Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3fcf38-8123-381f-9640-d2fff1c83183.roa
File:                     4f3fcf38-8123-381f-9640-d2fff1c83183.roa (raw, json)
Hash identifier:          b+djiQG8mdqlUMyAsSgITwKv4vP2CMRe5UkTifUSux8=
Subject key identifier:   0B:94:0E:71:79:A2:1E:13:E8:FA:22:51:82:1A:8F:89:AB:23:76:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA853BFD45E880DADE0DC880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3fcf38-8123-381f-9640-d2fff1c83183.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        72.79.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:3b:fd:45:e8:80:da:de:0d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=01029d12-44b3-4fbb-84c5-b368f94fb837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:51:6b:39:b5:b1:69:4c:86:ab:66:8a:51:
                    94:21:59:81:2d:2a:9c:4d:b3:8e:e7:38:33:34:8a:
                    e4:a6:75:6a:b3:a6:46:6a:88:88:38:73:fa:75:9a:
                    98:bf:95:80:57:29:68:a3:49:a1:e3:cc:ea:3a:fa:
                    fc:b1:54:27:3c:15:bb:e5:5e:db:5e:44:bc:fa:b6:
                    cc:cb:bd:d1:9f:cf:4f:ff:b9:d5:df:b6:d4:d2:d6:
                    60:02:1d:65:7e:2b:27:04:8a:46:73:c4:21:8b:d4:
                    ed:3e:99:8f:1b:b8:8e:a9:86:b7:84:69:88:a4:d3:
                    62:6f:6e:59:43:cf:df:98:e4:d1:7a:4b:e1:86:67:
                    f2:f7:6d:40:15:c3:f1:8d:53:01:c8:94:22:0d:21:
                    c4:33:d1:fc:6a:61:46:93:09:d6:be:4a:a5:94:e0:
                    1f:a7:76:eb:39:e6:8c:99:c3:ff:3b:c3:67:be:ad:
                    d6:39:d1:68:a6:30:85:ad:53:4e:73:e9:84:6d:e5:
                    92:3a:f6:83:f6:d1:4a:bc:e7:6c:07:db:1f:30:d5:
                    2a:89:50:6b:11:c5:ed:03:89:8d:0b:ae:cb:a3:97:
                    f1:0a:4a:5f:ce:0e:f0:4d:18:c4:ca:d7:d7:ec:4a:
                    a9:68:79:fb:cb:90:13:5b:18:62:17:94:30:f1:44:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:94:0E:71:79:A2:1E:13:E8:FA:22:51:82:1A:8F:89:AB:23:76:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3fcf38-8123-381f-9640-d2fff1c83183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.79.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:74:39:15:ef:bc:fb:f6:b8:5e:be:7d:2e:5e:78:56:a9:29:
         84:0f:f5:3b:18:2f:ab:88:e7:fd:3b:da:2b:d4:17:f6:df:2c:
         99:f7:0c:54:b5:12:10:f0:b9:18:70:4e:f1:39:d2:44:cd:9b:
         fb:f9:df:ce:e7:05:ff:8a:13:4c:2d:c7:d6:08:02:fb:20:8c:
         43:17:06:8a:ce:df:6c:3a:87:b9:d1:e3:ee:08:c1:07:4d:eb:
         b0:eb:ed:06:5f:8f:0d:32:65:f9:53:8f:42:ee:30:21:ef:b6:
         1d:5e:0d:75:24:80:0e:88:3f:cc:cb:21:bd:29:0d:68:6a:7e:
         6e:0c:60:77:f8:ee:1f:3e:4b:9e:7c:e7:06:ca:95:67:5e:eb:
         f9:13:94:44:dc:79:bd:d7:75:26:ff:04:b0:0b:dd:72:ef:77:
         ce:fa:44:f2:2e:c1:b4:3a:eb:34:7d:52:ba:28:a1:6c:14:44:
         34:1d:5d:2d:4a:80:43:ad:5f:a2:0a:0f:fa:aa:4a:de:14:1a:
         06:b4:e9:cd:61:47:78:d2:b5:a1:4f:b6:20:9b:d1:fc:31:eb:
         c8:fc:8c:6d:e7:55:76:88:17:5e:d1:1b:a7:c6:25:79:4b:47:
         1f:d8:38:44:35:e3:4e:9b:ad:9c:17:83:27:e0:7a:67:4b:7f:
         8d:9e:90:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTv9ReiA2t4NyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
MDEwMjlkMTItNDRiMy00ZmJiLTg0YzUtYjM2OGY5NGZiODM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb1Razm1sWlMhqtmilGUIVmBLSqcTbOO5zgz
NIrkpnVqs6ZGaoiIOHP6dZqYv5WAVyloo0mh48zqOvr8sVQnPBW75V7bXkS8+rbM
y73Rn89P/7nV37bU0tZgAh1lfisnBIpGc8Qhi9TtPpmPG7iOqYa3hGmIpNNib25Z
Q8/fmOTRekvhhmfy921AFcPxjVMByJQiDSHEM9H8amFGkwnWvkqllOAfp3brOeaM
mcP/O8Nnvq3WOdFopjCFrVNOc+mEbeWSOvaD9tFKvOdsB9sfMNUqiVBrEcXtA4mN
C67Lo5fxCkpfzg7wTRjEytfX7EqpaHn7y5ATWxhiF5Qw8UQn1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuUDnF5oh4T6PoiUYIaj4mrI3baMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGYzZmNmMzgtODEyMy0z
ODFmLTk2NDAtZDJmZmYxYzgzMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSE+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR0ORXvvPv2uF6+fS5eeFapKYQP9TsYL6uI5/072ivUF/bfLJn3DFS1
EhDwuRhwTvE50kTNm/v5387nBf+KE0wtx9YIAvsgjEMXBorO32w6h7nR4+4IwQdN
67Dr7QZfjw0yZflTj0LuMCHvth1eDXUkgA6IP8zLIb0pDWhqfm4MYHf47h8+S558
5wbKlWde6/kTlETceb3XdSb/BLAL3XLvd876RPIuwbQ66zR9UroooWwURDQdXS1K
gEOtX6IKD/qqSt4UGga06c1hR3jStaFPtiCb0fwx68j8jG3nVXaIF17RG6fGJXlL
Rx/YOEQ1406brZwXgyfgemdLf42ekJM=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:00 2025 by rpki-client