Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e584aa-4e5b-39b6-9d43-939c024fc472.roa
File:                     18e584aa-4e5b-39b6-9d43-939c024fc472.roa (raw, json)
Hash identifier:          LTfYoG7T7RP5zum1a131RDaF4ZTtL2pKNk888IniHGY=
Subject key identifier:   2F:3C:D7:56:89:37:04:69:E2:06:90:2C:17:EE:4C:2A:3E:71:4B:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3DB701E0A062411B4F7BE
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e584aa-4e5b-39b6-9d43-939c024fc472.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.108.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:db:70:1e:0a:06:24:11:b4:f7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=c828ad88-be42-4d8c-9df5-118020403e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:6d:a4:85:bd:97:fd:76:6e:21:f5:74:bc:
                    66:b6:81:c3:3b:c8:b2:0d:08:66:bf:13:40:7a:d0:
                    39:d2:0c:52:27:02:c7:59:1c:02:d2:f3:2e:d7:42:
                    65:71:47:86:bc:d5:d2:6f:09:d4:c8:e0:f8:d0:26:
                    aa:10:12:75:93:0a:85:b7:11:40:b7:bd:02:a9:a6:
                    93:e7:3e:ac:d0:20:39:65:45:8c:d4:b8:68:b5:af:
                    40:12:30:d2:d2:24:e4:33:67:cf:38:ce:00:b2:f3:
                    60:dd:62:7a:95:6b:44:71:0b:6d:0c:11:2a:b0:56:
                    c0:c6:68:c9:fe:3d:c6:fb:ba:fa:80:f7:cd:0a:22:
                    50:5a:1b:24:97:f9:18:06:e0:ff:39:90:d0:69:7c:
                    7f:3f:af:bc:ec:37:8a:5f:1f:8b:00:53:91:11:84:
                    47:4a:e3:70:ad:2f:3c:c2:70:ae:34:06:d7:9e:e8:
                    6b:b7:1f:a9:7f:45:f1:c6:67:cd:4c:a3:99:f6:d4:
                    b0:7c:b6:18:18:9e:5d:db:2b:88:06:25:8f:5d:eb:
                    10:b4:46:0a:c8:18:00:77:3c:f5:6c:3b:93:dd:16:
                    94:8d:67:ef:06:de:e2:36:fe:1d:47:f1:30:09:af:
                    49:85:b0:a9:44:d6:ec:13:85:f2:96:cb:59:9c:ed:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:D7:56:89:37:04:69:E2:06:90:2C:17:EE:4C:2A:3E:71:4B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e584aa-4e5b-39b6-9d43-939c024fc472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:8f:ff:9a:ee:4b:52:5d:71:f1:c3:de:be:6c:67:bf:cc:
         ba:1c:88:33:cb:97:2f:40:c4:60:94:b5:e1:6b:53:07:7a:9c:
         e5:fe:6e:ff:5f:a4:15:76:ea:75:56:33:ad:d7:40:5a:ac:e3:
         01:0b:4b:19:71:3e:26:50:40:97:95:a9:d8:b3:d4:b6:3a:d5:
         d2:2c:60:1a:58:61:d1:8f:ff:b7:90:aa:83:b0:cd:d7:f4:c6:
         6f:b0:ec:4f:c0:dd:74:73:d9:96:d5:52:3d:69:11:2e:7a:70:
         31:b4:ae:ad:fb:3b:ad:14:e8:f6:c7:51:0e:d1:fc:5d:c6:0b:
         31:7e:90:5a:11:90:ef:b2:29:15:d3:34:49:fa:f7:6a:3d:03:
         71:4f:0c:31:f4:62:78:8c:7c:64:ed:c5:16:ea:09:e7:02:e2:
         cc:21:94:5c:a9:48:53:8f:c3:ef:e5:61:56:0b:d4:b0:2b:27:
         a0:f7:4d:3b:94:cc:d2:c4:00:09:e6:1e:03:50:1d:d7:65:6d:
         b0:ae:ee:37:92:c0:07:a6:65:a3:7b:e8:ee:7d:25:1a:65:e1:
         40:e8:bb:a8:57:41:5d:b1:6b:44:ac:67:b2:ac:2f:1c:d5:5d:
         9f:79:fe:ac:85:f4:35:b6:0f:fc:cf:ef:0d:b5:01:4e:64:0c:
         be:48:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:44 2025 by rpki-client