Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa
File:                     b38fa417-68e2-35fd-be67-57faa973b58f.roa (raw, json)
Hash identifier:          2hGlr/dR2AYwYUL0QpaU1R7VcIpc9VF0mI3MOF14JRM=
Subject key identifier:   A5:87:FF:D6:42:B4:59:B6:D9:89:35:9B:49:01:E3:C0:32:CF:6F:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB570DADB16CCE5AAC660
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.111.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b5:70:da:db:16:cc:e5:aa:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=7589bd08-6ef5-43cf-8dda-137fbb8f2626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:fb:e3:5b:6b:37:22:60:83:c1:23:da:b1:
                    c7:3f:a5:23:3f:db:0d:c7:84:9e:cb:c6:47:6c:fd:
                    73:ff:8d:27:7c:3d:08:84:20:79:79:c3:72:b6:19:
                    0c:e5:3e:15:7d:60:04:b8:1c:6e:57:f5:a4:a9:64:
                    af:a8:75:51:ca:69:83:f8:63:88:7a:14:2e:f6:5d:
                    f1:f2:0f:90:36:c4:48:f5:ff:d7:58:1b:c8:96:1c:
                    de:65:b7:6a:49:67:fd:89:19:bd:83:17:bf:14:c0:
                    36:64:f2:61:f5:7c:a8:9e:c9:9a:20:9f:8b:0e:9b:
                    fa:dc:0a:6a:80:79:03:4e:77:3b:c2:78:1b:9f:97:
                    b9:ae:ce:67:11:6c:03:35:c9:59:5f:0d:b1:71:fc:
                    37:4e:c2:e9:23:34:cb:40:2e:dc:6f:5a:d2:24:b6:
                    b2:b9:06:c1:b3:be:67:a5:59:ec:98:c2:78:1f:e8:
                    21:64:36:cb:09:a7:5f:9d:63:99:5b:1d:3f:85:88:
                    5c:3c:e7:a5:94:6d:bf:ac:c8:1a:09:b0:da:54:12:
                    76:c0:b3:28:01:37:d1:c3:ed:3b:6c:b5:c0:2d:e1:
                    6d:f4:ec:c4:f4:46:ce:1a:d6:a0:37:ac:cb:28:9c:
                    4f:96:79:05:0c:bc:45:29:94:c0:83:15:9f:fe:f8:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:87:FF:D6:42:B4:59:B6:D9:89:35:9B:49:01:E3:C0:32:CF:6F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:04:f7:b6:70:8c:6c:38:96:4c:5d:45:8b:ff:74:48:4a:1a:
         92:8b:9a:64:f2:ec:98:2c:dc:d2:ba:16:84:46:6a:08:d4:a3:
         6c:a0:eb:45:5d:ef:3c:cb:3c:2e:bf:26:4c:a2:cf:14:26:e7:
         de:93:13:d5:95:02:1c:c8:71:26:d4:7d:b4:dd:ac:92:07:ac:
         9f:50:67:8d:a5:4b:f6:44:de:1e:42:d0:ad:ab:9d:5e:7f:89:
         a2:c1:6f:93:af:92:c2:38:6a:64:0d:b4:a7:50:92:d5:f6:36:
         bf:f5:4d:ff:eb:85:d6:4a:68:93:8a:19:69:1b:fc:01:b1:bb:
         74:47:75:20:fc:14:82:c8:1d:7d:62:20:30:33:21:21:6d:84:
         d5:c5:8b:67:c2:55:e5:a8:23:ce:5f:b3:18:ca:cb:6e:3a:6b:
         38:25:d2:2b:ca:51:6e:7a:4d:27:ab:58:16:5f:c7:fd:10:08:
         1b:06:f9:90:a7:d0:9e:8d:f4:ea:84:ce:5b:2b:f4:92:bf:f5:
         59:5d:7e:39:2e:6c:7b:39:ac:a3:b6:9e:d7:df:54:b7:69:03:
         cd:92:5e:2d:93:f0:d5:4b:99:0c:69:d2:e2:af:28:6b:10:63:
         3f:3e:3f:17:c3:2b:fe:80:ef:a9:ae:ec:c7:eb:62:9f:6a:93:
         b9:90:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:41 2025 by rpki-client