Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc0ae07-4104-3491-8822-2c7c4108e828.roa
File:                     ffc0ae07-4104-3491-8822-2c7c4108e828.roa (raw, json)
Hash identifier:          a0dSxZKRQCXUaVwpoTiLwEinT6N8FKuuOUzSqY7GT8Q=
Subject key identifier:   9A:D5:DF:95:52:69:22:86:91:7B:ED:68:97:C1:70:31:1F:30:1D:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA8529B06A63FFC8948E9F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc0ae07-4104-3491-8822-2c7c4108e828.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        72.79.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:29:b0:6a:63:ff:c8:94:8e:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=17cbda11-a838-474a-9794-d7bbf1e6678d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:7e:de:05:e9:91:bc:c9:0c:de:db:b8:82:
                    98:77:ee:5d:1b:d9:6d:f5:88:a3:e4:54:6f:40:b4:
                    08:e0:6f:3f:38:5e:e9:ea:ca:9e:f9:e0:46:51:c7:
                    be:ac:32:39:26:b4:f5:00:d3:3c:9b:d5:e4:36:43:
                    32:02:fb:4c:e5:3a:14:37:f9:72:e6:99:78:79:5c:
                    8c:48:6f:8c:cc:e6:a3:94:34:26:b5:88:e5:64:ef:
                    09:e8:f0:20:0e:58:46:b2:a5:f9:37:85:4a:33:30:
                    62:b8:d4:e7:37:47:2c:61:d3:72:71:27:36:45:c9:
                    16:e5:03:4b:e4:13:f4:c3:91:18:17:f3:4e:b9:41:
                    d4:93:99:e1:31:c7:af:c4:5f:d2:8c:fd:d5:24:12:
                    4e:09:f3:a9:82:50:b3:01:84:ab:42:28:0a:16:62:
                    46:63:1e:dd:3c:ed:64:01:b1:17:4f:ea:f3:7c:f6:
                    4a:9a:c5:26:ae:0d:4d:f7:10:77:1b:35:c0:2c:39:
                    8a:ea:dd:f3:c0:57:be:87:ad:0a:d5:22:eb:03:5d:
                    df:1a:34:29:bc:cc:b1:93:e9:1e:0b:3c:b9:f0:a1:
                    77:10:8c:ac:9d:4c:0a:80:46:1b:63:2f:6d:2c:4c:
                    b6:84:0c:dd:2b:f9:ad:f2:d2:dd:8b:17:f3:04:a8:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D5:DF:95:52:69:22:86:91:7B:ED:68:97:C1:70:31:1F:30:1D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc0ae07-4104-3491-8822-2c7c4108e828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.79.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:20:99:cc:c5:68:7f:de:68:4d:eb:b5:39:90:a8:86:2d:
         e7:5b:9b:02:d8:33:a1:79:0b:0e:c4:94:97:ee:75:2b:e9:df:
         89:b3:3a:2e:26:20:66:0d:93:b2:1e:c3:47:f5:77:5e:52:68:
         6a:7a:35:36:1b:53:4d:c2:5c:0a:de:8c:93:05:38:bb:49:45:
         0f:aa:e5:c1:2d:34:c0:35:44:ca:8a:bf:a0:6e:70:f8:f4:19:
         53:8e:25:1b:11:3d:f3:ec:38:19:00:2b:c5:7d:64:9a:f2:23:
         1a:17:4a:09:a2:9a:d8:bb:32:c9:c5:b8:c4:ba:b4:2b:65:28:
         e4:0e:6c:fb:e3:21:ef:3e:06:6c:80:cf:3c:b3:92:06:08:14:
         28:26:bd:68:7e:21:a0:2d:57:95:72:19:3d:9e:ad:d4:b8:95:
         59:0c:22:07:05:a1:8e:59:fe:de:5e:7d:31:ac:1b:ef:e0:2a:
         16:1a:07:c4:3f:3c:89:6b:bb:47:ce:80:12:91:1f:37:79:0d:
         bf:99:37:a0:17:50:92:34:8c:b7:aa:34:4e:39:73:0a:d7:0e:
         9b:b2:a5:65:fd:d7:b9:b9:4b:01:77:89:68:c9:21:40:3e:e4:
         74:ec:de:c1:45:e8:d9:48:4e:d3:2a:62:e1:d7:c6:61:b5:9c:
         e7:01:99:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSmwamP/yJSOn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
MTdjYmRhMTEtYTgzOC00NzRhLTk3OTQtZDdiYmYxZTY2NzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g5+3gXpkbzJDN7buIKYd+5dG9lt9Yij5FRv
QLQI4G8/OF7p6sqe+eBGUce+rDI5JrT1ANM8m9XkNkMyAvtM5ToUN/ly5pl4eVyM
SG+MzOajlDQmtYjlZO8J6PAgDlhGsqX5N4VKMzBiuNTnN0csYdNycSc2RckW5QNL
5BP0w5EYF/NOuUHUk5nhMcevxF/SjP3VJBJOCfOpglCzAYSrQigKFmJGYx7dPO1k
AbEXT+rzfPZKmsUmrg1N9xB3GzXALDmK6t3zwFe+h60K1SLrA13fGjQpvMyxk+ke
Czy58KF3EIysnUwKgEYbYy9tLEy2hAzdK/mt8tLdixfzBKipqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrV35VSaSKGkXvtaJfBcDEfMB2XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmZjMGFlMDctNDEwNC0z
NDkxLTg4MjItMmM3YzQxMDhlODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSE/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLKIJnMxWh/3mhN67U5kKiGLedbmwLYM6F5Cw7ElJfudSvp34mzOi4m
IGYNk7Iew0f1d15SaGp6NTYbU03CXArejJMFOLtJRQ+q5cEtNMA1RMqKv6BucPj0
GVOOJRsRPfPsOBkAK8V9ZJryIxoXSgmimti7MsnFuMS6tCtlKOQObPvjIe8+BmyA
zzyzkgYIFCgmvWh+IaAtV5VyGT2erdS4lVkMIgcFoY5Z/t5efTGsG+/gKhYaB8Q/
PIlru0fOgBKRHzd5Db+ZN6AXUJI0jLeqNE45cwrXDpuypWX917m5SwF3iWjJIUA+
5HTs3sFF6NlITtMqYuHXxmG1nOcBmfc=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:18 2025 by rpki-client