Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc6d5552-1f35-36f7-a222-f47492144699.roa
File:                     cc6d5552-1f35-36f7-a222-f47492144699.roa (raw, json)
Hash identifier:          nMl8iefdOFPqEPNCo2OvLQudAnGvWnmoAN23tV9MsPQ=
Subject key identifier:   9C:F0:3E:E4:08:43:8B:F8:80:21:7B:A3:0E:C8:57:B4:26:9A:AE:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E0B8434F65C2C4E15B65
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc6d5552-1f35-36f7-a222-f47492144699.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        173.72.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e0:b8:43:4f:65:c2:c4:e1:5b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=69a9d183-5b1c-458b-9b4b-120d719575b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:a5:e6:f0:d9:92:c9:9c:71:82:21:3e:01:
                    4c:53:a0:54:27:25:ae:f9:58:65:01:22:86:77:ca:
                    47:6e:a5:15:56:88:94:35:86:f8:f3:46:f3:1a:e1:
                    87:40:41:3d:a1:f8:d3:b5:79:1f:4a:f8:2c:c2:41:
                    c1:ec:47:42:2a:15:c9:a4:59:b4:07:58:93:da:bc:
                    87:16:36:0f:4d:1e:56:2f:65:06:2c:f7:8f:02:5b:
                    a2:e9:bc:9d:75:6b:fc:24:40:64:6e:c0:58:68:22:
                    5a:c1:50:4a:56:ea:6a:90:f0:2f:a6:3b:6a:76:25:
                    dd:60:2f:d1:4e:6a:6f:e8:86:1f:60:a3:36:30:af:
                    77:09:8b:ae:df:4f:de:87:4e:b4:a7:dc:c6:34:68:
                    b4:62:7d:92:9b:f8:5d:88:ef:ac:bd:c5:2c:d4:d9:
                    4d:5b:c9:67:56:5c:67:a4:62:a6:3d:ee:fa:e3:7f:
                    cd:53:24:98:f8:b4:70:fe:d9:10:cd:58:55:1a:a4:
                    cf:76:47:29:4c:a8:5f:bc:ab:2a:19:c7:5a:bb:d5:
                    27:32:fa:c7:46:7b:e8:d8:27:40:0e:37:71:06:50:
                    7e:ce:41:5b:70:44:d8:93:32:f3:61:53:b2:52:ef:
                    e0:f8:a5:9a:6b:25:11:70:c4:7f:5f:a0:2b:a8:4a:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:3E:E4:08:43:8B:F8:80:21:7B:A3:0E:C8:57:B4:26:9A:AE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc6d5552-1f35-36f7-a222-f47492144699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.72.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:97:f4:c8:d8:20:25:a1:d7:de:7a:2a:4e:d3:d5:2f:7f:9b:
         36:9e:87:7f:b7:95:7c:32:2f:0f:06:84:ac:7d:e9:61:32:40:
         a3:e0:0d:b7:95:ac:83:57:9c:fc:39:f9:7e:aa:42:ed:7f:12:
         4e:c5:d4:ca:92:09:82:bf:41:e7:41:a3:58:2f:54:cc:fc:ae:
         09:ff:d6:8e:bc:a2:6a:01:89:2f:d2:42:fb:52:40:23:94:9b:
         88:27:ee:e4:78:5f:28:99:dc:c4:e0:97:ef:0b:c7:06:df:6d:
         5b:53:4b:2f:6f:6d:88:9d:ad:58:d6:23:30:1b:fb:a0:8f:dc:
         88:85:f6:d8:c9:1c:c5:b6:b6:bf:c7:fc:5e:eb:8c:8a:6b:b5:
         dc:54:80:7e:29:5b:47:e1:da:70:fe:a0:fb:26:bc:23:57:a2:
         2c:da:3f:45:3f:14:e2:85:5f:a2:9c:da:ab:3a:e9:39:7d:d4:
         34:42:07:30:9d:38:ce:9e:9a:43:5c:41:06:4c:7d:c5:e4:03:
         28:e6:af:bd:a0:e8:d4:2d:63:0a:73:16:33:bd:8b:f4:b9:30:
         23:8a:67:9e:ed:aa:31:8c:86:e8:ca:8b:0a:bb:70:8e:e8:8b:
         b6:a6:0b:04:cf:03:83:e3:3c:a5:bd:c3:f0:be:50:eb:2e:92:
         1f:0a:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:38 2025 by rpki-client