Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90139c55-2d2c-3719-8e6e-deee2ed27428.roa
File:                     90139c55-2d2c-3719-8e6e-deee2ed27428.roa (raw, json)
Hash identifier:          4fS6hEfydvXU0+we10DlgLK5eEfJrlDcvRUok25RPzM=
Subject key identifier:   71:39:B7:CB:EB:B6:09:53:BF:48:91:79:80:06:C4:B5:1B:02:94:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3DE36D09FE1AFF5D6E678
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90139c55-2d2c-3719-8e6e-deee2ed27428.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.103.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:de:36:d0:9f:e1:af:f5:d6:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=d807ca14-2229-4242-834d-e3f8b0739d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:91:ad:4e:1b:2d:b0:8c:51:99:54:b1:b4:
                    d5:5e:63:16:bb:a8:1b:c9:b2:82:d8:8a:00:a4:34:
                    31:7f:d6:ee:e4:f6:c6:ab:83:ff:f5:52:10:1a:00:
                    8d:27:05:0f:1e:45:43:3d:70:0d:62:e8:0b:84:85:
                    f2:43:5d:57:79:5d:a2:42:37:93:4a:3b:46:43:c3:
                    d3:9d:bd:7f:ed:61:05:25:ee:12:2c:b9:aa:3c:23:
                    b3:54:d4:3d:94:3d:e1:cc:c2:0c:92:38:81:6d:a5:
                    88:82:54:ba:3e:23:39:e3:55:60:35:18:c6:9b:43:
                    31:b5:c5:7d:0c:26:af:ce:34:48:c9:85:9f:02:6b:
                    13:ac:6d:ef:ce:5b:cf:ab:ac:e7:d8:bd:a9:c8:44:
                    e1:33:db:53:f7:a6:d7:cf:c7:f8:96:a8:ae:58:78:
                    c2:15:ea:9e:32:c5:e5:1d:7e:30:01:af:72:06:bd:
                    91:07:67:73:11:fc:d7:c6:e4:93:68:d5:b7:12:7f:
                    41:0f:cd:7b:1b:9e:50:fe:05:d1:17:65:b2:05:79:
                    ae:d0:26:fe:31:f0:19:fe:82:1c:f3:21:76:38:37:
                    1d:e0:71:34:5f:e9:96:60:73:f6:31:06:ef:35:a4:
                    b0:d4:20:c0:8f:4e:1b:0e:c4:3e:9d:09:e8:34:f1:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:39:B7:CB:EB:B6:09:53:BF:48:91:79:80:06:C4:B5:1B:02:94:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90139c55-2d2c-3719-8e6e-deee2ed27428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:34:f1:bd:0b:df:34:5c:d8:6a:7c:a6:7a:6f:e3:3d:6c:43:
         52:64:fe:b6:fc:16:01:01:b3:6c:fe:95:6e:d5:55:23:ac:dc:
         88:70:13:a4:ee:67:5f:aa:6f:e0:77:e9:3c:53:d6:c2:f4:50:
         94:8f:4f:35:e7:58:02:1c:8b:fc:3d:41:8d:0d:f7:10:50:2b:
         be:14:4d:e3:52:0a:09:10:a0:de:83:73:55:89:5f:2c:54:38:
         44:8d:d9:71:af:38:47:8f:66:e4:2a:6c:2e:2e:d0:25:96:b0:
         6c:29:fa:1f:f8:ab:d4:21:bc:5e:d6:dc:54:20:38:c2:30:a7:
         a4:bd:a1:8f:bb:33:15:87:41:37:11:33:a3:f1:46:d8:70:76:
         db:24:5b:20:1d:f5:4d:7b:72:ed:13:1d:4d:59:c4:5f:97:91:
         9b:15:3a:72:9b:02:65:9a:73:29:da:3a:2a:2b:6c:56:96:cc:
         a3:34:dd:d5:12:20:c3:60:0f:f6:18:6a:05:2b:48:70:18:93:
         f3:45:80:6d:9e:44:0e:b8:7a:0a:e7:d7:14:cc:6b:52:c2:52:
         b0:d5:8f:c9:31:af:94:1d:e6:4f:7c:9f:66:44:dd:25:15:5e:
         90:a6:24:b2:15:e0:cb:62:2e:bb:fb:62:0c:4e:bf:78:9a:f1:
         01:86:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:00 2025 by rpki-client