Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0421c8ad-c56e-38c7-8cc0-743e398945a3.roa
File:                     0421c8ad-c56e-38c7-8cc0-743e398945a3.roa (raw, json)
Hash identifier:          P6pqj8tXrl0gcJ+KK8D+CsS3sYCsYHKowQjLtrWY6Ng=
Subject key identifier:   B2:3B:08:AB:21:83:02:2C:7B:29:30:12:68:48:AD:E6:23:8C:32:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAE5C1BBF17B3E616E980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0421c8ad-c56e-38c7-8cc0-743e398945a3.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ae:5c:1b:bf:17:b3:e6:16:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=0ef4f8ea-8402-44d9-801f-e0b1fe62cfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:39:65:c1:bb:6e:b2:86:06:08:a3:a7:62:
                    01:39:0c:e0:a1:cf:70:92:f9:18:50:5f:b7:8c:cd:
                    11:b9:25:58:44:d3:76:ed:39:a6:a1:74:66:6b:ea:
                    ac:7b:dc:30:d3:1c:db:d8:92:59:73:76:19:6d:ec:
                    4b:60:ae:26:b8:d0:fe:44:1e:40:6d:81:30:69:35:
                    35:4c:36:30:38:47:d0:61:39:84:57:b3:18:73:ac:
                    19:8e:b4:43:1e:11:8f:a4:03:94:2c:53:4f:78:da:
                    be:44:02:33:2d:d0:61:82:14:8a:46:cf:21:a3:84:
                    ec:55:11:3b:aa:cb:4e:ce:3e:cf:7b:5f:27:5b:ce:
                    4c:fb:fa:65:aa:bd:97:37:65:ad:61:1f:fa:c6:82:
                    c5:62:aa:e4:74:6f:15:2b:95:2c:ef:02:79:80:71:
                    a4:cd:5e:28:86:f3:a9:18:ab:00:65:ba:20:79:69:
                    b8:e3:51:d4:34:f0:a5:68:a9:52:d5:a2:1c:86:b9:
                    72:59:23:fe:2e:7a:d6:b5:e1:93:85:e0:df:48:ed:
                    6e:e8:74:9e:2d:6f:5c:e6:82:ef:db:2b:e8:a0:2b:
                    78:23:1d:e1:f0:7f:c5:2f:83:a8:e2:8a:3d:b2:21:
                    7f:81:e1:43:02:f6:b2:9f:f3:18:3b:39:e9:e6:6c:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3B:08:AB:21:83:02:2C:7B:29:30:12:68:48:AD:E6:23:8C:32:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0421c8ad-c56e-38c7-8cc0-743e398945a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:20:df:f0:f5:ec:b0:9d:15:fa:d3:48:26:67:ea:d7:d4:d3:
         ab:07:8d:e6:0a:a8:31:e2:f7:d6:60:3e:b1:80:49:9a:a5:18:
         f5:ef:33:70:8e:d2:f9:ca:18:18:d5:e6:a9:4a:93:e2:2c:41:
         98:f3:37:d0:2d:f6:95:ec:72:02:27:40:15:38:b1:58:3d:9b:
         35:72:c1:9c:e6:b7:be:3b:0d:2f:1d:43:c1:c2:5a:66:e7:f7:
         69:e0:05:10:8a:fc:aa:1e:61:58:95:64:7e:5f:92:20:85:62:
         1a:ac:05:66:75:73:68:8c:3e:1b:5c:e0:c2:39:52:d3:aa:df:
         8a:27:e7:ac:9e:c3:c1:0e:f3:b4:fa:dc:b1:e3:54:bb:bc:ad:
         77:1e:e8:23:56:a8:67:29:f3:bd:50:e9:20:c6:95:33:d5:54:
         d2:1c:8c:1e:69:b9:f0:6e:6b:3a:ae:64:ca:94:6f:aa:06:ff:
         78:09:95:a1:14:10:34:27:ed:64:4e:b4:6d:85:1b:b0:db:9b:
         75:23:d3:0f:7b:db:b0:72:50:14:cd:3c:75:48:f7:d5:20:b3:
         86:7a:4e:34:32:3d:3a:23:5f:cb:8a:f5:ce:99:83:04:ba:a8:
         8c:9b:e7:1e:de:6d:a1:04:d0:54:14:14:80:d5:22:dd:32:d4:
         1f:c0:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:27:20 2025 by rpki-client