Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e5f1779-bb52-3684-b017-3066fef6903c.roa
File:                     4e5f1779-bb52-3684-b017-3066fef6903c.roa (raw, json)
Hash identifier:          CNObl1RIcRt1ZRyPBYcYmHwUwuS8d/I4sQV/m5oV6Hc=
Subject key identifier:   6F:79:65:4D:E6:98:7A:85:B2:43:8B:B2:0C:52:7B:C7:8D:59:EF:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0553CE1987F57ACA9200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e5f1779-bb52-3684-b017-3066fef6903c.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.96.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:05:53:ce:19:87:f5:7a:ca:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=11035814-143e-4592-a20b-5e7952c09a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:64:ff:39:9e:4b:db:11:e2:b2:2b:20:45:
                    42:bf:3b:18:be:43:63:d8:d4:e6:1b:81:04:78:37:
                    34:d4:b3:18:96:60:c2:05:32:83:29:b5:4e:85:a7:
                    ba:75:7a:0e:38:87:f4:60:61:d5:75:eb:f6:c7:ce:
                    fb:81:0e:5c:d5:a9:fd:30:82:a4:95:4b:9c:0c:92:
                    1b:89:40:b3:d4:eb:b8:39:4c:a8:a7:3d:57:80:16:
                    12:d0:35:a6:be:7e:86:db:c4:9f:f0:c8:53:59:f9:
                    c2:62:1a:59:31:09:16:88:1a:38:d3:e1:7a:e3:3e:
                    d2:6a:08:ed:37:4f:42:09:d2:c9:b5:9f:65:7a:ff:
                    f4:84:0d:ff:a2:b7:fa:35:d3:cf:f5:4f:21:a8:3f:
                    16:66:12:c3:fd:63:bf:51:da:16:76:0f:1b:81:f8:
                    ad:f9:2f:52:eb:1c:24:8d:7d:a3:97:21:48:84:da:
                    08:81:e1:af:82:64:9b:f5:3b:e5:8d:1f:50:bf:90:
                    4a:58:e2:b6:ed:be:03:ef:8c:2e:ea:15:73:06:2c:
                    f6:fe:91:4e:fb:11:0e:ee:dc:3b:eb:63:e0:03:1a:
                    69:7a:9c:17:be:cd:e5:47:e6:f7:a6:f5:2b:ba:c7:
                    1c:e9:cb:c6:8c:16:4a:98:f3:fc:d6:eb:05:8e:55:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:65:4D:E6:98:7A:85:B2:43:8B:B2:0C:52:7B:C7:8D:59:EF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e5f1779-bb52-3684-b017-3066fef6903c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:63:25:cc:df:b3:c5:85:9d:cc:6e:d6:bc:21:12:a8:75:74:
         bd:83:79:34:a2:a4:d2:4c:60:3d:dd:38:f5:37:d4:4f:27:86:
         ce:55:30:a5:ad:90:d8:2a:28:b2:e5:02:44:7d:79:94:5d:43:
         ab:67:41:d1:e1:23:52:b0:78:92:bd:cb:71:b4:bb:4b:1e:24:
         b3:57:a5:a9:f9:ce:c4:e2:c1:50:ab:60:33:58:d7:99:2d:ec:
         00:19:28:59:2d:24:33:89:53:18:38:20:d8:4c:ca:6a:af:71:
         a9:85:ca:c2:08:03:10:a9:df:94:c7:6b:64:16:01:ce:af:2a:
         ce:f4:43:a4:11:79:55:49:ca:5c:30:0b:63:2b:c8:dd:6a:90:
         68:12:5c:67:e3:03:ac:54:00:fe:86:a3:36:aa:84:58:17:d3:
         c3:fa:08:81:cb:7b:24:93:b1:a9:4f:4f:17:2a:54:0b:45:37:
         23:e1:70:6d:d2:54:50:aa:c2:90:59:c0:e8:c2:79:d4:52:91:
         0b:fa:9f:02:db:fe:7c:0d:15:76:2c:4b:2a:46:a4:0d:da:48:
         da:6c:d5:4d:18:d5:54:97:7f:3b:d4:5d:ea:a2:08:be:48:68:
         c6:45:0f:bd:56:5e:ac:c1:b8:d2:8b:b8:0a:48:ee:33:21:37:
         d9:4f:21:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AVTzhmH9XrKkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTEwMzU4MTQtMTQzZS00NTkyLWEyMGItNWU3OTUyYzA5YTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr9k/zmeS9sR4rIrIEVCvzsYvkNj2NTmG4EE
eDc01LMYlmDCBTKDKbVOhae6dXoOOIf0YGHVdev2x877gQ5c1an9MIKklUucDJIb
iUCz1Ou4OUyopz1XgBYS0DWmvn6G28Sf8MhTWfnCYhpZMQkWiBo40+F64z7Sagjt
N09CCdLJtZ9lev/0hA3/orf6NdPP9U8hqD8WZhLD/WO/UdoWdg8bgfit+S9S6xwk
jX2jlyFIhNoIgeGvgmSb9TvljR9Qv5BKWOK27b4D74wu6hVzBiz2/pFO+xEO7tw7
62PgAxppepwXvs3lR+b3pvUruscc6cvGjBZKmPP81usFjlURGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG95ZU3mmHqFskOLsgxSe8eNWe+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU1ZjE3NzktYmI1Mi0z
Njg0LWIwMTctMzA2NmZlZjY5MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJljJczfs8WFncxu1rwhEqh1dL2DeTSipNJMYD3dOPU31E8nhs5VMKWt
kNgqKLLlAkR9eZRdQ6tnQdHhI1KweJK9y3G0u0seJLNXpan5zsTiwVCrYDNY15kt
7AAZKFktJDOJUxg4INhMymqvcamFysIIAxCp35THa2QWAc6vKs70Q6QReVVJylww
C2MryN1qkGgSXGfjA6xUAP6GozaqhFgX08P6CIHLeySTsalPTxcqVAtFNyPhcG3S
VFCqwpBZwOjCedRSkQv6nwLb/nwNFXYsSypGpA3aSNps1U0Y1VSXfzvUXeqiCL5I
aMZFD71WXqzBuNKLuApI7jMhN9lPIRA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:55 2025 by rpki-client