Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e5fc6cb-a2d1-3c7e-bb07-9ab1aafdec58.roa
File:                     6e5fc6cb-a2d1-3c7e-bb07-9ab1aafdec58.roa (raw, json)
Hash identifier:          GwU5RY/eek2TUzlJAUzI1h/He/ktbEcYzgBKwT4NR0Q=
Subject key identifier:   B4:12:31:82:F1:AA:31:4C:7F:1D:FF:E5:C1:0F:0D:24:5D:98:15:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAF94E2986257E50B4A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e5fc6cb-a2d1-3c7e-bb07-9ab1aafdec58.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.109.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:af:94:e2:98:62:57:e5:0b:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=bc9525fb-d546-4d65-bacd-1ff7a93a1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:46:a4:5a:3d:52:b0:11:ea:87:82:e6:0b:
                    0c:44:77:f8:22:e3:79:14:36:1a:e2:08:3c:81:71:
                    ae:93:14:50:86:a1:d6:5a:24:ac:8a:97:65:44:e4:
                    49:42:e2:79:b1:89:4e:0b:e3:d8:d3:30:f1:75:f7:
                    98:a2:9d:03:07:f1:1b:65:3f:48:1e:b2:c4:85:55:
                    0e:ab:17:d7:a4:4f:e2:8e:ac:c1:70:25:51:17:58:
                    7c:4f:3b:20:28:e3:46:bd:85:da:9b:b8:92:01:f2:
                    13:a8:ae:c9:05:fe:0b:58:8c:b9:9e:f3:ea:8b:cb:
                    6b:52:41:e3:37:2b:58:bc:de:5f:f9:03:2d:31:24:
                    26:08:98:e3:10:c5:bd:3f:49:ad:3e:5c:5c:56:72:
                    3b:99:e4:75:ac:f8:45:67:4c:ca:bd:50:70:7e:e3:
                    97:80:c9:89:19:13:4b:5a:49:ca:70:fd:50:8d:8b:
                    62:b3:da:74:e1:c6:07:6a:3b:36:5b:d3:32:0f:19:
                    01:e1:be:cb:4e:70:73:73:cf:23:70:2a:2e:98:19:
                    54:01:97:8c:cd:91:d2:62:7b:8c:00:00:fe:48:36:
                    55:9a:2e:fb:b8:d4:39:df:15:a1:83:97:00:a6:17:
                    e0:22:8b:6f:2f:bc:32:76:b0:11:59:c3:6d:7f:ae:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:31:82:F1:AA:31:4C:7F:1D:FF:E5:C1:0F:0D:24:5D:98:15:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e5fc6cb-a2d1-3c7e-bb07-9ab1aafdec58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:61:af:ba:97:c7:57:d5:e9:a6:43:1b:6c:7a:6b:d7:72:2b:
         d9:36:cb:59:11:03:e7:5b:08:22:0f:b7:01:61:c3:51:86:d5:
         7c:e1:ea:1b:0e:2f:94:0b:41:e4:c1:b8:c9:21:17:fc:1f:38:
         be:07:a9:a5:6b:65:4d:b7:7a:8f:99:74:88:d8:1a:53:b6:46:
         45:85:b2:60:62:fe:1a:bb:3e:1c:2e:a6:fc:83:fc:f3:33:9b:
         71:ca:8f:dd:d0:36:f3:13:49:08:c6:88:ec:5e:9b:6b:72:d0:
         c6:2e:b3:11:00:8b:ec:a5:e0:c4:7a:d7:23:8a:3e:6e:7f:69:
         c3:c9:41:bd:e4:79:70:70:a3:a1:6d:ab:d4:a0:a9:c7:dd:06:
         83:e1:b2:7d:97:09:88:9f:11:ca:bc:2d:5a:bb:a6:65:67:f0:
         ad:c5:48:10:0d:db:c8:a2:73:69:ed:93:84:72:a7:94:16:7e:
         32:3a:04:1b:a1:fe:cf:80:15:d7:c0:88:6e:dd:5b:37:74:11:
         1d:12:02:98:fd:79:88:ca:d3:a6:94:8d:c1:36:31:7d:57:77:
         80:b1:c9:51:8d:0c:13:ef:dd:36:a3:08:e5:ca:61:ff:1a:bc:
         e7:e2:67:f4:08:2b:be:b9:64:e7:f6:4b:87:0b:b6:66:25:a3:
         68:cd:f1:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKq+U4phiV+ULSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
YmM5NTI1ZmItZDU0Ni00ZDY1LWJhY2QtMWZmN2E5M2ExMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB1GpFo9UrAR6oeC5gsMRHf4IuN5FDYa4gg8
gXGukxRQhqHWWiSsipdlRORJQuJ5sYlOC+PY0zDxdfeYop0DB/EbZT9IHrLEhVUO
qxfXpE/ijqzBcCVRF1h8TzsgKONGvYXam7iSAfITqK7JBf4LWIy5nvPqi8trUkHj
NytYvN5f+QMtMSQmCJjjEMW9P0mtPlxcVnI7meR1rPhFZ0zKvVBwfuOXgMmJGRNL
WknKcP1QjYtis9p04cYHajs2W9MyDxkB4b7LTnBzc88jcCoumBlUAZeMzZHSYnuM
AAD+SDZVmi77uNQ53xWhg5cAphfgIotvL7wydrARWcNtf67GOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQSMYLxqjFMfx3/5cEPDSRdmBUaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmU1ZmM2Y2ItYTJkMS0z
YzdlLWJiMDctOWFiMWFhZmRlYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSG0uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdhr7qXx1fV6aZDG2x6a9dyK9k2y1kRA+dbCCIPtwFhw1GG1Xzh6hsO
L5QLQeTBuMkhF/wfOL4HqaVrZU23eo+ZdIjYGlO2RkWFsmBi/hq7PhwupvyD/PMz
m3HKj93QNvMTSQjGiOxem2ty0MYusxEAi+yl4MR61yOKPm5/acPJQb3keXBwo6Ft
q9SgqcfdBoPhsn2XCYifEcq8LVq7pmVn8K3FSBAN28iic2ntk4Ryp5QWfjI6BBuh
/s+AFdfAiG7dWzd0ER0SApj9eYjK06aUjcE2MX1Xd4CxyVGNDBPv3TajCOXKYf8a
vOfiZ/QIK765ZOf2S4cLtmYlo2jN8YQ=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:30 2025 by rpki-client