Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fe300a9-020b-3aa0-950a-b766d893dca4.roa
File:                     6fe300a9-020b-3aa0-950a-b766d893dca4.roa (raw, json)
Hash identifier:          hY/1shgQCTfYGBSb8cNPxRrxnF21xH2VNZY47r6cCzw=
Subject key identifier:   05:FC:FD:B8:B3:02:B6:3C:12:9B:C2:BB:DD:21:A7:29:FF:CD:AD:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F715397FF5117FFEF13300E8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fe300a9-020b-3aa0-950a-b766d893dca4.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.105.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:39:7f:f5:11:7f:fe:f1:33:00:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=58392123-1f2f-49a6-ad04-fa7eab7f76c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:be:56:f8:3e:b1:63:92:29:62:f9:7c:08:
                    da:91:8c:9c:b9:d1:e7:7f:2b:cd:bf:ee:f0:85:d4:
                    e3:78:17:37:ae:24:2a:1c:80:ab:d2:39:08:c7:40:
                    37:29:f6:02:b7:58:fe:ae:d2:41:e7:14:31:35:09:
                    14:fe:c2:0b:2f:8c:41:71:38:09:a0:4c:a5:43:45:
                    8d:9e:5f:7f:9d:1a:33:85:de:9a:7e:0f:34:af:db:
                    af:c6:81:83:cf:03:82:4b:6c:14:d6:28:1e:aa:27:
                    19:18:aa:3b:29:c5:0f:53:e5:40:a3:4a:cf:44:3b:
                    67:34:fc:9f:01:9e:cb:d9:fd:b1:3c:db:ce:63:e1:
                    95:b7:eb:94:54:45:ae:99:59:fc:d4:30:e2:27:f5:
                    55:77:52:53:4b:15:84:72:1b:ed:97:ee:50:a3:07:
                    0f:e6:ff:9d:ba:7e:20:72:7b:09:7a:b5:32:87:02:
                    d7:1f:e7:a8:99:a3:1e:52:59:70:0c:84:1c:03:3a:
                    d8:6a:f7:14:9a:52:18:ee:80:e1:d4:fc:e1:fe:7d:
                    3e:b8:bf:f8:63:01:2b:57:63:d6:d7:4b:05:d9:67:
                    f9:2b:04:54:d4:81:93:65:e0:ed:a4:ed:37:20:02:
                    97:09:d3:86:1e:64:b4:3f:91:3c:fd:36:0e:25:5a:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:FD:B8:B3:02:B6:3C:12:9B:C2:BB:DD:21:A7:29:FF:CD:AD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fe300a9-020b-3aa0-950a-b766d893dca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:84:56:e4:9c:8c:19:6b:61:17:33:f0:05:10:ac:5b:ec:
         dc:fd:2d:3c:2f:2d:22:8f:48:d5:17:8b:dc:fb:ba:4c:63:a5:
         b1:bb:f1:0a:f2:df:c8:15:55:f3:0d:20:36:0a:ad:ca:ef:18:
         02:42:d7:d7:47:22:80:f1:d3:79:5c:ab:51:88:2b:c2:ee:d7:
         5c:8b:60:18:6a:ad:9b:91:36:4b:2c:a2:a6:26:10:6b:0f:b9:
         19:b8:20:66:db:3c:aa:b2:8b:26:21:cb:c7:11:54:6b:05:c4:
         6e:5a:e5:d0:8e:5c:26:ee:0b:16:dd:16:2f:7b:85:f9:1a:f5:
         cf:ed:18:ca:72:67:b0:ce:1c:55:22:65:b5:99:eb:6c:8f:c0:
         94:e0:07:30:73:1d:44:aa:57:7e:53:7d:a4:ed:09:b5:2c:29:
         35:73:91:b0:b4:a3:4d:74:4b:61:b8:84:ba:ac:e9:59:80:cb:
         57:e0:cd:07:5e:82:c2:5e:00:2d:fd:a9:e3:80:29:ae:99:67:
         95:d3:9c:2c:a3:8a:72:1b:f2:cb:45:be:b2:0f:72:17:4c:80:
         db:43:a7:57:cf:c3:c8:56:a6:60:91:39:ff:07:a0:9c:90:ab:
         95:83:24:e4:40:44:07:a1:a9:b8:4f:f9:ea:c0:80:27:97:cd:
         ea:1f:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:42 2025 by rpki-client