Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b9ce886-ae3a-3fe6-a8b0-5274dd681caf.roa
File:                     4b9ce886-ae3a-3fe6-a8b0-5274dd681caf.roa (raw, json)
Hash identifier:          CgoOjr+v1rrWfrlLpWlpNXh7R+c40E1djxjzVOeqnPk=
Subject key identifier:   E0:3B:FE:C0:36:4B:36:1D:13:A7:9F:E8:8A:B3:9F:DF:F7:B2:88:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F7152C693C460CE5ED6E44E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b9ce886-ae3a-3fe6-a8b0-5274dd681caf.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.104.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:2c:69:3c:46:0c:e5:ed:6e:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=1a90b0bc-ae90-4654-8cc4-3d0ea841228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:2f:bf:78:e3:e6:66:46:f9:c6:0f:f1:7f:
                    56:de:59:63:ef:7c:b8:3b:83:8a:e1:ee:95:06:c4:
                    cc:33:91:fa:92:24:05:a6:4e:92:d0:a2:f5:98:ee:
                    7d:15:a9:92:b0:f5:35:41:c7:b3:6e:b6:4d:86:3c:
                    8b:d5:7a:be:d4:1e:ce:e2:a4:d7:fe:df:8c:52:74:
                    ba:29:cf:48:95:77:7e:36:ad:33:a4:1c:c1:f6:5e:
                    6c:ae:93:1b:ab:bc:2a:6f:49:f2:e5:2e:b8:2b:42:
                    fd:e1:b4:99:21:3f:60:8e:c8:ea:ba:ab:4e:58:76:
                    ba:7b:f6:44:ee:14:bf:6c:6e:45:fa:18:4b:b1:f2:
                    92:bf:3d:76:5a:9b:8c:e9:b7:65:27:96:eb:c7:ff:
                    f2:a9:04:90:f1:ee:0b:c5:a2:10:55:98:dd:0a:03:
                    ab:8c:a1:6b:95:88:73:b5:f9:9c:e9:d2:6c:18:26:
                    33:0e:2a:0e:fd:38:b4:ac:d6:19:a4:30:0b:f5:57:
                    83:38:7e:68:48:2d:0f:62:bd:4a:d0:e2:68:e9:e6:
                    c5:65:0c:e0:66:1a:67:1e:5b:92:05:44:2a:fd:ab:
                    9a:e2:f3:77:dd:30:a2:62:fa:88:2f:6c:4a:88:d2:
                    27:1b:80:8f:ae:b6:31:a9:e6:d2:d2:3d:ab:c9:6f:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3B:FE:C0:36:4B:36:1D:13:A7:9F:E8:8A:B3:9F:DF:F7:B2:88:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b9ce886-ae3a-3fe6-a8b0-5274dd681caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:d9:dc:70:b9:42:5e:2f:c8:16:ff:38:af:4d:32:e2:a4:
         aa:29:5b:48:8e:8b:24:d2:87:26:2a:ca:bb:0e:9d:f5:cc:30:
         29:f5:04:7b:76:45:0f:44:d8:55:02:08:63:41:02:fa:a1:5e:
         72:b0:12:cc:d0:9c:e1:3e:22:e8:6e:26:11:52:b2:86:20:c6:
         22:d6:4c:5a:f7:87:85:b4:84:ea:46:48:a7:8a:45:d0:1f:23:
         20:e1:20:4a:75:9b:e6:bc:54:49:88:80:74:0f:44:24:a1:6e:
         21:f5:20:47:ac:d6:42:75:f6:ca:ab:d9:af:c3:c4:95:82:c1:
         ce:64:c4:9b:50:83:45:9e:a3:16:13:85:8b:52:ed:f7:d9:d5:
         e4:4a:aa:38:b4:01:6b:13:2f:83:a8:17:28:25:6f:f6:cf:14:
         9a:e1:36:05:b4:dc:ab:4c:30:03:2f:00:a3:52:86:e9:0d:26:
         1a:3e:a7:f1:e3:e2:dd:a6:43:11:a6:cc:af:ba:3e:a6:36:29:
         dd:aa:c9:7d:88:b5:00:90:0d:cc:24:86:6b:aa:6e:9c:ed:88:
         4e:28:d0:d3:a7:9e:78:c7:b6:3e:1d:c3:2b:4a:df:ad:b5:43:
         30:52:2d:bf:e4:17:97:cc:9f:de:a6:f7:7f:e1:d7:cf:90:b9:
         8f:25:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:58:43 2025 by rpki-client