Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b240c88-9ac6-3424-b2f3-ebaf91d27055.roa
File:                     7b240c88-9ac6-3424-b2f3-ebaf91d27055.roa (raw, json)
Hash identifier:          0O5MopBFLkQIl7qFUerSnbPFTtPGcG50quog33nVah8=
Subject key identifier:   DD:14:3C:0C:F7:F5:5F:B9:0C:BD:F9:11:3F:6F:83:AF:30:58:CE:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2ABAF36C33C26911055700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b240c88-9ac6-3424-b2f3-ebaf91d27055.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.106.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ba:f3:6c:33:c2:69:11:05:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=7b18e349-fcb4-4836-9164-9ed17cc2fa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:46:52:09:43:e8:76:45:be:c5:86:98:d3:
                    3c:39:71:db:fe:bf:79:9e:85:b3:b6:aa:90:ed:9f:
                    79:ab:60:24:5e:34:24:85:2d:9a:8c:5a:d8:87:f6:
                    b1:80:d2:42:25:4b:fd:5d:fa:89:4e:c4:99:76:40:
                    eb:bd:01:59:5a:92:0d:ec:a3:e0:28:04:a1:39:71:
                    fd:03:a3:d6:1e:91:df:5a:70:f3:48:57:d1:83:87:
                    6a:d9:47:a8:be:32:a0:66:c1:05:c8:53:6b:c7:41:
                    3f:7f:c9:0f:6d:fa:81:d9:9c:62:fe:68:a5:e2:9f:
                    0b:af:00:e1:02:33:d3:dd:f1:b4:f6:7f:6f:d6:71:
                    e0:2b:fb:bc:f7:9c:b0:db:7d:87:bd:67:16:e4:ef:
                    d7:62:de:74:eb:8a:d1:6b:aa:fc:38:ad:b6:f3:48:
                    cf:93:8d:94:f3:26:42:e5:fc:31:aa:9e:f9:18:7a:
                    8b:ce:3b:91:10:ed:11:48:0d:b2:ba:e6:c0:82:75:
                    df:cc:41:dd:09:40:0c:a4:ad:a5:46:d5:b3:8a:29:
                    ab:66:3f:7c:bb:d6:88:8f:84:1e:7f:24:67:0b:ec:
                    09:d6:ef:41:4a:f9:3d:b2:52:fd:9d:84:e3:88:b9:
                    aa:55:b6:62:c3:fa:31:da:d1:29:01:bf:be:21:ef:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:3C:0C:F7:F5:5F:B9:0C:BD:F9:11:3F:6F:83:AF:30:58:CE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b240c88-9ac6-3424-b2f3-ebaf91d27055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:26:f5:c0:a7:8d:fb:69:96:36:39:70:87:58:b4:a9:fb:1d:
         bf:50:17:b9:e0:55:a0:7e:b3:60:83:6b:3b:68:75:73:56:25:
         df:0a:23:44:76:25:d5:2b:eb:35:38:3c:ce:b4:bf:46:e6:f8:
         07:24:6d:c3:6f:b3:1b:ac:b8:73:d6:4e:2f:a6:f0:32:29:71:
         cd:59:f5:86:c3:50:d4:84:83:f9:4c:29:d3:df:d0:f3:90:94:
         2b:25:b8:c9:cc:9f:93:66:dc:0a:a0:1a:e3:5a:19:24:23:10:
         df:af:31:45:c3:6f:30:52:9a:bc:71:1b:42:12:d5:e7:97:76:
         85:59:f7:37:a8:a3:aa:79:23:56:3e:55:6b:63:4d:af:38:be:
         c7:17:d4:df:b4:1d:a2:fd:ec:4b:d2:a2:48:e8:48:0d:55:01:
         91:73:96:25:72:29:bc:1a:50:84:0e:34:3b:7e:f3:85:11:fc:
         12:66:15:f8:73:dc:fd:b0:15:30:9e:18:39:f9:cc:f3:47:b4:
         eb:cb:ae:27:68:02:9f:7c:22:2b:b3:e7:55:7c:6c:62:7f:15:
         1f:63:58:59:16:ae:49:b3:ce:da:d9:c3:f3:c3:84:4c:24:d6:
         dd:07:f7:a5:1d:d1:fa:47:81:fd:68:9a:81:d5:f4:33:5a:a0:
         d9:94:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:24:14 2025 by rpki-client