Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
File:                     37671870-1971-3272-bf72-f2be3bd65b13.roa (raw, json)
Hash identifier:          lsNB/QZTZjFGKzXBsUA7bXQay/yZitrM0QwPs9kksDs=
Subject key identifier:   EC:2F:68:AD:2C:27:49:B4:E7:C8:CB:83:28:FF:0A:B8:54:CB:CB:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB893BF2BBE30850AD680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b8:93:bf:2b:be:30:85:0a:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=1b2f0415-d1b8-421f-af7e-2e866c331954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:fa:8a:dc:02:56:03:01:1b:69:95:0a:03:
                    49:5e:3f:2c:7c:ce:66:bf:4e:31:3f:8f:e2:7a:3e:
                    3a:5d:81:e6:4e:35:3a:56:42:52:50:16:9a:13:83:
                    e1:78:2c:63:6e:4c:31:46:41:d5:dc:dd:96:3a:f7:
                    d5:5b:23:cd:a1:2b:3c:21:77:6b:f2:3a:50:38:7e:
                    45:16:5d:7e:eb:0e:2c:72:a2:4c:7b:0e:2d:b5:02:
                    53:13:18:8b:74:e0:f2:16:f2:f0:aa:47:19:8d:c6:
                    68:2d:24:a8:76:cc:83:64:73:eb:94:73:c4:29:e9:
                    15:c0:f7:79:42:27:97:eb:da:5e:2c:91:2e:44:2e:
                    b6:0c:52:35:b0:c3:f4:82:3c:33:58:fd:90:6e:30:
                    c7:8b:93:44:89:08:f2:74:b1:f3:39:05:75:7d:bc:
                    14:c2:f8:49:26:02:9b:94:9f:35:5e:09:f5:67:86:
                    4e:a0:6b:b0:b0:93:39:a4:cf:de:02:cd:46:f3:72:
                    e2:fc:f9:ba:f0:e3:17:a6:f3:c3:a9:4f:b5:33:f4:
                    de:73:25:8d:a8:0c:6c:90:24:6d:96:03:f7:73:f9:
                    42:1e:8a:57:19:1a:09:81:eb:d2:d4:79:2e:0d:6f:
                    e8:7a:c0:20:e4:d4:d5:96:2c:3f:a7:9c:1d:93:54:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2F:68:AD:2C:27:49:B4:E7:C8:CB:83:28:FF:0A:B8:54:CB:CB:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:04:79:91:33:bb:01:5a:7c:ee:83:0a:3a:6d:2a:83:25:e5:
         bb:ef:6b:5c:73:3e:dc:6b:86:10:80:f2:e9:2f:13:07:79:e8:
         fe:66:d7:26:7a:24:d7:ce:a8:0f:e8:61:cb:cb:dc:44:3e:a2:
         97:70:cb:b3:b4:91:ad:1b:34:5a:63:5c:f4:df:01:73:98:80:
         2a:5d:4f:d7:11:7a:0a:14:10:96:21:f0:75:27:d7:48:1a:9e:
         73:25:c8:df:a4:a5:7d:ed:10:dd:54:62:1b:ee:28:b3:b8:22:
         79:7b:ea:14:e9:8f:6c:da:3d:5b:e4:1d:45:40:5f:ce:1a:9d:
         c8:f1:63:60:f7:f1:47:9b:7c:53:ce:e9:7b:b0:96:93:3c:a9:
         5c:bb:56:16:09:1f:a0:be:9b:7e:d4:65:ad:6e:af:d1:4f:40:
         d4:61:ad:88:e3:b6:01:9a:06:72:a5:67:a2:8e:72:b6:55:5d:
         51:28:23:51:88:3f:9d:02:84:ce:99:89:3d:28:07:18:0a:b1:
         49:d9:02:41:a6:c9:33:c6:d8:1c:9e:2e:32:03:af:5d:3a:8d:
         f2:1a:90:cd:08:54:2c:3b:2a:96:ba:94:36:1a:e9:fa:ea:d0:
         de:e7:ae:79:72:14:0d:fc:b8:11:f4:fb:0c:1e:e5:a4:37:dc:
         41:02:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:27 2025 by rpki-client