Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d47c6192-a0f9-326c-9868-e7ec8d125a71.roa
File:                     d47c6192-a0f9-326c-9868-e7ec8d125a71.roa (raw, json)
Hash identifier:          gyCcygD2TJJg/PILAjqhNHD2NbdGCj9C96exy8o5h68=
Subject key identifier:   08:B4:B2:C6:E7:14:09:77:39:B4:95:AC:34:5D:A3:B1:2D:DA:8C:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB88D33C7D846956B70ED25A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d47c6192-a0f9-326c-9868-e7ec8d125a71.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     6167
IP address blocks:        72.105.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:33:c7:d8:46:95:6b:70:ed:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=9c469a4f-648f-4c82-bf21-edc256f32667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:52:8c:18:71:29:92:15:27:ef:0d:75:67:
                    48:2b:c4:55:e4:79:e6:3e:92:d9:78:fb:23:e6:43:
                    48:4d:e4:91:4f:4c:64:9a:da:3a:2e:ca:56:25:0e:
                    72:59:72:89:9c:d6:4f:7f:7a:3a:70:17:28:d0:c9:
                    68:52:61:ee:24:8d:9f:f4:b8:91:9b:04:6e:6d:2a:
                    62:9c:3a:bd:e2:c9:24:56:db:45:f2:cc:0f:41:cf:
                    a6:0e:93:48:e0:b3:b3:a6:e7:4e:f8:fc:0e:4a:1c:
                    3b:a1:71:89:8d:c5:e9:3a:05:88:fa:f3:04:bf:4f:
                    a3:73:80:58:a8:20:cb:e3:ab:64:62:7c:2c:42:04:
                    87:35:31:fb:a9:d1:43:d6:72:4c:7a:43:12:bf:75:
                    56:98:57:12:e5:24:fb:09:c5:ef:99:d4:c4:78:ed:
                    30:c9:a2:7d:71:b9:9e:42:fd:02:c0:29:ae:01:96:
                    f6:32:b8:8d:c7:8e:97:a7:cc:2c:3d:bd:0a:7f:1d:
                    f9:81:4e:c4:91:07:1e:8c:3f:fe:39:18:31:27:63:
                    18:fb:03:9d:1e:86:26:b0:97:05:3e:76:1f:c7:e7:
                    95:d9:d1:7d:16:15:79:ed:8f:9e:e9:3d:30:cd:c8:
                    af:63:0f:0b:f2:ac:f0:df:2e:f8:6d:37:0d:93:67:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:B2:C6:E7:14:09:77:39:B4:95:AC:34:5D:A3:B1:2D:DA:8C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d47c6192-a0f9-326c-9868-e7ec8d125a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:fd:62:92:51:2f:c6:92:af:ab:b7:8a:29:2a:bd:27:a6:b2:
         cd:98:db:76:bc:15:ae:24:6e:b3:4e:8e:9a:83:e1:07:f8:0b:
         0b:a7:75:e1:35:e0:0a:1d:2e:9b:f1:54:61:8b:dc:a8:7b:fa:
         d7:92:a0:96:bc:07:c7:e4:09:4b:a9:e3:87:7b:7a:33:9b:54:
         eb:81:f2:23:19:39:2d:dd:b5:52:51:37:9b:d3:0e:20:83:a6:
         4b:09:3f:fe:51:95:9d:d9:60:d6:75:1b:dc:6b:3e:a0:3f:2d:
         62:c0:94:e5:3d:9d:28:71:3d:d7:db:d1:88:bf:f7:d8:84:5c:
         7d:10:88:f2:7c:c0:09:cf:ce:75:78:34:be:a3:9f:bb:f6:ef:
         03:17:9b:de:f7:8f:dc:fa:c1:40:81:d2:db:68:06:77:38:2f:
         79:55:af:df:5a:b3:56:26:be:16:8e:5e:3a:b6:90:e1:a5:8a:
         de:b7:b4:b6:eb:2f:c9:92:94:b9:f0:cb:f2:38:8b:d4:ff:cb:
         c5:0e:8b:89:72:10:04:85:75:e6:40:af:f7:95:53:27:8c:ba:
         ed:7a:0f:ca:66:02:4a:0d:4c:8f:e9:72:df:dc:a9:5b:4d:f5:
         31:96:4b:38:34:94:e7:ed:bd:19:fe:35:e6:88:f3:c6:55:c4:
         25:fc:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:00:47 2025 by rpki-client