Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51defabf-9213-3071-a7bd-b5664dccb9ca.roa
File:                     51defabf-9213-3071-a7bd-b5664dccb9ca.roa (raw, json)
Hash identifier:          yob+hjcGGkYlSq6wR/CFE2hBI7brL6DJtwwcsKlpQPc=
Subject key identifier:   FF:EF:E0:BA:EB:ED:40:D9:CF:78:B7:F0:AB:B5:84:C5:18:E0:47:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0801037EFF90C13370C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51defabf-9213-3071-a7bd-b5664dccb9ca.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.105.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:08:01:03:7e:ff:90:c1:33:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=ee37eca6-f324-4e62-b8ac-00d9a329554a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:dd:89:3c:d0:39:c8:a9:69:3b:ba:8a:56:
                    86:70:74:00:57:70:a1:90:18:79:bf:fd:f9:30:21:
                    5f:b3:e6:e8:96:22:43:50:cd:62:dc:36:19:45:5b:
                    e2:74:19:32:17:97:f8:f8:8c:77:0f:8f:a6:23:76:
                    cd:1a:68:17:99:5e:00:30:8b:9f:99:72:35:ae:d3:
                    f2:56:cb:86:d5:f9:7e:58:2d:ae:d3:97:c1:c7:a5:
                    0f:ca:e0:65:e3:a7:76:f5:4a:b8:85:05:81:bd:e4:
                    c5:8e:97:3d:15:b8:b3:ab:15:c8:1d:82:36:41:9b:
                    d4:6d:2e:68:5d:f0:f0:62:43:ef:97:e3:bf:23:75:
                    34:6c:01:25:d8:e0:6c:91:86:ca:d0:ff:93:c8:52:
                    e1:2a:1c:12:c3:cd:08:db:b8:ae:4b:3f:bc:08:b5:
                    05:cb:bf:95:ac:14:5b:0a:10:a0:7f:3d:d4:43:aa:
                    cb:ff:ad:22:da:a8:17:5d:ab:df:95:0a:67:44:3e:
                    07:01:de:3e:49:fa:a9:93:02:10:0c:ff:51:e2:6b:
                    dd:ec:8f:fc:aa:7d:97:26:86:7f:65:b8:fc:e8:ad:
                    ef:ad:36:d9:f3:85:a9:45:e0:f3:f5:46:3d:b3:af:
                    ed:d0:a5:32:8b:74:79:a7:8a:5b:50:89:e2:e7:f6:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:E0:BA:EB:ED:40:D9:CF:78:B7:F0:AB:B5:84:C5:18:E0:47:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51defabf-9213-3071-a7bd-b5664dccb9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:5e:74:1b:e2:59:95:05:80:3e:8a:9c:5a:ec:5e:c1:25:92:
         16:26:9e:a7:b7:41:27:ef:b0:50:44:2d:43:89:1f:29:33:1d:
         af:4d:1e:58:af:1e:b7:49:1a:5e:6b:46:db:8a:3b:08:bf:89:
         57:c1:39:b4:5b:8c:66:2a:16:b1:64:ac:91:fb:ab:7a:51:49:
         bd:cc:16:5e:91:d8:3c:ce:30:b6:5e:fe:64:65:26:24:c5:3c:
         f7:29:ff:38:02:c2:0e:0b:4e:e9:59:1a:52:85:7f:f8:0c:d4:
         27:ff:78:97:96:80:a5:77:ca:21:1b:a3:bc:b1:93:2b:9c:73:
         a1:86:ef:20:9d:00:68:90:42:17:42:25:b9:62:df:8c:b9:15:
         1d:20:dd:69:b8:ef:bc:c1:2f:93:d6:d2:e0:a5:fe:c5:bc:d8:
         81:9a:c2:70:96:fe:3c:a4:19:fa:49:98:f7:e8:94:1c:50:c5:
         9e:b5:62:92:b1:a9:79:3c:d1:d0:04:22:2e:c1:08:83:ef:9c:
         91:92:92:29:3b:32:b5:cc:f1:b8:9a:9f:ab:98:0c:d0:25:a4:
         dc:7e:a8:d1:d5:b6:c9:eb:95:c5:86:92:f3:eb:ae:c2:46:0b:
         ef:ba:b9:0a:54:5a:87:d2:fd:d1:7c:45:0d:87:6a:fc:c8:29:
         b5:b3:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:45:27 2025 by rpki-client