Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/742b64da-7450-3181-ad0b-72aa7a34b35f.roa
File:                     742b64da-7450-3181-ad0b-72aa7a34b35f.roa (raw, json)
Hash identifier:          zV8r86YprOLFhvMZKBxwgWmuuz8leW6YhFXlFZJZxxQ=
Subject key identifier:   92:F1:69:D7:64:E7:0C:C2:A3:A8:D1:32:96:CE:69:29:F4:7D:39:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB410B77547D1AE87F43B760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/742b64da-7450-3181-ad0b-72aa7a34b35f.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        72.71.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:0b:77:54:7d:1a:e8:7f:43:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=b72c9afb-7676-4e3c-a8fe-6a4d9c0d8b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:dc:34:98:b6:0f:fb:0c:62:be:a0:4d:21:
                    ae:19:47:11:39:8c:68:f2:a5:52:8a:cb:0e:ba:5c:
                    6f:66:cc:57:c3:1b:1f:cd:c2:13:9d:51:8f:c4:dc:
                    62:cf:49:6e:c6:e0:d5:a0:dc:2c:fe:a9:3e:9f:c7:
                    3b:40:19:46:e7:61:4f:11:09:04:28:b5:c4:62:59:
                    8b:d8:bb:4c:e7:90:33:a5:68:2c:c4:3b:7e:33:c7:
                    80:67:5b:a6:92:9c:e2:e1:d8:9e:07:33:18:6c:fc:
                    33:94:e1:97:ac:06:63:0a:e3:25:ab:75:5b:ff:3f:
                    29:ae:23:62:62:84:54:b5:29:bf:f5:d0:43:a0:ad:
                    6d:48:ea:37:fe:42:3d:0e:94:54:68:9c:76:6c:35:
                    da:23:97:a4:8e:22:bd:ee:04:16:8e:4d:32:69:63:
                    01:a2:60:3b:b3:30:eb:91:80:57:45:59:f8:42:a4:
                    07:7b:e7:7c:a6:53:31:72:c9:c6:6e:08:47:60:32:
                    9f:97:30:8f:3b:d8:23:cb:6b:fb:b1:7b:f1:b8:96:
                    07:37:35:bb:4a:0b:1c:a9:9d:1e:dd:c9:93:ad:df:
                    8e:30:00:a2:a1:0f:ab:d8:2f:a6:d9:8f:a0:ad:c3:
                    9b:42:45:39:5a:70:ba:5a:18:b7:98:52:ff:3e:7e:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F1:69:D7:64:E7:0C:C2:A3:A8:D1:32:96:CE:69:29:F4:7D:39:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/742b64da-7450-3181-ad0b-72aa7a34b35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.71.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:87:63:3f:70:3a:85:5f:4c:c0:13:49:02:34:fb:4f:12:
         bd:7f:8f:ec:da:e1:5b:c9:5e:f1:e4:0c:1e:4a:7c:90:08:30:
         bc:9c:ae:17:e7:c9:39:3c:ca:23:bf:80:8b:be:56:cd:16:c6:
         4e:b2:87:47:d6:c8:a3:67:e0:17:e0:f1:5a:af:ed:8c:4f:26:
         c8:6a:45:69:a2:cb:df:8f:02:f4:79:28:5f:a2:f8:85:5b:40:
         ba:25:a0:1e:b7:e8:6c:1b:48:99:d4:43:24:17:4f:ba:20:a2:
         fe:2f:db:a4:e0:4f:25:d8:11:a3:be:64:75:0d:1b:2b:ca:03:
         e7:18:d5:45:8e:17:d0:f4:54:88:c2:d3:f0:30:72:61:46:2a:
         f0:2f:d9:bc:f4:c5:6d:13:42:fd:77:75:1c:c4:87:a2:d0:37:
         76:b6:7a:ee:34:2a:d7:2f:4f:64:68:f1:82:41:4a:f1:af:ca:
         09:52:ac:32:de:b4:76:9c:3f:2d:e3:6e:3d:29:76:14:4e:4f:
         ce:9f:0b:2e:4f:3c:d0:7d:0b:f9:ea:a9:71:85:67:8d:6e:9c:
         13:58:c8:65:6c:53:b0:3e:be:20:e5:0d:23:5f:24:e0:38:9f:
         c3:d5:27:69:e0:48:91:0e:7c:37:98:14:fd:d1:6b:cb:3a:f5:
         b3:7e:62:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQt3VH0a6H9Dt2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YjcyYzlhZmItNzY3Ni00ZTNjLWE4ZmUtNmE0ZDljMGQ4YjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV3cNJi2D/sMYr6gTSGuGUcROYxo8qVSissO
ulxvZsxXwxsfzcITnVGPxNxiz0luxuDVoNws/qk+n8c7QBlG52FPEQkEKLXEYlmL
2LtM55AzpWgsxDt+M8eAZ1umkpzi4dieBzMYbPwzlOGXrAZjCuMlq3Vb/z8priNi
YoRUtSm/9dBDoK1tSOo3/kI9DpRUaJx2bDXaI5ekjiK97gQWjk0yaWMBomA7szDr
kYBXRVn4QqQHe+d8plMxcsnGbghHYDKflzCPO9gjy2v7sXvxuJYHNzW7SgscqZ0e
3cmTrd+OMACioQ+r2C+m2Y+grcObQkU5WnC6Whi3mFL/Pn4ncwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJLxaddk5wzCo6jRMpbOaSn0fTm1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQyYjY0ZGEtNzQ1MC0z
MTgxLWFkMGItNzJhYTdhMzRiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSEeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqWh2M/cDqFX0zAE0kCNPtPEr1/j+za4VvJXvHkDB5KfJAIMLycrhfn
yTk8yiO/gIu+Vs0Wxk6yh0fWyKNn4Bfg8Vqv7YxPJshqRWmiy9+PAvR5KF+i+IVb
QLoloB636GwbSJnUQyQXT7ogov4v26TgTyXYEaO+ZHUNGyvKA+cY1UWOF9D0VIjC
0/AwcmFGKvAv2bz0xW0TQv13dRzEh6LQN3a2eu40KtcvT2Ro8YJBSvGvyglSrDLe
tHacPy3jbj0pdhROT86fCy5PPNB9C/nqqXGFZ41unBNYyGVsU7A+viDlDSNfJOA4
n8PVJ2ngSJEOfDeYFP3Ra8s69bN+Yj8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:35 2025 by rpki-client