Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
File:                     4a52b50e-f663-35cc-b050-67dcd5392302.roa (raw, json)
Hash identifier:          KxzIkYwSmghhDSvuM+iBmKJJcOfVnFM40KgnAbJ5c4E=
Subject key identifier:   F8:21:5C:01:7A:3B:48:1A:4A:A9:15:AD:EF:2D:6C:2E:57:F2:D5:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA853D12D5803AD18C309300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        72.83.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:3d:12:d5:80:3a:d1:8c:30:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=7426498c-7c30-4035-ac4b-5af81b511644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:1b:ca:42:b0:e7:8a:3d:e1:4f:d8:fd:df:
                    2b:e9:8a:cc:e6:b5:aa:85:f0:d1:90:ad:49:20:1d:
                    c2:0c:9d:13:01:02:3b:56:81:85:d5:af:4b:0f:f5:
                    8b:9d:da:de:e2:53:3d:11:d2:34:56:98:58:de:ab:
                    c8:e3:4e:3b:3a:ea:59:fd:bd:dd:8a:2b:13:23:d1:
                    12:fb:4e:25:d8:d5:4b:b2:4b:f7:4b:18:ae:b3:47:
                    3e:df:5b:e1:d8:0a:75:3f:00:9e:aa:12:95:c1:8f:
                    65:1f:0b:49:e4:54:b6:c7:d5:80:87:ef:8b:66:72:
                    41:2f:73:70:ff:54:94:50:82:b8:f8:53:25:34:0a:
                    88:9b:a1:68:ba:7d:03:ce:48:98:15:3e:49:0d:fc:
                    ce:e7:ee:ee:95:74:a6:6e:81:d1:e1:e3:48:0a:ad:
                    de:d0:30:92:8b:5e:4f:c6:36:5b:ac:32:cd:4f:0b:
                    d0:4e:3e:ed:b6:d4:5a:a6:c3:5e:f4:ea:0e:de:30:
                    1d:f7:e7:90:bd:c9:24:4f:d8:2d:20:7c:64:b5:00:
                    6f:12:76:d7:73:b5:b7:b5:9d:69:9b:e5:55:bd:ba:
                    48:66:c0:9b:e2:2d:20:59:85:92:7a:80:67:f2:10:
                    3c:e1:86:32:80:0e:7c:76:a5:85:b6:1b:6e:07:6c:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:5C:01:7A:3B:48:1A:4A:A9:15:AD:EF:2D:6C:2E:57:F2:D5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:9c:6b:cf:5e:b2:df:a0:3f:99:ab:ba:44:96:e2:d5:0e:
         ce:5b:0b:62:16:5a:75:d5:8a:87:81:e3:78:c4:ee:ee:df:4c:
         5c:a0:af:85:f9:9d:a1:85:11:07:b9:41:6b:3d:a6:3b:53:3c:
         05:d7:6a:40:81:f0:17:c3:b1:4c:31:7c:7c:5c:fe:c1:ac:7e:
         f6:5b:4b:83:31:fa:59:d8:3e:98:80:d7:db:d2:60:61:0e:51:
         bd:c8:cf:73:9c:62:36:e3:9f:56:91:d0:e4:4c:2b:4a:d3:63:
         78:27:5e:a4:27:43:51:d7:e2:85:cc:ff:be:cf:55:29:6c:9e:
         da:f5:e2:52:97:12:74:96:bf:9c:43:44:09:4c:c3:ff:dc:c2:
         b8:8a:1a:8c:87:b7:57:bd:73:b8:61:73:f8:30:bc:b0:d1:8d:
         4c:51:01:a0:2f:e7:73:3b:d7:41:7b:0d:e5:1f:75:20:d7:e6:
         a2:bb:a1:a5:9f:e9:f0:5a:83:e7:ba:a7:31:42:28:e0:dd:33:
         49:78:8d:32:26:7b:82:31:7c:fa:f8:c1:0e:91:c6:ad:72:f0:
         74:ae:eb:5b:a2:98:7a:33:d2:6c:4f:33:29:f0:7e:13:bb:b6:
         b1:6f:22:d7:5b:16:77:25:4c:76:9f:86:8c:79:b1:32:36:97:
         51:7b:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:38:57 2025 by rpki-client