Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f6ceb35-e836-30a4-8d7f-a951900d327c.roa
File:                     4f6ceb35-e836-30a4-8d7f-a951900d327c.roa (raw, json)
Hash identifier:          L355EGbNB6eAJs4mnRz40UA5iGSUva8F6VQnn/7UC7s=
Subject key identifier:   0B:CD:24:14:25:13:85:65:05:9C:C5:FA:5B:4A:5F:0E:D7:E1:CF:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3EA00B340F7F6ED0C1420
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f6ceb35-e836-30a4-8d7f-a951900d327c.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.107.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:ea:00:b3:40:f7:f6:ed:0c:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=8577e809-d31d-4075-8d56-d33932724670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:2c:74:1c:ef:30:10:30:0f:bf:b0:4f:8e:
                    fe:e2:8a:87:82:5e:03:7b:45:8c:10:0b:cb:ff:b4:
                    15:24:6e:9b:db:28:1c:99:6a:5f:99:02:33:fc:fc:
                    ad:74:f2:6e:42:33:1c:ab:a4:ea:7d:06:37:95:e9:
                    cd:f4:25:8b:ad:c8:bc:7e:6f:be:85:2d:29:0f:02:
                    f8:e3:e3:67:8b:dc:01:4f:49:d4:8f:b5:11:c0:ac:
                    a0:6f:95:3d:31:09:e7:01:25:fe:ab:cf:64:ae:e5:
                    f7:6e:cb:cc:0b:9a:ff:d8:5d:1d:e3:39:2a:86:aa:
                    1d:f5:23:26:93:bd:0b:1c:24:1c:37:9c:47:29:1c:
                    d5:4e:2d:9c:a7:76:58:2b:4d:42:60:f1:5a:de:04:
                    4f:2b:8b:7c:72:7d:2b:4e:3f:be:2e:0f:63:29:e2:
                    37:3f:79:47:5b:07:fe:ea:42:a2:ed:07:9c:65:d4:
                    13:44:35:d7:76:d8:5d:a9:56:1d:d7:26:28:df:82:
                    de:1a:d8:46:53:33:c8:e3:18:2a:cf:6a:f3:8f:d6:
                    c5:c2:bb:3b:43:e3:cf:36:61:35:7c:60:5b:0a:c6:
                    0d:5f:a2:5d:ab:da:19:ce:f6:b3:f4:55:f2:f1:e0:
                    e1:0e:ff:81:09:f2:a6:ef:23:c9:13:89:df:9b:90:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:24:14:25:13:85:65:05:9C:C5:FA:5B:4A:5F:0E:D7:E1:CF:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f6ceb35-e836-30a4-8d7f-a951900d327c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:36:ab:ca:2a:a3:24:2f:c2:e7:e1:6b:4c:34:ec:49:9e:31:
         c7:0a:ee:ec:73:95:89:01:6e:3f:2b:e2:a2:80:05:a3:d5:13:
         be:ad:cb:bc:b5:b5:8c:af:8d:62:20:b9:e2:66:25:15:85:3c:
         ac:ce:a8:01:79:31:9a:d8:40:1a:93:f9:b8:75:7f:2b:66:b8:
         12:5b:8f:0d:a0:1a:0d:a1:81:25:bf:d4:e4:d9:d4:53:b5:e3:
         17:d0:2c:b9:be:38:d1:1f:eb:ad:e9:fd:79:e4:99:24:15:96:
         af:9f:f8:e8:79:80:7f:4a:be:37:21:65:93:45:7f:56:b8:78:
         51:73:d7:fa:b5:86:7f:de:f8:19:28:b9:6c:20:c4:f6:e6:18:
         68:d8:aa:20:5f:a1:ca:b8:05:01:2a:a6:2c:5f:b8:2f:c2:46:
         5e:4a:0b:1e:b2:4b:90:9c:d7:1f:4d:1c:56:a7:78:d0:4f:83:
         1f:ea:0f:12:89:77:f4:14:13:40:b7:35:6d:3d:a2:4d:fd:3b:
         73:14:ef:00:78:e3:d0:95:c8:88:7e:53:36:0d:a0:a3:7f:ca:
         a6:cf:49:30:8b:60:92:c3:0e:b4:90:d3:4d:09:3a:a1:ea:59:
         cb:1d:f7:a6:2e:66:09:3c:6a:9a:b6:3e:79:5b:93:38:7d:a9:
         08:0e:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:29:00 2025 by rpki-client