Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57b51eac-559a-3789-8c1b-39dd9fdff9a9.roa
File:                     57b51eac-559a-3789-8c1b-39dd9fdff9a9.roa (raw, json)
Hash identifier:          97or0AhOg7y1O91lg6vA51heUZ2MPqPxEHANuKELsOw=
Subject key identifier:   D3:1C:3E:93:C4:C5:D2:EA:BD:9F:C6:15:43:C7:59:01:F6:01:3E:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F7152A59455FF3D2249A8000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57b51eac-559a-3789-8c1b-39dd9fdff9a9.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:2a:59:45:5f:f3:d2:24:9a:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=a170ffae-8229-486a-8036-b22f2bba579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:cf:22:fb:13:e6:9d:90:4b:fb:df:c0:f2:
                    42:cd:dc:f8:be:63:d0:ee:59:e6:df:45:c9:70:c6:
                    64:01:64:8d:32:69:c6:1b:92:f8:99:4a:4b:2e:4b:
                    a1:02:54:90:8c:72:65:42:fe:f2:4c:0d:48:dc:64:
                    15:50:46:5e:4a:64:28:af:fd:39:04:e1:c9:fd:58:
                    5d:0f:64:27:55:4a:af:a2:7f:99:06:60:4b:e5:27:
                    c0:4f:8f:fd:ac:63:f7:1b:a4:d9:4e:79:10:0d:e7:
                    f9:11:f2:9e:be:ad:67:55:81:fd:a7:fd:c1:a5:84:
                    ce:42:42:bb:c7:a2:b7:29:91:75:2e:02:dd:bb:d7:
                    6d:3d:b6:ef:b6:3d:b6:1b:bc:38:c9:7b:8a:0a:17:
                    69:cb:1e:b4:aa:85:66:1d:63:44:74:1a:88:43:9e:
                    0a:02:a5:50:f0:1f:f2:e9:a5:dc:94:d0:3d:1f:cd:
                    ad:5f:4a:57:46:b1:3b:bf:60:32:10:af:f2:d8:4c:
                    93:b9:97:a0:dc:c8:15:51:7a:a9:86:63:f2:61:96:
                    b6:2e:27:24:b6:80:d2:97:20:ae:93:8d:f8:d1:c5:
                    1a:ab:8b:15:61:1e:00:aa:bd:b2:0e:ca:df:60:8b:
                    5b:95:08:9c:1d:83:17:03:12:b9:db:47:77:90:d1:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1C:3E:93:C4:C5:D2:EA:BD:9F:C6:15:43:C7:59:01:F6:01:3E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57b51eac-559a-3789-8c1b-39dd9fdff9a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:b4:e0:bb:7b:2c:f5:23:d8:5c:6a:b6:d8:02:2b:7d:e3:
         b1:de:c7:f0:ed:62:23:d9:0f:e4:fd:0c:0b:5f:1d:2d:d4:e9:
         8b:be:ae:41:cd:c6:55:26:78:59:4e:68:12:38:79:ba:ae:39:
         e0:86:c4:cd:00:b6:4a:28:a0:70:fc:ef:83:8b:70:c6:29:71:
         7e:af:e2:ae:98:3e:ca:04:e8:fa:fc:7a:a9:75:73:c0:85:33:
         85:31:34:86:5c:a9:a9:7e:7e:db:ee:d9:32:fd:00:d2:bd:d6:
         35:fb:8e:30:ef:0c:75:85:cf:5c:1b:bc:3e:69:de:3e:c9:b8:
         b1:f2:d2:5c:d4:71:be:5d:24:5a:db:e7:e7:77:e2:bc:83:1f:
         66:b8:bb:ae:d3:56:14:c3:6a:bd:62:8b:4c:6a:ce:07:64:60:
         c0:3c:e7:70:ff:28:35:06:89:99:6d:4b:bd:e9:cc:ee:07:ad:
         0e:32:4a:da:f7:ac:84:0e:10:a6:87:0f:dd:d9:ed:8a:ad:48:
         2e:d0:48:d5:b4:53:a5:df:59:c6:e8:97:4d:d6:d3:fc:ab:bb:
         e6:05:cc:00:5c:ce:15:65:a9:5d:ee:cc:67:3a:36:40:7e:8b:
         c1:c0:7c:38:95:47:e7:36:16:ae:5e:7b:d8:b5:e3:c9:17:37:
         51:0c:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:28:47 2025 by rpki-client