Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa
File:                     3f3c30a3-734f-32db-96eb-b987d5448e8f.roa (raw, json)
Hash identifier:          4HMxDCx3eW9Hv0gD7ptCGTyNQwdOXujrokoIx/qS9oQ=
Subject key identifier:   3C:6A:D3:CA:8B:A7:DE:EB:34:B2:96:60:4B:AD:F7:70:C4:2A:75:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD28F350674C0135093B88
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     701
IP address blocks:        72.88.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:28:f3:50:67:4c:01:35:09:3b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=44304356-2cb7-452b-89ed-3e44b48f62d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:71:7e:77:35:c5:27:f6:4d:ea:d1:f6:8e:
                    d0:66:b4:83:40:ad:b7:a4:ea:bc:c4:98:c2:e2:84:
                    8a:37:62:15:a0:08:2b:b2:e6:ff:13:f7:79:e1:c9:
                    2d:80:a6:40:d3:66:6d:d2:39:6a:a9:5e:8b:e0:48:
                    c8:68:a2:41:44:79:cd:ae:51:07:3a:e6:53:9f:2d:
                    d1:fa:a1:5b:59:1b:a3:fa:8b:45:be:fe:c6:57:a2:
                    e9:e8:3d:c2:71:70:5b:a5:1d:8e:12:f9:4b:d5:27:
                    9f:94:4a:e6:a0:50:2a:5e:87:95:b5:fd:78:f0:6f:
                    fb:70:14:cd:6c:4e:81:43:45:f9:9a:55:69:78:ae:
                    9a:9e:01:19:46:e6:fd:df:40:3e:08:67:19:bb:1e:
                    a2:00:2f:27:de:09:96:18:1d:62:01:9d:a2:7b:70:
                    ef:5b:7e:fe:d8:8a:73:b7:a0:80:f1:9c:65:0c:e6:
                    15:5f:09:c2:a3:99:0c:ae:fe:b3:1e:df:17:e4:79:
                    d0:8a:62:67:ff:1c:9b:11:12:85:43:dc:77:a9:f8:
                    09:5c:9e:c3:e8:13:da:43:f9:f7:b3:4a:3b:d8:23:
                    61:bd:eb:f7:3f:30:25:b6:87:9d:81:e8:0e:40:b2:
                    5f:29:b7:af:b6:a6:e1:a3:f7:27:75:80:29:a6:26:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:D3:CA:8B:A7:DE:EB:34:B2:96:60:4B:AD:F7:70:C4:2A:75:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f3c30a3-734f-32db-96eb-b987d5448e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.88.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:50:b1:05:dc:1b:02:0d:ae:d3:4d:45:d4:f9:ec:74:5c:
         5a:0d:78:33:43:0b:fd:b9:2e:76:f4:3f:e0:5c:31:6f:08:7a:
         a9:48:63:72:c7:ad:7f:a7:4f:1e:00:aa:e1:f4:50:94:19:98:
         76:5c:24:31:88:d6:f6:f3:2f:6f:d5:e9:bc:44:dc:dc:70:ef:
         78:7c:0d:47:87:00:37:8f:ea:01:63:d4:1d:6e:03:8a:42:3a:
         94:54:a6:bc:ac:88:ab:be:98:9f:f1:18:dc:33:72:92:97:64:
         34:ad:1f:c5:f7:61:62:a9:40:f5:fe:cd:8d:6a:03:c2:20:d9:
         39:ac:3f:0a:21:6b:8f:3e:0d:6a:5a:ec:ac:ca:38:4d:5b:ad:
         b8:5f:0d:3c:5e:27:98:6d:d2:8e:ec:79:f7:4d:53:cf:ba:5c:
         5e:a6:3c:cb:c9:9e:63:4d:de:59:e5:c6:e8:5d:c1:74:72:36:
         5e:6a:fc:b2:ca:99:ba:19:26:f5:a5:95:f3:99:76:4b:b0:11:
         97:8d:f7:4d:fc:3e:43:91:51:7d:00:4c:6f:69:f3:d3:df:81:
         16:31:e6:d0:f9:10:64:29:08:04:69:f0:13:1e:0a:ff:c7:1d:
         0e:0d:25:ed:1f:58:eb:3a:75:e9:91:81:e5:13:f9:4d:78:e0:
         fb:fe:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:55 2025 by rpki-client