Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72197658-85a9-3eb0-a926-b20eee1ad952.roa
File:                     72197658-85a9-3eb0-a926-b20eee1ad952.roa (raw, json)
Hash identifier:          sxKxTnf7LmT9pqykw+ApZ28leWQZw1xQUof61WTyRGA=
Subject key identifier:   4D:74:C2:1E:63:C6:0B:1A:DF:D0:07:90:75:56:15:F4:9D:D5:2E:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB410BDFF3661564FCB96F20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72197658-85a9-3eb0-a926-b20eee1ad952.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        72.84.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:0b:df:f3:66:15:64:fc:b9:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=556cff8c-24de-4201-aeb7-3a92ed032b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:25:23:a5:a3:e4:5f:a4:16:88:84:93:29:
                    22:2a:17:3b:b2:1e:db:01:75:d1:6c:84:e1:d8:80:
                    5d:7f:8f:93:9c:79:b7:64:55:e9:97:58:53:0e:26:
                    64:ad:29:0d:d2:af:b2:0a:fc:f4:aa:d8:06:54:07:
                    86:5d:61:7f:74:b7:18:b3:1f:ca:07:c8:a2:d7:f9:
                    02:df:af:6a:88:e6:1b:37:e8:e9:af:c8:d1:3a:3f:
                    25:82:b5:db:9b:5d:b8:b3:54:f3:62:71:09:8a:a7:
                    d2:78:bb:39:8c:8d:e3:a7:bf:fe:8b:c9:a7:a7:37:
                    9c:2b:b8:4f:f4:3f:0b:31:50:91:58:b1:5d:93:6e:
                    33:26:44:ad:d7:bd:6e:62:1f:28:9b:a2:d4:58:6a:
                    6f:df:2f:41:5d:02:35:b8:92:b0:99:4a:31:63:bc:
                    a6:bb:84:98:97:a3:72:5b:76:a8:08:cb:74:ce:be:
                    d1:fe:e0:64:fe:bf:e7:97:6b:87:79:df:01:11:e2:
                    80:d1:20:cc:3a:0f:f0:f7:0d:26:19:c5:a3:07:12:
                    5f:3b:4b:5f:c4:76:fd:89:e5:2c:ba:59:3e:27:33:
                    c9:0d:d6:de:af:f9:43:e1:75:12:01:60:b4:bb:2c:
                    d6:c2:56:e7:cb:0d:6a:78:e3:ef:dd:f7:31:c7:09:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:74:C2:1E:63:C6:0B:1A:DF:D0:07:90:75:56:15:F4:9D:D5:2E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/72197658-85a9-3eb0-a926-b20eee1ad952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.84.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a8:66:72:8d:76:19:ba:ad:5f:d6:8a:fb:76:28:3f:bb:7b:
         6f:14:61:84:ca:3c:53:90:b6:d9:8b:44:ca:69:70:74:5d:84:
         3a:16:56:02:80:1a:07:4c:11:de:52:d6:fa:3e:60:b1:6c:96:
         9e:6a:0a:8b:07:26:de:b4:1c:69:6e:a7:0b:17:5b:9d:52:53:
         ac:a5:69:e2:b6:38:fc:72:bb:85:ed:fb:a0:b9:65:1e:31:06:
         8e:07:9e:64:29:71:74:fc:86:87:16:33:57:f7:7e:b8:2d:7e:
         aa:d8:4f:f6:47:71:c5:7f:13:6b:49:fd:19:ab:a8:48:bd:56:
         bb:d3:09:1b:43:c1:11:b9:d3:d4:40:29:4b:f6:5e:8c:f9:27:
         98:53:37:e5:6e:44:62:55:03:26:54:54:0e:d1:94:b9:90:f4:
         6d:3f:0b:b6:b4:2d:6b:09:61:2f:c7:3c:6a:b1:f0:88:c9:02:
         53:67:fe:bf:68:c9:7a:90:4b:74:4c:f9:14:0f:1e:42:5c:1b:
         13:34:5d:ca:65:d7:d2:93:00:6d:1f:a6:7b:5d:19:3e:67:3a:
         18:0d:38:ac:2e:63:f2:e2:1b:e7:9c:51:d7:c5:78:11:d2:50:
         0b:fd:42:a8:53:30:40:1b:86:40:3a:68:46:58:99:e9:45:a1:
         0d:98:0b:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQvf82YVZPy5byAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NTU2Y2ZmOGMtMjRkZS00MjAxLWFlYjctM2E5MmVkMDMyYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9glI6Wj5F+kFoiEkykiKhc7sh7bAXXRbITh
2IBdf4+TnHm3ZFXpl1hTDiZkrSkN0q+yCvz0qtgGVAeGXWF/dLcYsx/KB8ii1/kC
369qiOYbN+jpr8jROj8lgrXbm124s1TzYnEJiqfSeLs5jI3jp7/+i8mnpzecK7hP
9D8LMVCRWLFdk24zJkSt171uYh8om6LUWGpv3y9BXQI1uJKwmUoxY7ymu4SYl6Ny
W3aoCMt0zr7R/uBk/r/nl2uHed8BEeKA0SDMOg/w9w0mGcWjBxJfO0tfxHb9ieUs
ulk+JzPJDdber/lD4XUSAWC0uyzWwlbnyw1qeOPv3fcxxwkizwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE10wh5jxgsa39AHkHVWFfSd1S6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzIxOTc2NTgtODVhOS0z
ZWIwLWE5MjYtYjIwZWVlMWFkOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSFTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGoZnKNdhm6rV/Wivt2KD+7e28UYYTKPFOQttmLRMppcHRdhDoWVgKA
GgdMEd5S1vo+YLFslp5qCosHJt60HGlupwsXW51SU6ylaeK2OPxyu4Xt+6C5ZR4x
Bo4HnmQpcXT8hocWM1f3frgtfqrYT/ZHccV/E2tJ/RmrqEi9VrvTCRtDwRG509RA
KUv2Xoz5J5hTN+VuRGJVAyZUVA7RlLmQ9G0/C7a0LWsJYS/HPGqx8IjJAlNn/r9o
yXqQS3RM+RQPHkJcGxM0Xcpl19KTAG0fpntdGT5nOhgNOKwuY/LiG+ecUdfFeBHS
UAv9QqhTMEAbhkA6aEZYmelFoQ2YC1o=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:22 2025 by rpki-client