Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1f51458-642f-3cbc-899c-40bc33e5daba.roa
File:                     a1f51458-642f-3cbc-899c-40bc33e5daba.roa (raw, json)
Hash identifier:          Qu0io+eC6e9ymSoIaX6ly5psOrXqON/4XQrypc3vcyA=
Subject key identifier:   44:22:90:26:99:4B:A8:7B:D6:61:14:B8:F1:79:2A:BE:2B:37:36:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3DAE701222C7103763300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1f51458-642f-3cbc-899c-40bc33e5daba.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.108.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:da:e7:01:22:2c:71:03:76:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=4fd1a57e-f62c-49c0-b7ce-12459482d4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:fa:83:cf:a2:f5:2d:a0:a4:3d:73:bb:6f:
                    89:98:3d:eb:a2:ae:8a:45:d2:db:59:04:1d:34:15:
                    cf:d6:ff:a4:6e:53:ba:31:fd:0a:ff:76:4b:43:57:
                    61:a1:1d:38:01:60:2a:35:bc:d1:19:f4:5f:1e:e7:
                    36:fa:84:07:ea:30:41:6e:13:48:e8:38:65:27:2b:
                    d3:d8:fc:17:63:38:c2:70:be:05:25:da:d7:04:97:
                    a3:dd:1a:e8:6f:dd:30:6b:ac:da:c4:55:06:94:db:
                    d1:70:e8:37:94:a6:60:a2:3d:84:97:e1:c9:b1:5d:
                    86:64:18:43:6b:67:bb:d3:69:07:33:4e:d6:76:9d:
                    c6:03:63:09:21:b7:bb:32:6f:ab:f0:0f:cc:ae:e6:
                    26:ca:4e:c4:0e:f8:de:ec:2e:95:2a:70:d3:f3:b2:
                    30:03:d9:fa:f2:4e:c3:4c:e8:01:59:04:48:5b:d5:
                    20:93:14:a4:e5:6a:df:03:f3:8f:52:b7:ae:c9:66:
                    25:eb:a2:27:fb:51:eb:00:78:d2:b2:ba:a0:8b:d2:
                    f2:20:a0:d2:e0:c0:b2:cd:3b:1f:a7:22:54:bc:b7:
                    ac:a2:04:06:7a:90:41:a8:46:65:0d:e7:19:94:5a:
                    5d:bc:39:7c:25:24:ca:8b:40:80:fe:dd:25:ee:8c:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:22:90:26:99:4B:A8:7B:D6:61:14:B8:F1:79:2A:BE:2B:37:36:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1f51458-642f-3cbc-899c-40bc33e5daba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:06:48:bd:41:27:7f:74:9e:95:78:b7:ff:ce:c9:17:5f:b0:
         75:20:0b:ac:00:dd:99:3d:79:b6:a6:f4:c9:85:d3:02:89:87:
         75:6f:b8:97:86:fa:1c:76:36:e0:91:c6:96:9f:a0:4a:f1:8d:
         4d:c3:d3:0a:02:42:b6:75:fb:b9:cc:59:0a:d2:b4:d1:e3:76:
         7b:19:1e:4d:c6:69:c6:86:18:7f:f3:1a:3e:23:65:7e:a9:97:
         d7:de:cd:56:d2:87:4d:08:2e:7b:da:5d:dd:1b:58:0e:14:01:
         e8:3b:b9:f1:49:99:58:6c:99:0c:b8:37:73:06:b8:b3:ad:3d:
         f6:84:51:53:0c:1a:7a:f4:77:7d:6b:ad:da:c7:f3:d5:b5:76:
         58:51:47:72:64:2c:f4:86:5e:2c:ac:6a:86:b9:b2:35:e5:93:
         d5:77:ba:0b:71:44:c2:09:c9:64:9b:6c:3f:fa:01:11:56:cc:
         57:78:c8:b6:af:35:cf:93:88:0a:91:cd:b9:d7:c4:e3:43:9a:
         aa:a0:44:76:62:a7:fb:04:ef:8a:be:6e:ab:6c:df:b8:20:8c:
         aa:d1:8e:1a:cb:72:b4:4e:4b:83:db:1a:f4:ca:ea:f9:37:11:
         8a:47:5d:e2:f3:37:56:fd:68:1b:da:e5:f9:9f:63:eb:7b:95:
         62:fb:ce:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09rnASIscQN2MwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
NGZkMWE1N2UtZjYyYy00OWMwLWI3Y2UtMTI0NTk0ODJkNGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGH6g8+i9S2gpD1zu2+JmD3roq6KRdLbWQQd
NBXP1v+kblO6Mf0K/3ZLQ1dhoR04AWAqNbzRGfRfHuc2+oQH6jBBbhNI6DhlJyvT
2PwXYzjCcL4FJdrXBJej3Rrob90wa6zaxFUGlNvRcOg3lKZgoj2El+HJsV2GZBhD
a2e702kHM07Wdp3GA2MJIbe7Mm+r8A/MruYmyk7EDvje7C6VKnDT87IwA9n68k7D
TOgBWQRIW9UgkxSk5WrfA/OPUreuyWYl66In+1HrAHjSsrqgi9LyIKDS4MCyzTsf
pyJUvLesogQGepBBqEZlDecZlFpdvDl8JSTKi0CA/t0l7oyhXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQikCaZS6h71mEUuPF5Kr4rNzaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFmNTE0NTgtNjQyZi0z
Y2JjLTg5OWMtNDBiYzMzZTVkYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGyfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0GSL1BJ390npV4t//OyRdfsHUgC6wA3Zk9ebam9MmF0wKJh3VvuJeG
+hx2NuCRxpafoErxjU3D0woCQrZ1+7nMWQrStNHjdnsZHk3GacaGGH/zGj4jZX6p
l9fezVbSh00ILnvaXd0bWA4UAeg7ufFJmVhsmQy4N3MGuLOtPfaEUVMMGnr0d31r
rdrH89W1dlhRR3JkLPSGXiysaoa5sjXlk9V3ugtxRMIJyWSbbD/6ARFWzFd4yLav
Nc+TiAqRzbnXxONDmqqgRHZip/sE74q+bqts37ggjKrRjhrLcrROS4PbGvTK6vk3
EYpHXeLzN1b9aBva5fmfY+t7lWL7ztk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:25:53 2025 by rpki-client