Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa
File:                     83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa (raw, json)
Hash identifier:          4Q31iVpey/aaNQYyXAItrf9W1catWWvwQoP3vuNGF18=
Subject key identifier:   99:CB:85:FA:F6:51:8F:03:39:EF:2C:E0:95:87:E5:AC:BE:F7:B0:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB9C9479CC22272920400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.97.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b9:c9:47:9c:c2:22:72:92:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=3e9471a4-4bd6-4cd8-825b-a698211ef317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:a4:64:23:75:91:2d:67:e8:bc:30:ea:a8:
                    81:da:ca:57:f8:2d:fa:a1:ff:83:d5:36:4f:4d:b6:
                    74:63:c7:cc:8c:b2:70:f5:96:b9:41:cb:a4:d6:de:
                    de:d8:7b:e7:c5:0b:5d:cb:ad:88:c5:b7:1b:f6:fc:
                    d8:09:6f:c7:8b:66:e4:6a:9f:56:d9:6f:57:11:55:
                    44:b9:33:01:de:c4:6e:2b:1e:db:18:bc:86:0e:4d:
                    c0:33:95:79:0e:3d:6c:64:4f:60:17:79:fb:27:7c:
                    bc:14:49:7c:fa:d4:37:d6:8c:aa:77:c4:10:76:9e:
                    ec:67:ea:80:ef:6f:ff:ea:2f:b1:43:b9:91:3c:97:
                    9f:74:58:f1:74:4a:e2:29:86:e4:22:dd:b0:58:4b:
                    d4:59:3e:04:1d:99:9d:33:ed:0e:a3:28:22:1a:52:
                    5a:2d:d9:e0:b5:a2:91:37:9b:94:9e:ed:ec:b0:c4:
                    30:23:6a:ec:d4:75:89:e2:bb:16:02:23:ca:ed:e2:
                    26:d0:eb:52:ff:84:17:d3:be:67:bf:fc:d8:e0:ed:
                    a1:ed:0a:55:19:9f:4c:41:ff:90:1c:f6:ec:53:1e:
                    c6:4a:69:3b:43:bf:7d:d6:67:6a:72:15:c5:df:c0:
                    b4:75:58:f4:d2:66:ad:45:ee:d5:5f:06:52:ed:5c:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CB:85:FA:F6:51:8F:03:39:EF:2C:E0:95:87:E5:AC:BE:F7:B0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:59:9d:87:e6:99:6d:49:6a:ea:78:0b:8f:bb:8e:9e:28:1e:
         a1:9b:66:61:03:96:1a:d2:a4:c5:fe:8e:51:21:14:79:be:eb:
         96:7a:e3:47:66:ec:4c:d8:01:b6:c0:76:98:a8:df:22:12:ed:
         ec:05:38:2b:67:d4:2f:4f:06:80:64:0a:e4:53:a9:a2:55:fa:
         5f:e5:36:82:8d:51:b8:63:a0:e7:95:98:91:c6:ae:91:cc:50:
         66:6b:58:60:50:5b:14:be:f9:7c:b7:f0:38:d2:57:f6:6e:70:
         f7:34:da:81:26:d2:bb:d2:68:8b:74:1b:d5:38:a5:c5:9c:a3:
         96:7f:11:eb:c0:6a:66:56:7b:bb:13:a6:be:fd:e2:a5:ff:c8:
         ad:fe:c6:62:a4:6d:2b:9c:cc:da:dc:26:bc:0e:9c:25:90:1d:
         d0:4d:21:4c:0c:e7:c1:4c:72:18:8f:4a:98:98:a3:dd:0a:8c:
         77:e3:72:31:81:a7:43:13:68:cf:17:3e:b2:0d:eb:2c:ac:2e:
         57:d7:af:1b:8e:21:4d:a6:15:46:32:ba:42:f4:92:f2:73:80:
         99:a1:fc:35:7f:24:ae:ed:32:bd:f2:b9:a3:3a:7f:6e:de:aa:
         28:ae:08:c9:87:29:66:a6:15:51:e7:4b:3c:b9:b0:9e:e1:56:
         3b:fb:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:43:55 2025 by rpki-client