Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abfabba9-cbcc-38e7-97b3-8c3dbf9a5b76.roa
File:                     abfabba9-cbcc-38e7-97b3-8c3dbf9a5b76.roa (raw, json)
Hash identifier:          DK53YdLlW02tP9a4r/hUk6taf55nelFlgtEI5pwOu54=
Subject key identifier:   0B:39:3B:AB:D1:45:E5:DE:95:C5:21:E4:82:EF:B0:ED:10:8C:C6:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0DFC71A8DD8EF907CCC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abfabba9-cbcc-38e7-97b3-8c3dbf9a5b76.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.104.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0d:fc:71:a8:dd:8e:f9:07:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=4ee80b6a-90a6-46c2-832a-b4d79ce7dd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6f:b8:42:73:56:34:f7:65:4b:39:ba:e2:94:
                    1b:f3:6e:85:cb:94:41:9b:43:3f:05:ee:6d:ff:0e:
                    ce:69:50:dd:7a:13:15:a3:9b:87:34:15:9f:90:23:
                    18:85:d2:bf:bf:c1:2f:cb:54:56:26:39:02:59:0a:
                    24:fe:45:63:32:33:e3:7f:63:ed:ef:f5:51:2d:7e:
                    9a:8d:97:ff:cd:dc:43:df:aa:87:fe:9f:c0:96:da:
                    3d:39:6a:5c:83:49:51:ee:3a:ac:40:aa:b6:51:01:
                    8b:25:d2:03:d5:49:5e:61:99:82:60:65:74:db:29:
                    a1:81:a7:57:0f:e1:d3:5e:37:d7:0e:4f:9a:fe:83:
                    df:c1:d7:c6:37:51:10:29:e4:8b:64:c9:06:39:c3:
                    f1:e1:33:98:aa:fe:71:59:17:1a:89:74:a7:0d:7f:
                    1e:45:f8:49:ef:73:3e:87:f4:d1:9d:b3:8e:d2:b0:
                    35:6c:69:53:f7:4d:bd:67:09:6f:04:81:fa:71:c9:
                    76:b9:26:44:81:1b:d3:2b:96:d7:cc:68:bc:75:aa:
                    05:6a:0c:a6:ff:62:84:5f:4a:d7:81:13:cd:ba:d4:
                    81:fe:20:2f:6c:39:4f:92:e8:0f:f1:20:fb:f6:02:
                    86:3c:82:53:c2:fd:9a:fd:a0:69:e9:f9:fb:4a:bc:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:39:3B:AB:D1:45:E5:DE:95:C5:21:E4:82:EF:B0:ED:10:8C:C6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abfabba9-cbcc-38e7-97b3-8c3dbf9a5b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:12:2b:a2:95:71:82:8c:05:96:56:6e:78:0d:fe:fc:11:0d:
         cf:32:a5:3b:de:b5:78:bc:44:93:75:cb:07:6a:3c:a7:e2:cc:
         f2:9b:34:a3:ae:32:eb:35:b1:ee:e9:b9:e5:9d:6f:04:78:33:
         a9:fd:08:4a:0a:77:80:61:48:4b:62:91:5f:37:09:f4:fc:40:
         e2:dc:7e:b3:1d:5d:5b:ea:87:9c:23:7c:46:bc:1c:2a:f0:8a:
         a9:aa:63:04:b6:b4:bb:6d:42:e9:ea:35:68:5b:93:6f:77:67:
         1e:a9:45:9e:29:3d:a2:ab:f6:38:65:09:2d:fe:b5:11:da:01:
         19:92:97:5a:68:cc:83:b4:81:fa:df:12:ba:75:e1:98:a4:5d:
         43:e8:59:9e:2c:a7:e3:a3:d8:e7:56:57:19:9c:45:86:09:c0:
         cb:d4:15:be:f2:f5:ca:cf:10:38:fb:e5:a6:3d:75:95:02:4e:
         a4:64:d7:70:ba:7e:e5:c2:eb:d1:92:5b:05:e3:1e:01:3b:47:
         85:f8:05:76:9b:87:b6:f6:7f:a5:43:19:04:ce:99:69:5b:ae:
         c4:18:ad:ff:67:30:cf:a4:2a:c3:72:b7:6a:4d:0a:a2:19:25:
         ee:aa:c7:be:9c:cc:58:c3:a9:fa:61:29:fc:0f:c4:d3:d8:2b:
         d3:a0:14:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3A38cajdjvkHzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGVlODBiNmEtOTBhNi00NmMyLTgzMmEtYjRkNzljZTdkZDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m+4QnNWNPdlSzm64pQb826Fy5RBm0M/Be5t
/w7OaVDdehMVo5uHNBWfkCMYhdK/v8Evy1RWJjkCWQok/kVjMjPjf2Pt7/VRLX6a
jZf/zdxD36qH/p/Alto9OWpcg0lR7jqsQKq2UQGLJdID1UleYZmCYGV02ymhgadX
D+HTXjfXDk+a/oPfwdfGN1EQKeSLZMkGOcPx4TOYqv5xWRcaiXSnDX8eRfhJ73M+
h/TRnbOO0rA1bGlT9029ZwlvBIH6ccl2uSZEgRvTK5bXzGi8daoFagym/2KEX0rX
gRPNutSB/iAvbDlPkugP8SD79gKGPIJTwv2a/aBp6fn7Srx4owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAs5O6vRReXelcUh5ILvsO0QjMZSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWJmYWJiYTktY2JjYy0z
OGU3LTk3YjMtOGMzZGJmOWE1Yjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgSK6KVcYKMBZZWbngN/vwRDc8ypTvetXi8RJN1ywdqPKfizPKbNKOu
Mus1se7pueWdbwR4M6n9CEoKd4BhSEtikV83CfT8QOLcfrMdXVvqh5wjfEa8HCrw
iqmqYwS2tLttQunqNWhbk293Zx6pRZ4pPaKr9jhlCS3+tRHaARmSl1pozIO0gfrf
Erp14ZikXUPoWZ4sp+Oj2OdWVxmcRYYJwMvUFb7y9crPEDj75aY9dZUCTqRk13C6
fuXC69GSWwXjHgE7R4X4BXabh7b2f6VDGQTOmWlbrsQYrf9nMM+kKsNyt2pNCqIZ
Je6qx76czFjDqfphKfwPxNPYK9OgFOk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:35:52 2025 by rpki-client