Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa
File:                     922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa (raw, json)
Hash identifier:          EnDNza9ppWPTEYcwGfrvXMzyjBLmLX08BGg9ct8B0Cc=
Subject key identifier:   C1:B7:38:C9:9B:7D:88:00:E8:95:D8:79:3B:14:70:37:4D:54:B0:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E8020FAC1388748E9D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.103.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e8:02:0f:ac:13:88:74:8e:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=a5c9ea55-a514-4071-90c4-28008f886546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:e7:ef:09:75:a9:d7:81:3b:09:96:e9:d1:
                    9f:91:f6:63:ed:5c:45:bc:2b:b0:17:29:e3:4e:9d:
                    39:01:3b:a9:c9:48:0d:58:e3:77:1f:e9:f5:4f:c2:
                    c7:39:dc:33:69:a9:f6:18:4f:1a:1b:62:eb:2c:dc:
                    ad:4b:61:d6:35:c8:c7:e4:e0:dc:52:7d:5b:5d:e3:
                    34:34:d7:29:81:8a:19:40:73:d1:48:33:7b:47:e5:
                    78:83:e2:79:2f:17:39:3c:3f:2f:47:c1:6f:fe:0e:
                    49:0c:db:6d:ce:f1:24:bb:24:63:68:2d:27:6c:cd:
                    2b:ac:4b:23:e8:39:29:85:db:cb:80:c7:f4:99:8d:
                    d6:bd:eb:a0:40:20:ac:00:1f:aa:56:9b:e5:e4:6f:
                    0f:02:0c:3e:63:8a:22:d5:68:b1:a9:a2:9e:5b:0f:
                    eb:b9:43:cb:d6:78:6e:78:02:68:8f:27:c1:75:db:
                    cd:9c:d3:9e:8a:1a:92:6d:e5:25:ab:f4:55:de:4d:
                    8a:80:0a:96:46:15:3f:0c:cb:f2:a7:b1:6c:01:22:
                    9b:1a:d3:00:47:a2:99:04:6d:fa:28:7c:7a:a5:43:
                    44:7e:e1:a0:22:6a:7f:96:fc:2a:9b:76:fc:3d:bf:
                    b8:e9:7c:67:85:89:ab:d1:84:2b:27:20:0f:58:e1:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:38:C9:9B:7D:88:00:E8:95:D8:79:3B:14:70:37:4D:54:B0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:61:3e:2c:a2:53:58:22:25:a9:27:b3:d0:20:a5:96:d3:b6:
         b5:33:36:27:bf:8f:20:35:35:80:6c:56:55:43:99:cb:2c:5d:
         c1:10:a7:94:74:5f:46:3e:f4:99:67:97:2b:fd:24:55:ac:d7:
         9d:79:19:39:9a:31:56:b8:57:ae:0d:68:bc:16:fe:dc:c3:c6:
         09:8a:a8:6e:24:af:f1:32:98:33:d6:a7:ba:73:a3:74:e7:bc:
         11:26:82:09:08:36:60:e9:e8:6a:1b:de:f1:27:77:cc:b4:7b:
         42:2c:f4:72:0a:b0:4b:40:e3:97:2b:34:3e:db:8d:38:02:81:
         8d:66:0f:0d:dc:00:ab:b9:84:67:98:34:5c:3f:71:03:75:82:
         9d:33:cc:d4:b4:cc:1c:93:8d:84:93:23:49:a8:d9:15:7b:cc:
         5c:56:fd:7c:91:24:57:66:e1:f9:ca:2e:83:b1:bb:f5:98:f7:
         a3:a9:2d:56:57:34:68:61:07:db:b3:52:1c:cf:01:4c:d0:f2:
         b6:4c:b3:f1:14:13:ec:73:32:8b:73:fb:69:fd:52:2d:36:53:
         cf:e0:86:eb:6e:06:b3:7d:48:9c:a5:d2:2d:14:78:ec:89:90:
         55:e6:f5:36:0d:a1:c9:05:11:eb:f3:94:52:40:1a:5f:a0:c8:
         a3:1f:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:14:45 2025 by rpki-client