Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2fca897-9fe6-3229-a474-ef16b540b406.roa
File:                     c2fca897-9fe6-3229-a474-ef16b540b406.roa (raw, json)
Hash identifier:          FcdnW6wR5uLscVxcNRRm1NkAs9NF9jMp40+X8gGp0eA=
Subject key identifier:   E7:40:49:5D:F6:23:D0:50:7A:71:D2:EB:3A:16:3D:5D:0E:0A:E6:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F7152D49B1820DE991281400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2fca897-9fe6-3229-a474-ef16b540b406.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.106.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:2d:49:b1:82:0d:e9:91:28:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=7a13eb37-806b-4321-b2f9-4aba11a1a4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:24:b6:58:37:4d:a1:ed:7b:1a:12:cb:0e:
                    b2:1c:81:37:6c:d4:2b:c0:76:e0:0f:25:63:6d:90:
                    25:d3:e9:6a:fd:6e:80:05:60:05:04:9a:19:c8:d4:
                    59:a3:e5:55:f3:af:1c:1c:1b:89:df:b8:4d:a6:ca:
                    ff:78:00:4b:e9:ce:eb:99:2d:44:43:08:03:90:d9:
                    df:bd:72:76:4f:b6:d8:a4:ab:8c:3e:6e:ac:61:03:
                    12:22:b8:c2:11:0d:04:c8:d0:c3:2e:ec:07:74:b2:
                    bb:16:84:0f:91:e4:1d:35:1a:13:49:90:b8:31:4e:
                    5c:2e:57:bb:46:0d:22:e9:b4:82:09:58:09:1c:95:
                    17:31:23:6c:a5:78:be:93:fb:78:7e:bc:91:19:ee:
                    40:bd:89:e7:15:47:53:3b:ca:d1:19:1e:32:7f:d4:
                    6c:77:83:08:75:23:8e:c8:52:cf:0a:13:bf:e7:b1:
                    dc:f5:94:ca:04:9a:42:52:53:94:e5:5c:da:e5:08:
                    20:3f:8c:43:03:2d:bc:5b:a8:89:d5:f5:88:82:cc:
                    f0:f6:ac:24:fa:f3:43:46:2b:1a:78:26:f3:09:92:
                    69:e7:13:42:4d:19:32:a6:31:8a:c9:51:cf:65:31:
                    dd:b0:e4:07:a7:fd:52:79:ec:8e:58:c7:e8:aa:20:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:49:5D:F6:23:D0:50:7A:71:D2:EB:3A:16:3D:5D:0E:0A:E6:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2fca897-9fe6-3229-a474-ef16b540b406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:81:81:47:23:40:9b:a7:d9:ff:8f:71:b7:46:bf:fb:96:58:
         9e:5e:af:41:b5:3e:49:9d:61:a8:5b:25:76:b3:08:c1:2c:e4:
         0b:00:9a:f5:00:a2:6b:18:bd:f3:e8:7e:98:95:d8:c3:4f:08:
         c1:89:59:f3:14:8c:db:a2:39:77:c8:b3:6b:7d:f8:4a:f5:64:
         79:50:db:0f:7f:e2:fd:75:5d:dc:8d:be:af:3a:94:33:64:7b:
         69:84:a1:47:66:10:b4:8e:b3:42:d2:06:84:ef:fe:56:24:13:
         ad:3e:31:25:43:a4:5a:65:2d:4d:09:5e:6a:25:85:bb:a3:74:
         3d:b5:0f:96:37:53:eb:c5:1c:44:46:a0:c4:32:c9:df:cd:6c:
         95:b0:0b:2f:c1:f4:34:0c:0f:af:e2:d8:4c:a7:79:a2:01:fa:
         1e:1d:34:0e:62:67:80:f8:54:a7:21:50:aa:01:11:1a:65:dd:
         9c:e2:b5:17:64:31:e4:39:f8:32:1b:67:c1:78:cf:10:1d:f7:
         c9:0c:22:54:12:4e:e9:fd:54:3d:46:2f:c2:97:53:57:ce:60:
         42:5b:f0:1f:f7:4f:41:dd:47:59:fa:dc:4b:ad:70:33:05:e3:
         1b:30:7c:a7:e0:1f:ed:b9:81:3f:35:10:c7:30:ac:c2:00:a7:
         f3:55:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:35:14 2025 by rpki-client