Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
File:                     4a52b50e-f663-35cc-b050-67dcd5392302.roa (raw, json)
Hash identifier:          wyt6iiJTtZTqXhdHvmdwWkQ/YwUk9Y6/uw1HA5Cbupk=
Subject key identifier:   D7:19:31:93:0C:79:EF:F4:4B:4A:7C:1B:30:51:70:44:D8:03:14:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD28E28F5BC6172CBC4B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     701
IP address blocks:        72.83.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:28:e2:8f:5b:c6:17:2c:bc:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=c4f37743-901d-47fa-a4de-623a27eaa427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:3f:91:8f:34:5b:85:5b:bd:41:2e:88:17:
                    8e:0d:19:2e:e1:b2:ca:27:ac:a5:6a:6f:67:af:c2:
                    04:07:79:b4:f1:15:5b:37:11:05:4e:8f:5c:82:0b:
                    23:b4:4e:bd:de:53:89:88:3d:3f:6c:dd:48:7a:0c:
                    e5:25:d1:21:f0:6b:83:08:8a:b6:49:29:6e:03:b5:
                    81:bf:31:ca:98:0f:84:88:7b:01:39:d1:22:c9:c1:
                    73:cf:e5:39:a7:ef:4d:48:c0:ad:1d:e7:50:58:fa:
                    85:7b:0f:7d:17:fe:5b:24:7d:25:dc:d3:15:a5:24:
                    51:d8:7e:f7:d8:8d:b6:83:35:10:8e:8e:5d:57:d9:
                    3b:5a:88:89:a5:26:d7:5b:fd:7e:00:03:94:97:5e:
                    98:bd:e9:62:2b:ac:4c:fa:10:d1:9f:c1:ef:20:c9:
                    83:a4:f9:57:4b:0b:c8:53:8e:7d:4c:e4:a0:5a:c1:
                    6c:eb:4d:30:0a:5e:0b:f0:7e:50:b1:a0:23:9f:69:
                    02:ff:fe:27:26:4d:cd:98:19:7d:5d:c0:e1:39:38:
                    33:a2:a4:94:9b:ce:0a:69:a2:aa:62:ac:6b:2e:9f:
                    9e:01:a4:1d:32:d7:f6:b4:cd:2f:2a:ed:01:f5:e6:
                    9d:c9:05:59:d3:bc:27:db:fb:f3:3c:ce:52:6a:76:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:19:31:93:0C:79:EF:F4:4B:4A:7C:1B:30:51:70:44:D8:03:14:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:06:60:88:4e:b5:55:a6:5e:81:00:a1:fb:ef:ca:17:c2:
         a3:34:e7:f7:fc:49:ba:ee:fa:06:b9:de:69:83:23:58:74:60:
         65:83:ad:d1:a5:fd:4b:17:ff:42:3e:a5:0d:86:c9:bb:67:15:
         1f:13:2b:98:18:92:54:3b:94:1b:86:8f:aa:4f:a4:06:8a:83:
         31:41:23:71:7f:6a:2d:a0:dd:98:49:17:94:47:38:4c:b8:92:
         0e:1d:60:e3:8b:6f:03:41:e9:40:16:4c:cf:31:cb:f0:33:fd:
         16:64:dc:0b:70:a8:5d:59:cc:91:58:2e:d4:15:c1:65:74:85:
         c8:5f:c9:bd:6a:32:a6:0e:21:43:72:74:90:f2:95:00:1b:87:
         94:70:05:31:03:38:a1:4b:e2:55:77:54:90:73:f4:87:0c:15:
         9f:1a:f0:23:2a:bf:c7:f3:62:e1:27:03:82:3b:16:d4:46:46:
         56:be:2c:9f:44:d1:01:e7:3a:96:fa:29:16:62:3b:f3:7f:00:
         ec:36:a7:61:4e:2a:38:8d:47:b0:70:7b:e4:a3:bf:ef:74:58:
         48:88:0a:6e:dc:b1:1b:89:56:8a:a2:2a:be:52:3a:31:1e:bf:
         31:13:d6:27:29:07:29:4e:00:63:48:44:d9:22:3d:f0:a9:70:
         6f:85:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:03:16 2025 by rpki-client