Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d0a715-9e69-36a5-9a15-3d011b175f92.roa
File:                     11d0a715-9e69-36a5-9a15-3d011b175f92.roa (raw, json)
Hash identifier:          pAC0O+HPmvczsPzImZJd3TelVejxByDm6WL/lZVoyNI=
Subject key identifier:   18:8D:04:D3:E2:C6:1E:D3:C2:37:3B:89:43:5D:83:7D:FB:16:7D:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAFB19D4D1F16E663FB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d0a715-9e69-36a5-9a15-3d011b175f92.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.111.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:af:b1:9d:4d:1f:16:e6:63:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=cc05af65-2c52-42cd-b318-f9348142ca30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:95:7e:24:93:7f:86:ea:c9:85:e5:c0:08:
                    7f:dc:8e:8e:95:3a:c6:6f:55:71:7e:9a:1f:59:3c:
                    01:df:a6:e8:2b:aa:b6:24:03:ee:c6:53:e4:44:b3:
                    78:2f:2d:09:48:c8:6d:01:0b:3d:23:51:4a:8f:76:
                    10:ec:f4:e9:e2:08:22:0a:9c:ef:fb:ae:fc:50:b2:
                    ea:22:31:9a:81:56:27:c4:7d:9c:ee:b7:c4:c2:e5:
                    4c:a1:d1:2a:21:cc:c9:c3:9c:74:dd:de:70:c3:7f:
                    21:26:05:79:71:36:30:49:fe:8e:08:cd:a6:4c:e5:
                    70:c1:61:5d:a1:d6:e8:7d:92:8d:9d:37:c3:1f:85:
                    78:7b:94:af:b1:d3:bd:83:39:71:0f:87:cc:e4:7e:
                    49:bb:14:f8:2e:3f:e8:ae:06:91:fe:f1:6d:36:bd:
                    e6:dc:a6:64:03:c3:7e:eb:36:00:84:8b:7d:5f:b9:
                    b6:4b:f0:36:c8:c1:21:89:93:57:5c:14:df:87:a6:
                    e5:b6:89:f0:e1:2c:ff:1a:c2:68:75:c3:ad:c7:70:
                    e4:41:8a:2e:c8:28:8e:19:ee:96:80:f3:31:3f:83:
                    77:d5:6e:58:10:4e:17:21:07:6c:4c:19:2d:bd:a0:
                    ce:79:ec:35:d2:22:37:60:c7:df:76:7c:c0:d8:7c:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8D:04:D3:E2:C6:1E:D3:C2:37:3B:89:43:5D:83:7D:FB:16:7D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d0a715-9e69-36a5-9a15-3d011b175f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:29:dd:ba:b4:27:44:39:22:b5:23:0e:35:c6:84:8a:fb:e2:
         e4:49:03:9d:6b:73:7a:95:eb:c9:b5:1e:31:af:a3:6c:78:56:
         6e:f0:bc:3d:6d:dc:ca:0e:eb:58:d1:32:aa:05:0c:a4:e6:b8:
         74:17:22:e4:d2:fb:0e:2f:21:4c:a3:a4:e2:fe:93:b8:6c:45:
         6f:fd:95:0a:a0:22:a0:a3:c4:ce:a3:93:ff:44:1f:50:43:97:
         0c:e4:1c:f5:10:29:dd:95:8b:c2:39:d3:87:d2:1a:84:de:79:
         7d:b8:a2:ef:e6:c8:f8:53:d5:14:d1:86:eb:78:f6:c3:b8:c3:
         6a:0a:87:ae:f1:8b:c0:6f:71:ba:40:6f:85:aa:66:9c:b3:2a:
         14:30:d7:d9:31:17:ba:b2:a5:fd:21:83:0e:ea:83:73:2f:ac:
         dd:28:39:00:b7:dc:03:0a:d6:62:47:b5:17:cb:f3:02:f0:42:
         a7:52:e9:54:1a:a0:d6:91:e0:56:b8:19:2e:6e:6f:73:d7:13:
         1f:47:b7:98:0e:90:6c:60:63:68:67:b5:54:05:1b:d7:54:b3:
         aa:c6:11:eb:b2:f6:ca:d0:a1:fc:89:0c:b0:4d:f7:d8:92:12:
         ca:05:81:64:6c:2c:a0:df:46:2c:f1:06:34:42:fa:67:f0:f9:
         d4:ac:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:20:43 2025 by rpki-client