Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
File:                     ec68203b-77b6-3b06-9edf-d20bc17949be.roa (raw, json)
Hash identifier:          +Qx4+eWEVigpqwRFrfpBjnuebtvI3eB+SauN5DLFvYg=
Subject key identifier:   75:D9:90:24:6C:64:FD:39:0A:A5:C1:6F:E0:E1:F4:3B:D7:08:94:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F7152AB19A730958C750B680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.96.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:2a:b1:9a:73:09:58:c7:50:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=95b00aec-d280-454a-9846-7eb4d408045d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:0a:1f:12:fe:17:8f:15:d0:cf:62:8b:18:
                    d2:2d:95:8a:c7:8f:8c:c1:be:7a:81:04:f9:ba:5a:
                    b8:6f:db:b7:ea:27:a0:86:b6:c6:c6:30:aa:23:0f:
                    a5:b2:a7:73:93:aa:a3:14:79:63:e4:0a:75:1a:33:
                    ba:a9:ec:b8:ef:fa:38:a2:35:54:87:1c:f3:d5:22:
                    3e:2f:a9:35:aa:ee:ce:b2:31:49:a3:85:02:84:a9:
                    73:eb:68:e3:a8:8e:13:58:44:5e:7e:1e:5b:4b:67:
                    8b:15:b6:1a:db:7e:fb:04:fa:91:d9:ef:62:59:f5:
                    fb:0a:32:8d:3a:5c:37:5a:11:89:7b:e8:47:31:11:
                    f1:8a:8b:52:be:17:0a:26:55:cb:96:03:2d:10:96:
                    f6:da:76:57:26:ca:76:ce:27:ff:4a:1a:da:4c:c7:
                    49:40:e7:b3:02:b5:30:23:3f:24:5f:82:18:7e:2f:
                    84:6d:1e:3b:13:cd:68:22:ba:1b:55:d8:df:c8:fd:
                    f2:c2:bb:fc:9e:bc:8c:1a:86:0f:c8:2e:3c:e8:6f:
                    95:de:84:dd:55:48:67:d2:b0:9e:1b:93:b9:46:0d:
                    b2:79:f0:bf:66:ee:64:73:07:77:4a:69:ad:95:73:
                    05:94:2b:c4:44:04:71:b8:b9:92:78:5d:4a:d3:1c:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D9:90:24:6C:64:FD:39:0A:A5:C1:6F:E0:E1:F4:3B:D7:08:94:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec68203b-77b6-3b06-9edf-d20bc17949be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:fb:87:08:aa:3d:b3:b1:92:61:fc:df:db:1f:a1:e3:c1:
         73:70:a2:4e:70:47:1f:57:da:43:7b:c1:d7:9c:bc:41:81:c8:
         3b:69:13:ba:dc:5c:a6:a4:e6:01:af:0f:d4:93:46:9c:68:e5:
         e0:a7:8c:a0:72:54:df:a8:65:04:c2:1b:bd:de:f2:17:3e:51:
         34:0f:5b:80:d1:dd:9b:4d:2d:91:b4:c1:4c:e6:bd:de:af:48:
         48:f3:e1:b8:97:7f:bb:7f:2a:a6:30:39:cc:d1:b0:ed:78:29:
         3e:74:5f:d1:4e:95:4c:bb:54:80:3b:d5:21:c9:77:af:ba:a8:
         62:bc:d1:42:aa:74:2c:89:8e:70:23:1e:3f:f6:af:3c:04:d0:
         42:95:46:70:63:d9:79:da:db:f5:e2:fd:f4:38:52:f1:6a:7f:
         1b:f9:23:34:62:b4:9a:5e:0c:29:ac:da:d7:f9:47:f8:c5:d0:
         19:68:b3:89:07:bf:9a:0a:4e:30:c9:d1:8f:6a:3c:ac:5a:0c:
         1b:36:f9:88:94:86:6f:c3:bb:dd:8a:a9:43:26:4a:77:ce:f8:
         5e:86:f1:2f:36:95:12:19:7f:fd:33:aa:1f:15:5e:db:36:05:
         f5:cf:1f:3d:44:27:de:9c:c7:d7:36:d5:d1:4a:64:dc:95:32:
         32:98:88:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:11:09 2025 by rpki-client