Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92902377-8c6a-3823-95a3-a97e561d8e04.roa
File:                     92902377-8c6a-3823-95a3-a97e561d8e04.roa (raw, json)
Hash identifier:          8dyT4R85uYHNdBdl1iCvlF4tbPQvdR1SMYbeEK/aaw8=
Subject key identifier:   69:E3:36:75:EE:D1:20:15:4E:33:03:94:82:74:5F:88:BB:C4:91:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB2E9A0549E1E529C4A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92902377-8c6a-3823-95a3-a97e561d8e04.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.106.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b2:e9:a0:54:9e:1e:52:9c:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=5c076351-9397-44e2-b2b8-eb06b63fd107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:97:2e:58:57:40:11:e7:f6:5d:b3:2b:76:
                    03:97:78:67:02:10:f3:57:7d:44:10:ec:dc:13:1e:
                    70:37:8e:9b:34:9c:aa:64:0a:f0:ff:71:76:47:41:
                    66:d2:ba:4c:06:8c:b1:24:55:53:9e:1d:6e:d8:23:
                    10:08:f6:9d:1e:ff:eb:6d:f7:0d:3f:1d:87:a4:e9:
                    3c:c0:c9:74:86:8c:03:8e:78:71:c4:7a:62:94:5c:
                    5a:da:93:50:8d:3e:7a:02:29:9a:f0:7a:16:58:c0:
                    7d:de:95:28:88:3f:10:d0:77:86:0d:28:99:3c:01:
                    8f:ff:12:db:51:e4:6d:fa:10:a6:43:fc:63:b3:d8:
                    40:5e:aa:7d:f9:5e:d8:e4:07:12:ec:28:e0:a2:5b:
                    f4:10:3c:47:a9:81:de:53:5f:28:49:ec:d5:e3:8f:
                    0f:ca:df:68:ec:6e:3c:1f:4a:09:2a:df:d8:1b:a9:
                    15:c8:88:5a:26:b2:38:55:45:d5:61:32:de:ed:99:
                    71:f5:57:24:a0:6f:66:1b:aa:11:c6:04:69:a0:19:
                    bf:df:97:0f:cf:6f:b9:fc:67:f3:38:f3:3e:52:86:
                    27:dc:3c:30:5c:fb:0a:d1:71:00:27:b7:e9:85:80:
                    91:9d:88:96:a4:e2:04:aa:18:0b:99:75:1f:67:c5:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:36:75:EE:D1:20:15:4E:33:03:94:82:74:5F:88:BB:C4:91:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92902377-8c6a-3823-95a3-a97e561d8e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:0c:1e:37:65:35:85:30:2f:ca:e4:89:97:f6:52:6f:4b:
         74:74:d8:8a:09:74:3d:2d:0c:b7:ab:d9:2d:3f:d4:63:a4:00:
         23:b1:fe:31:06:5f:e1:48:e7:ca:91:03:92:52:ba:0b:8d:9c:
         6b:87:be:5c:4c:66:90:28:99:9f:83:93:53:c2:d3:31:47:6e:
         8f:fc:fe:dd:f7:5b:70:a1:06:09:ec:ec:85:9c:17:4b:6d:af:
         09:85:84:80:da:61:78:c7:62:f1:34:83:7b:dc:53:93:3b:f6:
         06:54:64:4c:82:b3:aa:06:3d:36:e1:0f:f4:12:19:fe:5f:35:
         52:54:33:52:d2:60:ec:b0:fa:bd:e4:09:25:25:13:8d:de:09:
         65:e4:b0:ff:67:12:cc:fa:c8:d1:84:db:94:40:27:57:8a:0e:
         a9:14:16:70:38:07:c0:99:fd:6f:46:fa:9e:71:dd:b2:73:ad:
         7b:3a:6f:fc:40:5f:d8:2b:c6:e2:0a:fb:bc:87:01:d7:e6:19:
         15:3f:59:f4:58:b3:1f:47:da:b0:78:0b:51:68:24:1c:6d:c5:
         60:ab:af:9c:43:1f:17:c3:fe:c5:9d:3d:d4:ef:ab:16:63:42:
         e9:2c:81:94:28:83:4a:88:99:7b:f3:30:89:a9:f2:0d:58:c8:
         bf:78:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:03:19 2025 by rpki-client