Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ad1afb-8b68-3216-8a07-be04e56be54f.roa
File:                     05ad1afb-8b68-3216-8a07-be04e56be54f.roa (raw, json)
Hash identifier:          6aB6iz6R56g17ul+yJmb2Xvc1gK+hGzZ27slW5VrdWo=
Subject key identifier:   08:2E:DF:F8:BB:49:C7:22:89:D4:79:FF:52:93:EB:E0:CF:55:4B:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAFE7D28A076C48FC51C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ad1afb-8b68-3216-8a07-be04e56be54f.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.111.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:af:e7:d2:8a:07:6c:48:fc:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=913c3dd3-66c5-45c6-91a7-a524c9b054f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:ac:b1:7e:ae:21:13:8c:cc:b3:d3:1f:c5:
                    32:19:40:5e:fa:38:f9:e3:53:1b:88:f0:b6:1d:26:
                    01:bd:84:20:62:d2:c8:cd:7c:98:bc:86:e2:66:bc:
                    1b:aa:7f:63:6f:85:6c:91:11:51:4e:8a:c3:b0:fd:
                    a2:ba:f3:d6:eb:45:38:dd:68:da:1c:9d:06:55:3e:
                    85:97:b8:1f:b9:d5:8c:44:c1:9d:00:ab:fa:23:65:
                    d6:07:b4:cd:15:68:17:1b:8d:06:8b:d3:d1:91:73:
                    bf:62:ab:88:64:eb:2d:f3:f0:02:70:29:d9:69:7f:
                    09:1d:2a:1a:bd:a0:d3:aa:8e:fb:cf:f7:7b:ff:aa:
                    00:8c:d2:84:d6:7d:d4:a8:79:f9:c2:66:ab:d2:c8:
                    1e:da:58:17:da:99:58:8a:0c:20:bd:8b:d1:3f:de:
                    ae:98:26:65:5e:9b:8f:66:24:85:92:e0:38:42:40:
                    70:d9:45:a4:cb:e3:96:70:5c:39:7e:7d:3c:cf:82:
                    fc:cb:43:51:b1:a9:56:46:e3:6f:a5:9c:84:3c:8e:
                    a6:61:07:1f:79:e1:65:c4:7c:5b:63:96:49:1b:36:
                    f1:6c:1c:bc:4e:c8:a0:64:86:9c:29:2c:ea:59:fc:
                    a3:28:60:bc:e9:ab:d2:5e:dd:97:27:be:12:a2:bd:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2E:DF:F8:BB:49:C7:22:89:D4:79:FF:52:93:EB:E0:CF:55:4B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05ad1afb-8b68-3216-8a07-be04e56be54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:ae:63:34:e7:ca:19:66:91:ad:67:97:4e:41:bb:62:88:
         2e:f2:7b:e9:4f:29:d7:ad:03:42:65:63:a1:c2:d8:5a:06:0e:
         b2:85:36:d2:61:bf:7b:45:07:80:aa:2f:0f:9a:52:82:ae:fd:
         67:17:c6:77:ee:36:a9:06:f5:36:1b:aa:ab:07:28:dd:82:c5:
         bd:f5:65:d8:21:ef:1d:2d:b7:af:1e:75:e3:d3:98:5a:08:4a:
         4b:c1:40:f8:58:ef:b0:e9:31:45:4e:bc:b9:0b:75:f4:3b:93:
         3c:6b:fe:40:35:70:ce:96:0b:12:26:26:91:a0:f9:9c:2b:cc:
         a2:c0:02:8e:05:ba:8a:b9:04:51:93:2e:58:4f:b3:e0:86:14:
         80:7d:a0:b9:ef:30:de:50:cd:27:0d:49:b6:de:2f:c6:a2:c7:
         ee:26:b7:79:fc:95:76:85:35:db:e2:ce:fb:86:6c:59:2a:8b:
         c9:62:72:30:59:1e:cb:ce:27:b6:30:2d:f3:eb:c7:ed:4e:f6:
         8c:50:88:f3:95:7e:ac:00:eb:42:2d:a2:95:91:35:69:54:69:
         00:1e:31:af:77:33:6c:b3:a0:59:67:ea:7e:d2:93:d5:3e:c5:
         de:65:30:f4:27:d6:a4:09:b5:f4:30:00:b4:eb:a3:4f:92:b8:
         e4:ed:30:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKq/n0ooHbEj8UcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
OTEzYzNkZDMtNjZjNS00NWM2LTkxYTctYTUyNGM5YjA1NGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxGssX6uIROMzLPTH8UyGUBe+jj541MbiPC2
HSYBvYQgYtLIzXyYvIbiZrwbqn9jb4VskRFRTorDsP2iuvPW60U43WjaHJ0GVT6F
l7gfudWMRMGdAKv6I2XWB7TNFWgXG40Gi9PRkXO/YquIZOst8/ACcCnZaX8JHSoa
vaDTqo77z/d7/6oAjNKE1n3UqHn5wmar0sge2lgX2plYigwgvYvRP96umCZlXpuP
ZiSFkuA4QkBw2UWky+OWcFw5fn08z4L8y0NRsalWRuNvpZyEPI6mYQcfeeFlxHxb
Y5ZJGzbxbBy8TsigZIacKSzqWfyjKGC86avSXt2XJ74Sor31lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgu3/i7ScciidR5/1KT6+DPVUsLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDVhZDFhZmItOGI2OC0z
MjE2LThhMDctYmUwNGU1NmJlNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSG+SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvbrmM058oZZpGtZ5dOQbtiiC7ye+lPKdetA0JlY6HC2FoGDrKFNtJh
v3tFB4CqLw+aUoKu/WcXxnfuNqkG9TYbqqsHKN2Cxb31Zdgh7x0tt68edePTmFoI
SkvBQPhY77DpMUVOvLkLdfQ7kzxr/kA1cM6WCxImJpGg+ZwrzKLAAo4Fuoq5BFGT
LlhPs+CGFIB9oLnvMN5QzScNSbbeL8aix+4mt3n8lXaFNdvizvuGbFkqi8licjBZ
HsvOJ7YwLfPrx+1O9oxQiPOVfqwA60ItopWRNWlUaQAeMa93M2yzoFln6n7Sk9U+
xd5lMPQn1qQJtfQwALTro0+SuOTtMGE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:17 2025 by rpki-client