Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67433747-7053-39a5-8e0c-bef558eb1ab8.roa
File:                     67433747-7053-39a5-8e0c-bef558eb1ab8.roa (raw, json)
Hash identifier:          P3NFn0ZX+J1xg9LxE/ph13F5j4Ik1leGsp/9w1ShnOc=
Subject key identifier:   C3:3A:CC:3B:90:32:F8:B3:B9:12:CB:1F:10:65:87:D8:BF:9C:E7:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB45F21DF5E556AB31880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67433747-7053-39a5-8e0c-bef558eb1ab8.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.106.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b4:5f:21:df:5e:55:6a:b3:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=ca3c35a6-11f2-48ab-8e56-e32f842e4905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:a9:07:65:d6:98:64:1e:5f:43:42:7e:eb:
                    17:de:cb:91:d4:4d:30:9d:fb:7f:ef:39:84:19:50:
                    12:15:92:5c:36:e3:4c:46:0a:5e:92:81:8c:cd:95:
                    bf:a0:31:6b:d9:bd:ca:3e:0b:52:7e:e9:90:96:de:
                    71:dd:6f:4d:b4:93:f1:80:5c:ce:38:be:0e:96:e8:
                    f0:7e:d3:f0:c4:42:45:a2:54:db:b4:c7:d3:56:0e:
                    06:34:96:b4:1d:64:89:0d:48:73:e1:45:7a:1d:7d:
                    6d:57:aa:69:2e:22:f8:8d:9a:4b:71:91:80:34:19:
                    c9:5a:da:93:2b:db:57:86:06:15:bd:60:46:14:fa:
                    97:76:93:60:06:16:09:70:1f:f5:db:c2:79:c6:da:
                    ef:ac:de:77:f1:ba:21:ab:97:a5:55:64:8c:d8:3e:
                    60:22:0a:f6:b9:13:94:9e:14:0c:24:4a:72:bf:1f:
                    a5:26:05:1f:b4:f2:7e:23:af:39:45:ed:27:4b:d1:
                    d5:86:fd:cc:5e:96:b0:48:ba:6a:2a:10:45:cf:2e:
                    75:e2:03:2b:3f:26:e7:40:22:50:4e:be:7f:8f:56:
                    45:38:e2:89:0a:0f:14:9a:02:f2:93:11:ee:37:be:
                    27:77:4c:ec:8a:92:72:7d:e7:0a:29:8e:e8:63:3d:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:CC:3B:90:32:F8:B3:B9:12:CB:1F:10:65:87:D8:BF:9C:E7:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67433747-7053-39a5-8e0c-bef558eb1ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:95:53:bb:6c:b7:7d:0c:ee:f9:d8:7f:61:f8:fd:34:96:0a:
         f9:44:2e:32:d2:63:2d:4c:73:c7:90:8f:e0:6e:93:4c:b3:4f:
         59:d4:27:da:95:f3:26:13:02:b8:94:6b:19:30:a7:5d:34:95:
         be:c6:89:66:ec:54:3f:c7:3e:2f:ab:57:3d:2e:ed:f7:c7:20:
         1c:08:ab:31:0a:b5:e5:5f:73:7f:b9:75:17:ba:65:50:9b:58:
         10:c8:2c:66:7c:dc:be:d3:d4:e9:5f:6b:ff:14:b6:2a:8a:7f:
         de:d4:a5:77:7a:65:d0:7e:a5:9f:7b:7b:f6:34:00:71:89:8c:
         8b:c6:e8:88:99:1c:e1:63:09:71:c8:48:28:4c:47:e5:e7:4d:
         80:fa:b2:e5:68:de:c2:4e:21:33:03:00:f4:7e:e5:67:16:79:
         7c:13:56:07:cb:df:63:03:f2:08:2e:a4:d8:0f:bf:43:44:86:
         93:37:e9:b1:e6:dc:8c:d0:e6:06:e5:78:37:e3:15:16:f5:16:
         3a:4f:1a:35:d6:dc:30:be:32:94:99:3a:c9:23:e3:9c:b0:46:
         96:96:53:6a:13:7b:93:80:e2:74:73:d7:5b:16:f6:b4:e0:46:
         f1:2c:6d:34:e3:03:8d:a0:8a:76:bf:98:4c:74:21:b2:db:13:
         9c:ee:d7:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrRfId9eVWqzGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
Y2EzYzM1YTYtMTFmMi00OGFiLThlNTYtZTMyZjg0MmU0OTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37GpB2XWmGQeX0NCfusX3suR1E0wnft/7zmE
GVASFZJcNuNMRgpekoGMzZW/oDFr2b3KPgtSfumQlt5x3W9NtJPxgFzOOL4Olujw
ftPwxEJFolTbtMfTVg4GNJa0HWSJDUhz4UV6HX1tV6ppLiL4jZpLcZGANBnJWtqT
K9tXhgYVvWBGFPqXdpNgBhYJcB/128J5xtrvrN538bohq5elVWSM2D5gIgr2uROU
nhQMJEpyvx+lJgUftPJ+I685Re0nS9HVhv3MXpawSLpqKhBFzy514gMrPybnQCJQ
Tr5/j1ZFOOKJCg8UmgLykxHuN74nd0zsipJyfecKKY7oYz2tCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMM6zDuQMvizuRLLHxBlh9i/nOdaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjc0MzM3NDctNzA1My0z
OWE1LThlMGMtYmVmNTU4ZWIxYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaVU7tst30M7vnYf2H4/TSWCvlELjLSYy1Mc8eQj+Buk0yzT1nUJ9qV
8yYTAriUaxkwp100lb7GiWbsVD/HPi+rVz0u7ffHIBwIqzEKteVfc3+5dRe6ZVCb
WBDILGZ83L7T1Olfa/8UtiqKf97UpXd6ZdB+pZ97e/Y0AHGJjIvG6IiZHOFjCXHI
SChMR+XnTYD6suVo3sJOITMDAPR+5WcWeXwTVgfL32MD8ggupNgPv0NEhpM36bHm
3IzQ5gbleDfjFRb1FjpPGjXW3DC+MpSZOskj45ywRpaWU2oTe5OA4nRz11sW9rTg
RvEsbTTjA42gina/mEx0IbLbE5zu13c=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:04:29 2025 by rpki-client