Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc6d5552-1f35-36f7-a222-f47492144699.roa
File:                     cc6d5552-1f35-36f7-a222-f47492144699.roa (raw, json)
Hash identifier:          brTBqKR4a9pUvyMcHG88sh3nyP3SCcSnwX6lmCiU0dw=
Subject key identifier:   13:13:4C:D7:8F:43:42:E0:8A:A9:AF:06:66:8E:6C:23:03:FC:20:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FE09F3F80DF15DD595A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc6d5552-1f35-36f7-a222-f47492144699.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        173.72.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e0:9f:3f:80:df:15:dd:59:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=f7cacf09-ecc9-42be-ac7f-0e00df134219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:1d:5d:3a:03:1c:bc:b8:1a:79:b8:35:f1:
                    96:7e:ec:a3:30:57:6a:f2:20:cd:f2:95:06:3a:81:
                    28:c1:e8:0e:5f:e2:48:fa:4b:38:36:cc:77:05:f1:
                    08:88:9f:9e:31:86:a1:e3:ff:87:ea:65:00:65:a3:
                    ad:3d:77:84:82:f1:a1:2d:47:51:5d:38:07:c7:e7:
                    f9:32:2b:b1:ce:3e:eb:90:fc:d2:fc:13:7a:68:d1:
                    13:78:aa:ef:99:0d:b9:ba:c5:5f:e4:b9:71:d3:a1:
                    b4:8a:2e:6f:6d:fb:77:56:b6:45:0f:d5:a1:e8:7a:
                    2f:a1:29:1b:f8:8b:d7:55:65:6d:f5:cd:75:f3:70:
                    fa:67:01:bb:af:9f:1a:8d:ed:1a:8c:1c:57:77:06:
                    01:73:b6:e6:c8:cb:7c:ff:4b:c3:d0:61:61:61:f8:
                    78:99:fe:fa:cd:04:69:97:c1:28:bb:54:96:1d:f8:
                    70:01:89:2d:ca:35:9c:cf:1c:f7:a2:fa:9d:3e:66:
                    74:0d:62:2a:98:6d:ee:45:ec:cd:59:35:e8:16:6a:
                    5f:da:f4:53:ab:99:b0:4b:45:b9:9b:0e:b4:2b:dd:
                    1e:07:be:67:ce:71:a2:fc:da:5d:65:c3:1a:af:c9:
                    a4:4a:87:92:8b:5d:fd:6d:ad:35:5e:6f:a0:4d:4f:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:13:4C:D7:8F:43:42:E0:8A:A9:AF:06:66:8E:6C:23:03:FC:20:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc6d5552-1f35-36f7-a222-f47492144699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.72.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:98:75:42:02:18:b8:86:12:56:f9:48:4a:b2:5f:db:e6:
         3f:8f:ce:a7:19:8c:9c:0a:82:a4:f7:5b:b6:04:c2:c2:8a:7b:
         e9:6f:76:b9:e3:a3:49:c5:17:55:34:5c:b7:d2:5d:a7:98:2d:
         64:31:bb:f5:f0:03:e2:cd:3e:06:38:89:7c:0d:03:cc:25:92:
         41:01:14:ce:38:d2:a5:c3:d1:81:d4:c4:1e:3d:53:d6:10:27:
         b0:d3:e9:06:c4:36:e0:a2:f1:49:f9:ab:21:b4:f2:6b:c0:40:
         8e:1c:7c:fe:43:1b:c2:ec:ea:d7:cf:c5:d1:e2:cd:51:51:65:
         f5:5e:3b:1e:0d:04:a2:e8:9a:74:44:a6:f5:96:49:2b:c6:25:
         80:02:6f:c6:79:64:a9:14:41:3b:52:bc:13:8a:a4:b2:93:99:
         c5:bc:9a:3c:10:d2:56:7d:b2:9c:c9:ad:8f:52:7f:12:a0:3f:
         ec:38:ba:ad:7d:82:b2:f5:ff:98:af:bb:73:2d:80:18:c2:47:
         5f:50:92:dc:45:a2:cf:3f:bb:66:81:cc:ea:7b:bc:b5:24:8f:
         c3:2b:e7:b4:7d:72:2d:57:af:bf:d1:e1:b7:e8:d4:98:18:a4:
         b4:63:14:03:6f:bc:ec:95:8d:09:7e:0e:61:8f:71:db:5b:b2:
         22:0e:2f:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+CfP4DfFd1ZWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZjdjYWNmMDktZWNjOS00MmJlLWFjN2YtMGUwMGRmMTM0MjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwdXToDHLy4Gnm4NfGWfuyjMFdq8iDN8pUG
OoEowegOX+JI+ks4Nsx3BfEIiJ+eMYah4/+H6mUAZaOtPXeEgvGhLUdRXTgHx+f5
Miuxzj7rkPzS/BN6aNETeKrvmQ25usVf5Llx06G0ii5vbft3VrZFD9Wh6HovoSkb
+IvXVWVt9c1183D6ZwG7r58aje0ajBxXdwYBc7bmyMt8/0vD0GFhYfh4mf76zQRp
l8Eou1SWHfhwAYktyjWczxz3ovqdPmZ0DWIqmG3uRezNWTXoFmpf2vRTq5mwS0W5
mw60K90eB75nznGi/NpdZcMar8mkSoeSi139ba01Xm+gTU/wEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMTTNePQ0LgiqmvBmaObCMD/CAkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2M2ZDU1NTItMWYzNS0z
NmY3LWEyMjItZjQ3NDkyMTQ0Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrUiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKfYmHVCAhi4hhJW+UhKsl/b5j+PzqcZjJwKgqT3W7YEwsKKe+lvdrnj
o0nFF1U0XLfSXaeYLWQxu/XwA+LNPgY4iXwNA8wlkkEBFM440qXD0YHUxB49U9YQ
J7DT6QbENuCi8Un5qyG08mvAQI4cfP5DG8Ls6tfPxdHizVFRZfVeOx4NBKLomnRE
pvWWSSvGJYACb8Z5ZKkUQTtSvBOKpLKTmcW8mjwQ0lZ9spzJrY9SfxKgP+w4uq19
grL1/5ivu3MtgBjCR19QktxFos8/u2aBzOp7vLUkj8Mr57R9ci1Xr7/R4bfo1JgY
pLRjFANvvOyVjQl+DmGPcdtbsiIOL4E=
-----END CERTIFICATE-----
Generated at Tue Jun 17 19:54:59 2025 by rpki-client