:4a:e2:f7:3f:64:e4:2b:20:34:ab:54:b1:47:
                    8a:9b:c7:8f:46:42:c4:38:bd:2e:8e:09:cd:34:a8:
                    a1:d4:54:b3:3c:56:c8:01:56:03:78:f4:d3:b1:ac:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3F:63:5F:5D:F3:F7:A7:ED:F8:F6:DA:B3:C1:DF:B2:BF:00:E3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ddbdc82-8889-3f38-a65e-3a72d29556ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:f3:7a:50:f0:0c:2d:e9:6f:71:89:91:1a:36:d8:5c:37:
         24:dd:0f:51:cc:e0:06:0c:dc:b8:7d:e6:47:13:b5:42:8d:0d:
         51:2e:fd:57:9e:5b:f9:f4:55:db:e1:3a:e0:ad:b4:07:90:06:
         a1:d8:b9:72:bd:50:99:9c:a3:13:14:1c:d1:b1:78:7e:04:4b:
         49:98:83:2e:58:d7:9a:bd:20:f3:e4:50:b5:50:64:87:33:25:
         5d:9c:46:c3:bb:cf:4a:26:b5:72:d7:12:92:03:91:76:40:b5:
         62:0e:fc:5c:25:4a:73:42:6a:ad:28:9d:fc:ed:31:53:28:b1:
         5b:48:80:22:c0:f5:ba:8d:56:b6:e5:fc:c6:4b:38:ab:65:59:
         ba:50:e0:56:59:3b:35:0c:72:00:e1:5c:53:1a:ad:b7:29:ea:
         73:c7:ec:0c:ba:b5:f8:f0:cc:0b:58:1d:6d:a6:51:e1:e6:39:
         c5:cf:33:cb:da:b6:9a:c2:ff:08:ae:92:d8:a4:a0:c6:19:81:
         c3:97:64:3f:8e:8c:dc:d5:40:60:cd:d4:85:4c:d8:f4:c9:4f:
         41:5a:ca:d6:69:f8:20:7e:31:78:b7:f2:7c:60:3d:7f:45:d8:
         54:10:9d:97:e4:8a:e9:c4:c0:27:4f:84:fc:03:10:b1:ad:57:
         98:4d:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:09 2025 by rpki-client