Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ad1afb-8b68-3216-8a07-be04e56be54f.roa
File:                     05ad1afb-8b68-3216-8a07-be04e56be54f.roa (raw, json)
Hash identifier:          H+12/tzu4+yB0sRS1/wwVB1KQIOLqeKH/la57OYCZ/A=
Subject key identifier:   F9:00:A3:83:8F:F5:29:80:A8:97:46:D4:6E:DC:3D:60:69:DB:5B:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3DD0B96AF5A0A12CEE0C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ad1afb-8b68-3216-8a07-be04e56be54f.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.111.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:dd:0b:96:af:5a:0a:12:ce:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=a75ba054-9e13-4e9b-933e-23f532cf788b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:9d:ba:fd:d4:42:bb:67:45:18:3d:fa:c3:
                    e2:a5:84:16:9f:29:d9:57:4e:46:88:64:4b:9d:83:
                    f3:34:b7:d0:23:24:87:ac:a9:aa:dc:9e:fe:bb:9e:
                    7b:ed:f2:28:65:78:71:d8:70:78:90:72:22:f0:e4:
                    5e:8e:19:3b:da:df:4a:12:aa:b9:03:37:01:f3:39:
                    ba:c4:2f:b6:dc:f3:96:0a:a0:36:f9:07:ff:34:f1:
                    41:41:a1:8a:94:af:6d:3a:61:82:6b:14:f2:bb:2e:
                    8d:62:c0:77:91:fe:ba:b7:25:2d:4d:15:4a:76:70:
                    0f:06:9b:98:69:63:2e:e3:95:d1:b5:20:a2:53:52:
                    98:a6:15:2a:97:b9:90:42:cd:23:d7:5a:1e:cc:25:
                    1a:13:84:b7:6c:91:00:02:dd:e3:25:cb:d9:8f:9f:
                    55:b4:97:04:76:38:e3:a9:c1:93:8d:f4:a2:32:36:
                    2b:3a:f7:62:36:72:8a:62:9b:c0:3d:28:3c:de:44:
                    68:84:a9:85:d3:24:8b:37:e0:8e:2c:47:1e:7f:6b:
                    98:c8:21:6f:28:1c:21:95:11:bb:58:33:cd:ed:0a:
                    6e:cf:74:94:7c:05:65:64:82:36:4a:83:00:5d:fd:
                    62:db:90:76:2e:e2:04:e2:26:a6:87:9c:e0:c7:a0:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:A3:83:8F:F5:29:80:A8:97:46:D4:6E:DC:3D:60:69:DB:5B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ad1afb-8b68-3216-8a07-be04e56be54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:be:73:8c:34:04:9d:33:e1:62:60:b2:42:d1:01:83:f7:
         ea:16:c2:57:8c:6f:2a:e2:50:1e:aa:6c:0b:48:a6:db:38:15:
         10:ab:64:3a:c7:07:87:69:b6:ea:b1:40:be:ae:11:32:eb:8e:
         0d:4a:d6:5c:a0:7e:7a:90:d6:fa:4c:c2:e9:19:9f:11:ef:15:
         bd:1b:86:27:ea:e5:41:a4:a2:7e:97:ea:b4:76:c4:98:2d:8d:
         17:8a:c9:50:81:68:1f:a1:8c:88:29:9f:00:e2:34:6e:d9:b9:
         49:75:02:b8:fa:18:26:bb:75:2e:f5:a6:84:84:6e:3f:3e:13:
         3c:21:83:1e:65:f0:23:a4:6d:38:16:f3:8f:87:c5:a3:1a:34:
         da:1b:1b:0f:6c:20:25:48:b3:f2:03:48:02:64:fb:04:f2:1a:
         47:76:f8:88:2d:2d:c6:1b:e4:7d:fe:a8:72:b1:70:01:c8:32:
         ae:12:5c:72:b8:00:c0:53:3c:16:42:b5:bb:ce:87:8e:14:97:
         d1:04:c5:55:cc:92:e1:2f:05:52:91:ff:f8:1a:e1:74:a8:bf:
         0c:b4:19:f5:3b:65:71:f7:dd:70:ba:17:0e:1b:c2:f4:ec:8a:
         e3:22:09:71:0d:f6:af:c8:18:10:2c:9f:78:fc:cb:cf:6f:b4:
         f2:19:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:36:45 2025 by rpki-client