Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa
File:                     45f3a6e0-3794-33ea-be25-eacad7465f67.roa (raw, json)
Hash identifier:          RLoDf6+dkdWolmZ7mjoZfZq8z3ved0apO+Pdm0HsBSM=
Subject key identifier:   0C:75:99:D1:21:D6:E2:97:B5:99:AE:ED:98:CC:22:03:8E:55:C3:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC05AB9E7A2FF56142BDC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.96.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:05:ab:9e:7a:2f:f5:61:42:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5d506d3b-10c6-4b2c-9c66-706cd3c13b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:2c:8b:22:f4:9e:7c:11:ae:78:bb:6c:a1:
                    06:d8:7f:93:9c:d8:83:4c:28:88:44:91:a0:5d:c1:
                    34:78:b9:ff:53:c5:54:cd:2e:2d:71:00:c7:9a:b4:
                    f7:32:f1:00:b6:cd:7a:29:d9:d1:ce:95:ab:64:f5:
                    0e:5b:f8:01:d0:fb:4d:4c:38:9b:58:49:8a:53:8e:
                    3a:a2:77:84:4f:54:d6:7c:8e:76:5c:02:b5:62:9e:
                    e7:9b:6d:4c:cd:d4:49:4c:dc:9b:fb:b2:49:ab:02:
                    b9:36:3e:e1:90:db:16:bf:7f:74:06:6b:1c:21:28:
                    0a:4c:f6:73:27:93:73:66:95:07:6a:40:a9:da:ed:
                    08:5a:9e:d6:23:6a:5f:c0:b7:7c:92:79:f1:d1:bc:
                    c6:6c:8d:13:7c:eb:a3:68:63:a1:60:62:45:09:9a:
                    19:34:5f:b7:45:20:56:0b:7a:c3:ed:44:e1:46:04:
                    e2:e5:34:3b:b3:f6:94:52:a0:b3:1c:1c:c8:54:b8:
                    09:6f:da:5b:f2:bd:a7:44:ff:40:8e:bc:d6:f9:55:
                    7c:56:dc:a6:cb:89:43:7c:20:31:55:27:05:02:3c:
                    9a:66:c7:c8:03:f6:76:46:a0:28:58:58:9f:39:44:
                    d6:a0:64:03:e3:bb:82:e3:b5:81:a1:66:b0:21:44:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:99:D1:21:D6:E2:97:B5:99:AE:ED:98:CC:22:03:8E:55:C3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:f8:16:18:0e:20:17:f2:70:84:39:90:5e:55:b3:d4:e8:
         96:42:86:a2:f6:af:e9:5e:f8:f3:c1:ce:26:48:10:17:5b:9b:
         59:13:6a:8b:53:f2:e6:f4:ca:d7:b2:79:6e:c2:7f:77:dc:15:
         75:a3:80:43:b1:bf:dc:e0:37:c9:d3:6a:82:8f:66:4c:3f:b2:
         84:cb:db:9d:16:8a:ff:39:22:91:69:42:94:24:69:d4:61:93:
         96:ab:1b:13:e3:df:7b:38:7e:f1:c9:c1:c8:e4:80:a6:84:12:
         29:a2:f3:83:cb:4d:2f:86:2c:95:ab:91:c3:15:e6:39:4c:a9:
         c5:16:57:07:6b:b3:32:80:6f:62:6f:f5:97:4c:cd:e3:6c:a4:
         c9:c0:ed:b7:e4:fe:49:06:c8:2b:49:a5:27:b1:39:e6:cd:9d:
         a2:65:56:ac:9f:85:18:71:b2:41:a6:69:e0:27:b8:31:c2:09:
         cc:30:2c:0b:58:c3:0e:cd:20:24:4a:bf:21:b4:b1:ea:8c:20:
         39:2b:59:63:4b:66:5f:dc:40:20:75:43:c9:87:f0:bf:30:99:
         0a:1a:20:af:1a:bb:81:cc:44:11:aa:12:3b:27:12:8d:3a:3d:
         27:27:13:a9:cd:da:e7:05:3a:82:dd:0f:80:88:e5:2e:19:93:
         ab:c4:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:56 2025 by rpki-client