Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80bf8ed8-ccc7-36ed-bc59-a56b847e43a8.roa
File:                     80bf8ed8-ccc7-36ed-bc59-a56b847e43a8.roa (raw, json)
Hash identifier:          HPPF3dQMhhZax5JTeYoQ++o9r+f29AN5X8Zi6EneVYE=
Subject key identifier:   97:96:57:3D:5C:FE:7F:3E:35:9B:51:7E:E7:BD:C7:42:A4:EC:7C:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAFA49E1445C79E7BA300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80bf8ed8-ccc7-36ed-bc59-a56b847e43a8.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.97.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:af:a4:9e:14:45:c7:9e:7b:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=2b8e43d5-f392-4003-af5c-d6038afb02cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:f6:73:cf:76:b1:14:f2:4c:7b:f9:fa:02:
                    5d:11:62:72:0f:49:90:e2:cb:88:6a:e1:3d:f1:6d:
                    07:db:10:5b:9f:ac:df:f9:3b:9c:6a:ac:e1:b0:db:
                    3b:34:e2:7a:be:5e:b6:b4:64:5b:c3:b8:75:57:32:
                    ae:7d:a0:31:5d:61:9d:51:72:2b:f7:c5:29:56:9b:
                    5c:3d:f6:f6:99:15:ad:35:8a:ed:38:cd:71:16:35:
                    14:2a:b2:a7:7c:90:3a:f6:cd:7c:2f:49:4c:be:1e:
                    7d:0b:13:62:4f:fb:72:a1:f3:4f:7b:df:15:55:2b:
                    0e:a9:96:5f:b3:bf:5a:99:10:99:13:0b:d1:d7:5f:
                    72:08:3c:a1:30:a5:0c:ae:39:e7:bb:9b:88:12:1f:
                    7f:b2:42:ae:46:04:98:6f:ee:5a:90:58:26:59:f4:
                    8c:5c:ea:a1:4e:2b:cb:7c:20:0e:13:f6:a1:c2:d1:
                    96:84:d8:db:af:d3:15:ce:e9:4b:96:e6:e6:43:60:
                    20:02:59:69:ee:ab:16:54:fc:37:5e:8a:79:5f:63:
                    e7:3f:ed:b5:53:64:90:c2:96:88:fb:08:16:fc:fc:
                    30:ce:28:62:fd:93:07:8e:90:72:21:bc:6a:9b:3e:
                    41:0d:51:44:6a:39:ef:8d:83:74:a2:f4:05:aa:fb:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:57:3D:5C:FE:7F:3E:35:9B:51:7E:E7:BD:C7:42:A4:EC:7C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80bf8ed8-ccc7-36ed-bc59-a56b847e43a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:18:4c:ca:ba:6e:97:f9:19:e4:f3:5b:45:6a:4b:df:39:9a:
         4f:63:4e:5b:e5:2b:df:a5:3f:97:25:8b:07:2e:5d:9b:2c:7e:
         df:0c:58:7d:d2:18:7b:7e:9d:b6:5f:8f:16:af:94:64:8e:be:
         a0:2e:e4:1b:50:99:38:64:7d:c2:d3:54:bd:42:14:12:c9:29:
         cf:9a:0d:e2:41:cc:e2:b6:a7:ce:6e:ea:92:c1:56:e7:3d:f8:
         47:07:c4:9f:2a:f4:93:4c:f3:1b:f8:e0:28:08:c0:e7:86:ad:
         63:5c:76:68:76:04:e4:af:b7:b3:4d:c4:98:30:58:11:74:86:
         c0:92:5f:96:8a:2e:79:e3:ef:5c:07:75:c1:f9:86:61:9e:2d:
         73:78:42:be:d0:3a:b6:10:03:f0:c8:9f:3c:33:28:1c:49:33:
         78:5f:72:be:cb:ca:15:4f:e8:7a:d1:9b:a6:0c:36:f7:00:4e:
         a8:f2:e0:d1:62:f9:c2:bf:d7:72:b0:78:63:1d:83:6f:10:d7:
         dc:2f:09:68:b0:08:80:75:c9:74:e8:84:75:0f:93:16:fa:5c:
         1a:4a:84:79:d0:37:af:dc:80:fe:ee:3e:72:d7:33:de:4a:4b:
         66:70:bc:44:85:7c:e5:ac:e2:f6:8b:ea:f3:1c:1b:14:0e:02:
         e3:ce:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:27 2025 by rpki-client