Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa
File:                     71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa (raw, json)
Hash identifier:          SjHVMz6FpdU64wZNsSwEGazyLgwzDDD8m2NrhsqM5CY=
Subject key identifier:   04:72:30:D1:DC:6C:B6:E2:AA:B5:9B:B6:A8:23:91:4C:83:A7:D1:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0DB2B84DBDA6B02027C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.104.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0d:b2:b8:4d:bd:a6:b0:20:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=7b330f14-fb37-47bf-bde6-a6cc550b0a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1e:d6:47:68:1b:df:77:ae:10:39:08:43:c8:
                    0d:0a:d3:e1:ae:6b:40:4d:a1:de:0e:66:0c:c6:ef:
                    d8:72:78:95:37:97:18:cf:d7:b5:8c:82:42:ae:6d:
                    ce:bc:28:ce:56:41:9a:09:73:bb:c3:7e:2b:c1:b0:
                    8d:5e:e2:0b:08:f5:1f:cd:7d:0e:08:e2:22:eb:07:
                    7b:f1:dd:5e:a4:f7:c2:68:01:ae:ac:ca:95:f9:c4:
                    3e:de:f8:e6:72:99:2e:39:ae:00:df:4e:10:d0:9e:
                    21:bb:00:3a:35:bb:36:38:6f:5e:8f:f8:50:08:96:
                    8b:5d:a1:70:e0:74:c8:cc:1a:01:9c:75:5e:ae:f3:
                    c7:3e:0a:42:8a:49:24:9f:2d:a8:01:c3:ab:e5:ec:
                    f1:00:10:fd:0c:4d:75:99:c9:94:db:73:d4:6a:9a:
                    68:c6:1a:00:6f:c9:ab:c8:c6:26:3d:dd:8b:0a:12:
                    73:fb:ce:c9:bf:c3:42:14:47:f1:51:24:c2:52:bf:
                    23:1f:09:d3:f6:e4:10:9d:2b:b5:2e:8a:8f:e5:49:
                    2d:b1:ef:58:93:69:73:03:71:bb:52:b1:4a:3d:55:
                    15:f0:1a:51:9a:4e:20:9f:24:2f:2a:13:23:75:f3:
                    5a:03:f8:4d:04:27:20:90:14:90:29:c0:d9:9b:8c:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:30:D1:DC:6C:B6:E2:AA:B5:9B:B6:A8:23:91:4C:83:A7:D1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:39:ee:29:f4:d5:cf:eb:5b:e6:e5:3c:a5:6a:8f:1c:90:
         30:0a:7e:54:f4:bf:a0:32:05:96:ec:24:ae:5e:c5:bd:6d:36:
         bc:50:8f:ec:21:6b:75:9d:44:7d:5c:e9:37:48:67:30:58:9a:
         d0:de:79:e9:60:c7:2d:51:1d:02:0d:30:a5:7b:b5:3f:8c:f7:
         b2:ff:c5:68:bf:32:57:50:fd:2b:ff:b7:d8:90:89:4e:d3:5c:
         50:02:6e:2a:69:0b:bc:47:bb:ca:8c:98:ea:3f:49:a5:6b:cd:
         da:ca:02:bb:a1:89:ac:76:80:a9:15:5a:54:32:7a:d1:df:21:
         23:90:e2:53:94:97:39:49:47:ee:e8:05:65:07:f2:58:84:9d:
         af:85:01:04:2c:06:01:b6:99:49:cc:43:69:87:b9:85:0f:95:
         8e:56:27:95:3a:58:e4:1e:85:66:4d:a5:3c:04:0c:e6:70:dd:
         ab:5a:bc:b9:30:2e:e6:71:41:34:3d:4a:c9:22:d5:7e:7c:93:
         3d:a4:09:ab:d1:a4:b6:b0:dd:59:37:17:a5:7b:df:ce:7e:5a:
         ab:5d:38:d9:8b:1d:c7:6e:78:58:0d:32:a2:2c:5a:16:28:2a:
         7c:dd:7f:a7:fd:ed:35:27:22:24:81:9a:e6:43:a4:c5:31:d6:
         e0:b4:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:33:36 2025 by rpki-client