Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f126d50-e693-3b05-a367-3fa6230e4e07.roa
File:                     8f126d50-e693-3b05-a367-3fa6230e4e07.roa (raw, json)
Hash identifier:          YedTdwF/Ur40qkKmW98x/HdyX3X+m1r8ayfoyrlTivw=
Subject key identifier:   6B:F3:ED:0E:35:3C:59:38:56:C4:F9:6A:BC:BC:2B:FC:C6:C6:17:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F18002D6820507E021DD41A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f126d50-e693-3b05-a367-3fa6230e4e07.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        72.73.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:02:d6:82:05:07:e0:21:dd:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=2146b20e-fc9c-4523-b649-83134c9fccbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:d4:a5:b5:3b:67:e5:54:0f:a2:26:3a:0e:
                    32:15:57:48:f4:cb:20:4e:3b:68:3b:0e:5d:1d:74:
                    5e:1a:e0:bf:07:36:93:09:19:3d:6c:9e:4e:80:36:
                    65:84:4e:e0:e6:08:fc:1d:ed:75:f4:f8:bd:4e:99:
                    32:3b:f9:c6:d8:64:ff:96:09:0e:f7:5e:71:83:d7:
                    e2:62:94:76:fd:aa:81:43:f6:1a:d9:67:17:46:36:
                    ef:9e:28:33:66:8a:48:1c:0a:43:88:ce:39:4c:cc:
                    07:ff:58:dd:ca:5e:15:a8:98:56:c7:dc:de:ae:38:
                    0a:76:c6:7d:19:3c:b4:25:60:d3:5f:d1:fb:1b:1e:
                    d0:f9:a7:8b:87:60:c4:96:bc:89:8d:ff:e3:a2:ca:
                    fd:31:a8:ca:98:87:aa:95:26:cf:38:87:de:1f:45:
                    2d:86:39:71:e9:a4:80:9b:71:66:a4:27:15:91:82:
                    87:30:81:92:27:41:4c:bf:a7:7b:c7:55:6b:cd:ee:
                    61:7e:07:72:8e:8d:f9:10:36:b7:f1:5f:b5:27:47:
                    0e:67:2b:c5:40:f5:18:4d:c7:ce:e3:ea:59:cf:ea:
                    ed:24:b6:bf:62:47:f4:19:a3:e6:85:6f:fe:5e:f5:
                    a5:13:40:28:77:84:db:5b:ee:8e:46:71:33:95:ab:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:ED:0E:35:3C:59:38:56:C4:F9:6A:BC:BC:2B:FC:C6:C6:17:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f126d50-e693-3b05-a367-3fa6230e4e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.73.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:21:1f:71:af:38:9e:31:24:42:c2:35:24:19:89:76:8e:a9:
         bf:57:5a:53:ce:a8:8b:6f:04:db:69:65:fd:43:3f:a4:f3:45:
         46:b4:0d:9c:31:71:85:74:50:82:8c:ce:d0:6b:02:bc:ba:20:
         a7:7e:87:07:1f:0d:53:62:f4:e6:4c:6c:fa:2b:99:8c:c6:8e:
         3b:28:72:6c:1a:c9:a1:1e:ab:13:19:de:3c:7a:8e:05:7c:42:
         c9:4e:25:0e:ee:b8:ec:fa:5b:18:1b:dc:91:2a:db:5b:c5:b1:
         c9:29:8f:8e:2d:eb:85:34:ae:a8:e0:f9:54:c1:d8:d2:1d:67:
         6e:88:fa:47:8b:ee:7b:ce:63:88:f6:a7:26:21:3a:82:8d:ee:
         f0:1a:08:f1:7d:54:92:9c:a6:a4:d4:f8:3a:80:92:be:75:91:
         22:e9:75:f9:b4:3c:70:e6:65:b4:db:83:06:b0:1f:04:82:c9:
         5c:74:b4:ae:b3:1c:64:25:36:26:7f:ea:2f:9f:bd:ed:7e:e1:
         94:13:e1:81:4f:38:d1:e5:68:9b:a8:e4:c7:8e:bc:95:e4:2d:
         e6:57:5b:7f:65:fc:40:f1:7f:67:f1:34:b5:e9:66:d1:52:27:
         db:a6:6a:cc:88:75:a0:d4:18:71:e7:eb:6f:a0:89:0b:84:cb:
         fd:37:dd:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgALWggUH4CHdQaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MjE0NmIyMGUtZmM5Yy00NTIzLWI2NDktODMxMzRjOWZjY2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwanUpbU7Z+VUD6ImOg4yFVdI9MsgTjtoOw5d
HXReGuC/BzaTCRk9bJ5OgDZlhE7g5gj8He119Pi9TpkyO/nG2GT/lgkO915xg9fi
YpR2/aqBQ/Ya2WcXRjbvnigzZopIHApDiM45TMwH/1jdyl4VqJhWx9zerjgKdsZ9
GTy0JWDTX9H7Gx7Q+aeLh2DElryJjf/josr9MajKmIeqlSbPOIfeH0Uthjlx6aSA
m3FmpCcVkYKHMIGSJ0FMv6d7x1Vrze5hfgdyjo35EDa38V+1J0cOZyvFQPUYTcfO
4+pZz+rtJLa/Ykf0GaPmhW/+XvWlE0Aod4TbW+6ORnEzlav2pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvz7Q41PFk4VsT5ary8K/zGxhdqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGYxMjZkNTAtZTY5My0z
YjA1LWEzNjctM2ZhNjIzMGU0ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESEkwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALMhH3GvOJ4xJELCNSQZiXaOqb9XWlPOqItvBNtpZf1DP6TzRUa0DZwx
cYV0UIKMztBrAry6IKd+hwcfDVNi9OZMbPormYzGjjsocmwayaEeqxMZ3jx6jgV8
QslOJQ7uuOz6Wxgb3JEq21vFsckpj44t64U0rqjg+VTB2NIdZ26I+keL7nvOY4j2
pyYhOoKN7vAaCPF9VJKcpqTU+DqAkr51kSLpdfm0PHDmZbTbgwawHwSCyVx0tK6z
HGQlNiZ/6i+fve1+4ZQT4YFPONHlaJuo5MeOvJXkLeZXW39l/EDxf2fxNLXpZtFS
J9umasyIdaDUGHHn62+giQuEy/033WU=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:10 2025 by rpki-client