Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
File:                     9d4a5872-06fd-3b49-9181-214a58a6db46.roa (raw, json)
Hash identifier:          +16KNNWe11Gey4YTjEGHojvuZ4RkF/roF6bUG8LyDSg=
Subject key identifier:   C5:78:DC:44:59:1A:12:41:74:FA:38:2D:9D:A4:69:D0:09:86:E2:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E1ADB399F1C14BDFE1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.109.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e1:ad:b3:99:f1:c1:4b:df:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=ea4661e8-2780-4b23-94c2-b5b7d94b048f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:3a:5b:e7:78:c9:00:8c:c6:9c:da:76:59:
                    80:46:86:47:11:a8:f7:23:87:08:9c:fd:9e:94:d5:
                    39:03:40:c9:ae:e0:09:a5:6a:99:87:79:91:a4:e0:
                    1c:be:f4:18:7b:98:41:35:a6:fa:cb:d0:3b:c9:88:
                    9c:32:f7:f9:e5:7e:c0:f7:fe:cd:e6:a0:f3:ba:a9:
                    38:19:de:a2:af:82:6e:ef:3b:e3:82:0d:b3:6b:f8:
                    98:cc:fe:5f:77:a5:1d:72:0e:29:6e:cf:ac:c6:7b:
                    3e:6e:08:4f:45:f9:d1:71:15:44:bf:ed:bd:f2:93:
                    0e:d1:94:29:e3:b8:03:a5:36:aa:50:52:80:32:5b:
                    20:df:fe:38:31:44:eb:2b:e1:fe:a7:70:21:e0:36:
                    fc:04:0e:8e:e0:ee:68:dc:3b:7c:37:4e:4f:97:35:
                    d3:2f:84:6f:4d:20:a5:33:10:bd:78:ae:b6:bb:b4:
                    c8:08:fa:e4:83:2e:04:00:a2:d3:61:33:6a:42:f3:
                    8a:48:0d:d5:a0:2f:4f:2d:40:01:8c:93:f6:96:3c:
                    9b:c5:a2:2b:b6:fa:e6:5b:0d:69:c8:f6:80:62:10:
                    16:bc:be:26:5b:df:ad:1f:d5:3d:c1:d8:d4:2c:65:
                    db:f5:9e:c4:01:8e:4a:ca:4c:be:94:ce:3c:0d:47:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:78:DC:44:59:1A:12:41:74:FA:38:2D:9D:A4:69:D0:09:86:E2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:5b:e8:9c:15:5e:74:e4:a3:fb:e1:61:17:96:4c:18:95:
         ab:3c:13:6c:02:af:ac:63:cc:58:81:47:1e:56:8d:72:79:29:
         f8:e8:e1:a0:46:a7:9a:e9:4d:5a:85:92:c1:f8:cb:9c:a5:4b:
         ab:50:66:ec:07:b9:ae:07:73:77:de:50:0b:9d:2d:95:7d:f9:
         0a:a5:56:0c:14:03:33:51:7c:93:67:35:6a:c4:14:15:6c:15:
         32:ac:5d:0c:71:fc:13:6e:40:5c:8c:cc:18:a7:20:d7:e3:5f:
         55:04:0b:66:7c:dd:ed:93:b3:28:b9:ea:08:4c:de:43:f1:4f:
         e0:91:24:9f:9c:ba:7c:01:2b:a2:e3:2d:80:fe:f7:80:61:ed:
         7c:ee:fc:61:45:63:f5:69:6e:60:8b:89:ac:5c:f4:fa:75:89:
         6b:0d:68:19:f1:e3:b3:11:54:7c:77:14:d1:3e:6f:32:e3:56:
         df:d3:79:3d:3c:56:8f:d1:19:19:70:73:78:92:39:b9:52:3d:
         7e:51:f4:3a:ab:db:50:6d:83:57:22:e2:f0:65:30:df:9c:a3:
         61:a3:14:0c:05:27:9b:e3:a9:ad:0a:66:a9:b6:64:f2:ec:99:
         d2:22:9c:84:5a:c9:3c:e4:6c:70:4f:16:6c:fa:7a:62:ba:b1:
         a5:ec:ce:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+Gts5nxwUvf4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZWE0NjYxZTgtMjc4MC00YjIzLTk0YzItYjViN2Q5NGIwNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+E6W+d4yQCMxpzadlmARoZHEaj3I4cInP2e
lNU5A0DJruAJpWqZh3mRpOAcvvQYe5hBNab6y9A7yYicMvf55X7A9/7N5qDzuqk4
Gd6ir4Ju7zvjgg2za/iYzP5fd6Udcg4pbs+sxns+bghPRfnRcRVEv+298pMO0ZQp
47gDpTaqUFKAMlsg3/44MUTrK+H+p3Ah4Db8BA6O4O5o3Dt8N05PlzXTL4RvTSCl
MxC9eK62u7TICPrkgy4EAKLTYTNqQvOKSA3VoC9PLUABjJP2ljybxaIrtvrmWw1p
yPaAYhAWvL4mW9+tH9U9wdjULGXb9Z7EAY5Kyky+lM48DUdjNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMV43ERZGhJBdPo4LZ2kadAJhuKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWQ0YTU4NzItMDZmZC0z
YjQ5LTkxODEtMjE0YTU4YTZkYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmzW+icFV505KP74WEXlkwYlas8E2wCr6xjzFiBRx5WjXJ5Kfjo4aBG
p5rpTVqFksH4y5ylS6tQZuwHua4Hc3feUAudLZV9+QqlVgwUAzNRfJNnNWrEFBVs
FTKsXQxx/BNuQFyMzBinINfjX1UEC2Z83e2Tsyi56ghM3kPxT+CRJJ+cunwBK6Lj
LYD+94Bh7Xzu/GFFY/VpbmCLiaxc9Pp1iWsNaBnx47MRVHx3FNE+bzLjVt/TeT08
Vo/RGRlwc3iSOblSPX5R9Dqr21Btg1ci4vBlMN+co2GjFAwFJ5vjqa0KZqm2ZPLs
mdIinIRayTzkbHBPFmz6emK6saXszpw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:48 2025 by rpki-client