Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa
File:                     533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa (raw, json)
Hash identifier:          EJjXNlRHv7TfgxUSBzgW8z8w4Q7hrGu+5Xa9krQ1xOU=
Subject key identifier:   50:AA:0E:06:01:FE:FA:42:0B:9E:11:6F:E3:31:34:94:41:DB:68:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB08C0EE4C12E4537BC50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.102.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b0:8c:0e:e4:c1:2e:45:37:bc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=48aeb555-bd97-4a10-bbb1-e4de323aaf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:d9:32:5f:df:7f:d3:42:98:df:15:34:3a:
                    25:a0:28:31:d8:02:d8:04:d8:17:b3:95:5b:6b:06:
                    7c:74:f2:6e:ba:17:2d:08:b2:5d:1a:c2:83:56:5c:
                    26:cb:6d:36:04:4e:87:00:a9:32:30:b0:8d:a5:c2:
                    07:ac:5e:ab:64:04:d1:54:88:b7:e7:da:73:23:a0:
                    5a:3a:25:ac:d3:ce:45:a2:8b:17:d2:92:7b:5d:d4:
                    57:d5:74:34:a9:5d:f2:8b:75:2a:11:59:ba:36:2d:
                    4e:14:76:57:8d:46:6b:13:b3:59:9b:21:6f:4e:e8:
                    71:8f:23:c5:16:66:13:3b:d9:18:cf:76:e4:74:c9:
                    67:89:a7:07:49:b7:e8:18:10:e0:11:c8:e1:ee:d8:
                    e9:af:b9:ab:25:10:4a:7a:b9:5e:68:be:66:0f:24:
                    3f:48:a2:25:ad:14:22:13:14:7c:6e:95:26:60:02:
                    b4:bd:b7:df:b7:18:a1:f9:54:db:bd:18:c1:db:cb:
                    67:54:f1:70:03:b1:b8:1d:69:d0:ba:1b:fe:d6:61:
                    63:90:3e:bd:ee:8b:8c:5f:2e:1f:8a:19:96:d8:c8:
                    83:3c:13:ce:96:e4:95:68:b2:99:78:d9:b3:2b:54:
                    ae:b0:34:81:88:f0:fd:b8:4c:fd:ad:a1:c2:5c:96:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:0E:06:01:FE:FA:42:0B:9E:11:6F:E3:31:34:94:41:DB:68:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:59:75:cd:26:37:f1:75:dc:a0:0c:73:85:07:1c:1a:99:
         52:fc:13:d6:3c:b8:29:2d:1b:6e:87:fa:31:e3:f3:5b:4f:91:
         4f:c7:99:6f:bf:b2:5d:7b:47:44:b5:37:1b:b7:54:87:90:5b:
         8b:8d:af:ca:3d:c2:d9:bf:18:bb:c1:3d:f5:15:6b:4f:51:6b:
         2d:91:f3:8c:25:80:36:4b:ed:46:51:52:0e:47:95:69:5a:b2:
         4d:6e:7f:a2:7c:fa:3b:41:7b:03:b3:08:ae:41:d5:1e:87:c5:
         af:2a:96:1f:ce:65:8e:93:7e:1d:dd:65:65:68:2c:9b:78:f5:
         6c:2a:f2:46:05:4f:a0:77:bc:41:c9:45:f8:2e:be:f9:65:ff:
         e2:94:53:4a:6c:d2:74:23:74:5f:09:22:32:af:71:ff:15:17:
         63:75:84:94:84:02:be:4b:cd:65:5b:82:b1:79:3a:45:ec:fa:
         25:2a:3c:aa:33:9a:f7:77:68:eb:a8:d9:4f:18:f2:41:44:85:
         2a:dd:b8:9b:6f:cf:3c:5f:3a:c8:f7:de:cd:60:33:4c:3a:11:
         97:d0:2c:2a:66:8c:f5:46:e1:a1:38:96:9b:d2:6a:a0:2a:61:
         5b:11:6f:f7:0a:d4:1c:28:b3:ea:e6:d4:07:b7:48:40:12:67:
         75:37:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:55:18 2025 by rpki-client