Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c0839f6-52d5-3010-8514-a0779ea697af.roa
File:                     3c0839f6-52d5-3010-8514-a0779ea697af.roa (raw, json)
Hash identifier:          ecnE7UJvSPeXN3CPfin/tNWl7HSNP1g6kkqQTJQp0JY=
Subject key identifier:   9C:A3:90:AB:30:78:7D:DD:1D:78:82:B4:39:DA:4B:36:B5:AD:47:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E13449BCAD82CC786440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c0839f6-52d5-3010-8514-a0779ea697af.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.108.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e1:34:49:bc:ad:82:cc:78:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=fedf35d3-82d0-4c2a-8b4e-39e43069e079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:f1:0e:7f:39:a4:ff:eb:86:e8:7f:08:08:
                    fc:44:4c:5e:a9:a7:00:cd:b5:fd:be:75:8d:1b:35:
                    a7:bd:64:98:23:c3:1f:9b:9c:25:c8:ee:45:7f:6f:
                    64:27:77:ce:fb:95:f8:d3:02:f8:0c:d7:26:9d:48:
                    e4:af:bf:eb:34:91:34:3b:f1:5e:4a:98:0d:e9:d1:
                    59:b1:f8:d4:57:ca:cf:92:5c:29:b9:87:2d:28:74:
                    9d:76:17:6c:d1:08:23:9b:f1:ec:fd:be:e2:f7:e2:
                    a9:19:bc:32:a5:b7:07:1f:a4:3b:88:9c:13:38:5b:
                    77:1f:ec:36:24:c4:79:4b:cd:6c:e0:cb:23:6d:cc:
                    c6:b6:66:10:1b:3c:72:c8:8d:28:81:50:1c:c2:b9:
                    86:a9:d5:42:03:50:19:e8:fb:e3:a6:d7:72:d3:87:
                    df:6b:74:8f:54:2c:48:14:52:17:fe:52:3e:02:90:
                    32:dd:0e:67:35:0a:28:27:5e:63:1b:7a:7c:54:62:
                    d8:36:bc:21:d1:e4:4b:0e:a8:59:d5:a2:8c:d8:8d:
                    34:02:a1:30:a6:85:0f:bf:f4:ac:b9:27:29:af:67:
                    42:ff:a8:12:1e:82:9c:2a:d4:2a:fa:e9:31:13:e7:
                    a3:c2:e3:bb:63:31:37:9c:61:46:0e:12:5f:19:f2:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:90:AB:30:78:7D:DD:1D:78:82:B4:39:DA:4B:36:B5:AD:47:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c0839f6-52d5-3010-8514-a0779ea697af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:9d:ad:27:9d:1b:23:6c:5e:96:18:9c:43:cf:bb:70:e1:
         69:03:fc:22:95:b6:0a:3b:2c:0d:5f:cc:0e:38:66:ba:74:ea:
         17:5b:11:11:0c:eb:34:2e:33:f3:78:67:55:3c:f9:6d:f4:7f:
         0d:a6:de:8b:6e:62:36:e6:58:a8:f6:51:31:5b:96:e5:d5:3d:
         04:d4:46:75:24:7b:38:4d:1f:a6:1c:a0:e3:3d:d7:cf:4b:7c:
         ce:5e:b6:d8:99:8e:86:9b:fe:29:d2:30:6a:3f:9a:8f:ad:b8:
         d6:5f:83:e3:b3:ca:c1:f8:fe:d1:f3:d6:bf:61:ab:26:2d:eb:
         d0:bf:0b:7c:32:6a:a5:1b:a7:5b:00:bd:de:ba:89:3b:15:4a:
         7d:f8:33:61:23:e9:ac:2f:4d:23:71:fb:24:5c:45:cd:fb:73:
         7d:e5:46:d4:21:59:03:e1:d7:63:dd:e9:24:a4:d2:37:d7:a9:
         f8:ce:0e:e8:6f:e4:e1:fc:1a:ec:eb:2e:56:81:ea:e5:76:2f:
         2a:ca:f6:ec:13:9d:85:9e:7d:3d:2f:db:03:18:2b:28:7e:57:
         1d:0e:d2:cf:88:b7:71:f9:00:0e:a5:46:dc:61:f4:0b:70:32:
         72:23:03:de:c6:12:14:3a:e6:70:19:8c:fc:00:1d:a2:4c:b5:
         7a:3e:fe:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+E0Sbytgsx4ZEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZmVkZjM1ZDMtODJkMC00YzJhLThiNGUtMzllNDMwNjllMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP3xDn85pP/rhuh/CAj8RExeqacAzbX9vnWN
GzWnvWSYI8Mfm5wlyO5Ff29kJ3fO+5X40wL4DNcmnUjkr7/rNJE0O/FeSpgN6dFZ
sfjUV8rPklwpuYctKHSddhds0Qgjm/Hs/b7i9+KpGbwypbcHH6Q7iJwTOFt3H+w2
JMR5S81s4MsjbczGtmYQGzxyyI0ogVAcwrmGqdVCA1AZ6Pvjptdy04ffa3SPVCxI
FFIX/lI+ApAy3Q5nNQooJ15jG3p8VGLYNrwh0eRLDqhZ1aKM2I00AqEwpoUPv/Ss
uScpr2dC/6gSHoKcKtQq+ukxE+ejwuO7YzE3nGFGDhJfGfJHAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyjkKsweH3dHXiCtDnaSza1rUdbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2MwODM5ZjYtNTJkNS0z
MDEwLTg1MTQtYTA3NzllYTY5N2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMdna0nnRsjbF6WGJxDz7tw4WkD/CKVtgo7LA1fzA44Zrp06hdbEREM
6zQuM/N4Z1U8+W30fw2m3otuYjbmWKj2UTFbluXVPQTURnUkezhNH6YcoOM9189L
fM5ettiZjoab/inSMGo/mo+tuNZfg+OzysH4/tHz1r9hqyYt69C/C3wyaqUbp1sA
vd66iTsVSn34M2Ej6awvTSNx+yRcRc37c33lRtQhWQPh12Pd6SSk0jfXqfjODuhv
5OH8GuzrLlaB6uV2LyrK9uwTnYWefT0v2wMYKyh+Vx0O0s+It3H5AA6lRtxh9Atw
MnIjA97GEhQ65nAZjPwAHaJMtXo+/t4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:45 2025 by rpki-client