Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adbbf758-6ebc-3022-97cc-737ca3c99a17.roa
File:                     adbbf758-6ebc-3022-97cc-737ca3c99a17.roa (raw, json)
Hash identifier:          xlQXHyq0BxUMGFkRRC4wpAfEkEpYIBXlG9mpEo2t7WU=
Subject key identifier:   3D:AC:81:23:48:07:A3:5F:FC:14:97:9A:21:30:B2:72:F4:10:E8:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0C3DC87669CDC442EE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adbbf758-6ebc-3022-97cc-737ca3c99a17.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.96.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0c:3d:c8:76:69:cd:c4:42:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=c9237bc5-07e6-460e-850e-ecec56015295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:33:e8:99:1b:8d:b5:df:37:7e:d7:b4:4e:
                    66:b5:3d:40:32:96:2e:00:a3:92:65:31:f5:92:62:
                    d5:96:c7:4f:53:4d:65:02:82:ef:fc:5c:fe:d9:0b:
                    30:4b:ad:22:6d:f7:dd:d2:5d:f2:79:00:8b:dc:a2:
                    1d:39:3f:fa:28:67:cb:70:26:4c:fb:40:90:51:35:
                    84:02:1b:55:58:9d:32:de:99:db:cd:bd:44:18:68:
                    c4:49:d0:f4:91:61:11:80:73:4c:b0:10:cd:cc:18:
                    a8:ea:07:2b:9e:ce:5a:56:e3:d1:ab:b8:fa:71:45:
                    52:77:72:84:0f:96:68:32:f5:57:dc:91:b7:66:2a:
                    8a:42:95:d1:27:2b:1a:a9:83:ca:63:19:4a:eb:89:
                    fe:6c:d9:65:57:3b:f5:8b:c1:41:e7:4f:f0:46:77:
                    2f:03:3f:e2:2c:95:05:65:4f:d0:92:aa:52:12:a9:
                    71:67:9b:88:bd:b0:c5:cb:bb:66:7e:29:4f:45:94:
                    af:a4:70:f8:0a:c9:89:77:c6:e0:84:83:1e:17:50:
                    30:51:de:9c:11:43:00:4e:a5:cc:ef:17:26:3d:5f:
                    59:f5:e5:50:6c:8e:65:16:81:89:d4:13:ea:02:e8:
                    6f:ea:34:2a:5a:62:66:bb:0a:ef:01:07:17:57:d8:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:81:23:48:07:A3:5F:FC:14:97:9A:21:30:B2:72:F4:10:E8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adbbf758-6ebc-3022-97cc-737ca3c99a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:da:3d:ef:c5:8d:69:77:e9:e9:27:a4:45:61:c5:cf:2c:73:
         a4:95:29:92:71:90:db:ee:cc:1c:cb:cd:0d:45:61:78:d8:73:
         77:6f:2c:ae:96:ff:a5:d4:1f:e7:33:4f:5e:15:2b:96:c9:38:
         48:67:06:2f:af:ad:c0:05:09:e2:5d:6c:9c:d0:dc:80:ab:0f:
         26:f5:f9:b5:7e:88:54:07:16:7f:27:14:e0:e1:99:ea:4d:c0:
         1d:dc:62:ec:ab:c7:de:41:a1:18:28:90:a3:f5:43:de:cb:84:
         a4:7d:46:80:86:be:04:35:7c:3a:ba:d1:2f:f1:dd:fd:aa:57:
         77:2a:ab:f7:9a:e2:1b:6e:c0:d0:8f:5d:d4:79:e5:c5:b6:73:
         f4:82:fb:8e:1d:b9:87:6c:2a:bb:d6:25:6d:6a:19:01:f8:ae:
         0b:50:c8:ea:a2:a7:27:b8:bf:2b:dc:8e:ca:0a:f7:af:e2:d8:
         b4:4b:fe:1a:f8:42:09:d9:ce:2c:86:89:74:e6:82:82:db:26:
         ab:af:77:68:0c:1c:78:1b:71:2f:37:9b:be:97:27:2f:4b:cc:
         7c:58:e6:ac:96:e7:ed:d8:ca:41:e8:e6:04:de:36:5c:61:5e:
         d2:b8:b9:0e:cc:a1:5b:33:c0:61:94:8f:41:15:2d:7f:07:45:
         b1:63:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:05:23 2025 by rpki-client