Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17cc89cd-45ba-33ec-bace-c3a4756c5765.roa
File:                     17cc89cd-45ba-33ec-bace-c3a4756c5765.roa (raw, json)
Hash identifier:          5bSEu/CwVARCwWliHfoFu2NFmoqLI+fmzBgYu9jVxCU=
Subject key identifier:   17:72:2E:76:F9:8F:2C:0F:63:D6:93:0E:C1:DE:F9:C3:40:32:FC:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAE2B49DC4192AF38F340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17cc89cd-45ba-33ec-bace-c3a4756c5765.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ae:2b:49:dc:41:92:af:38:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=1018d1a3-061d-4a82-893f-7c9a61937b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:e5:c9:97:97:ea:cc:30:dc:04:6f:ce:a4:
                    7d:8c:10:18:d0:fb:60:d8:ab:b0:a8:e4:57:1e:71:
                    8f:31:4f:cd:e5:d8:1a:c9:a0:a5:05:4c:f6:0c:ca:
                    5a:60:42:8b:54:ea:e9:f3:e6:24:0b:c4:25:a1:42:
                    45:45:a1:32:54:c3:10:32:41:34:41:d0:29:30:4a:
                    99:03:53:0d:5f:57:bc:ca:5f:56:0c:0b:c3:be:81:
                    ad:14:53:5f:96:b1:eb:ab:a4:83:4b:a8:d2:31:ec:
                    5e:84:e8:c8:44:2c:57:e6:76:5a:8e:8b:cd:2a:3d:
                    21:2f:ab:69:3d:1b:0f:4e:ea:e5:b6:d7:db:91:73:
                    bb:8f:09:13:2c:89:8d:78:d9:9e:d1:d8:74:77:99:
                    88:65:a8:6f:54:f6:15:17:08:2a:81:d4:ef:77:3f:
                    98:46:aa:be:7c:0c:3b:79:bb:52:18:cf:af:11:f0:
                    0c:af:43:95:cb:03:85:25:fd:d3:e2:f6:cc:19:be:
                    9c:66:a3:5b:ea:2e:a6:b9:2a:33:0d:11:8c:27:54:
                    ea:f5:92:30:d4:32:48:1e:7d:49:d7:cd:7a:15:dc:
                    48:fa:bd:58:82:bb:0c:1d:87:92:c0:60:7f:89:50:
                    75:c7:63:8a:9e:25:09:97:4e:bc:67:8b:72:17:d4:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:72:2E:76:F9:8F:2C:0F:63:D6:93:0E:C1:DE:F9:C3:40:32:FC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17cc89cd-45ba-33ec-bace-c3a4756c5765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:d3:b1:92:1e:db:ce:b8:08:e4:08:41:bd:5e:7a:d8:28:
         de:bd:f9:b1:41:a5:e1:35:52:22:73:f5:2f:8b:3b:a4:c3:07:
         f8:ca:fb:d8:fb:61:17:38:43:9a:c6:ad:a1:c3:7e:26:1f:2d:
         85:28:a2:60:77:e3:cf:96:e9:7e:35:16:bf:e9:9b:b3:e5:c9:
         50:66:6c:f7:8c:aa:02:b4:35:86:70:63:fe:c1:8e:b2:2e:5d:
         fa:19:c8:df:cf:15:11:4c:ee:02:6f:3d:2b:9e:20:92:b5:35:
         4e:60:ab:81:fa:b7:7f:bb:e7:0e:18:57:dc:8a:ab:33:3d:5e:
         20:44:59:5c:4e:87:f8:f3:39:9a:88:59:f0:69:59:77:9a:70:
         af:74:ea:56:94:d0:8f:ae:19:da:0f:05:1d:83:7b:37:0a:8b:
         de:ce:79:78:8c:92:68:73:67:b1:6b:ec:3e:1b:4b:7b:86:dc:
         c9:97:b7:c3:db:36:6c:2d:8b:10:a1:32:bf:45:c8:80:1e:0d:
         22:fa:7c:e5:3e:5d:e8:55:32:f4:a4:51:09:37:fa:b4:ce:49:
         f0:8b:a6:1e:a0:b1:83:0b:1b:91:f4:f4:81:e9:0c:7d:b4:13:
         a4:06:7b:2d:41:0c:73:4e:ce:59:d2:f3:7a:0f:9f:90:e6:b7:
         7d:e2:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:58:20 2025 by rpki-client