Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394284a-b3ba-3998-a15d-78fee04c02bc.roa
File:                     d394284a-b3ba-3998-a15d-78fee04c02bc.roa (raw, json)
Hash identifier:          EkGB/lsrciyuKF3jaTRPrmCe7x8OybPZWbANwhqfk20=
Subject key identifier:   E8:D1:03:5F:96:88:62:42:60:DA:5E:FC:64:4D:5B:15:53:61:6A:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EA85270E9BF0C705802B3B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394284a-b3ba-3998-a15d-78fee04c02bc.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     701
IP address blocks:        72.82.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:27:0e:9b:f0:c7:05:80:2b:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=2a2f2718-6733-422d-878c-c000ffc4221d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:c7:c8:98:2a:7d:e1:f1:77:a3:86:b3:d0:
                    c7:f6:2b:52:94:00:57:d5:d1:5b:f2:fb:18:9f:75:
                    b0:af:1b:57:4b:7e:22:60:a7:97:a4:82:25:af:cc:
                    1e:69:4e:d5:86:a9:c0:b6:ab:84:e0:b1:4c:32:18:
                    31:51:4a:87:0d:6b:e3:07:b1:70:8d:0c:fb:2a:1e:
                    71:53:12:77:da:81:48:48:24:af:97:a3:9f:8c:b5:
                    9c:84:73:d8:5f:80:4f:79:70:b9:36:08:ad:13:30:
                    26:89:1e:9d:2c:12:9c:93:e5:ec:1b:f2:fd:78:af:
                    03:6b:7e:b1:be:1d:e8:13:bb:f3:96:6a:bf:6d:71:
                    e1:be:10:55:93:7a:de:e2:a9:5e:34:08:64:d8:82:
                    dc:d1:d8:cc:0c:b0:73:48:30:34:09:90:ac:1d:17:
                    24:99:c1:8e:b7:35:ed:55:a3:d4:32:75:6f:a9:7d:
                    ce:bd:55:5b:49:c9:39:5a:8d:2a:89:29:9a:8a:13:
                    7c:a7:d6:8d:21:e7:da:09:c2:cf:b4:af:17:b5:18:
                    86:83:0e:11:34:72:e6:ae:42:36:07:6a:20:dd:2b:
                    41:12:75:ed:7b:af:fd:6a:9f:e6:7c:79:df:83:9d:
                    9e:0f:33:be:f5:49:c0:3b:18:ea:45:bc:7a:5d:d4:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D1:03:5F:96:88:62:42:60:DA:5E:FC:64:4D:5B:15:53:61:6A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394284a-b3ba-3998-a15d-78fee04c02bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.82.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:ae:db:0f:fc:3c:17:f1:1f:c5:f1:3b:fa:94:cd:e0:dc:
         02:5f:e0:3a:c6:c2:c6:d9:62:85:ee:4e:1b:85:20:eb:8b:32:
         78:c9:62:68:c9:eb:0b:f0:f8:70:a2:77:fa:b5:d9:0b:02:66:
         6d:5a:a4:14:8d:39:7d:79:c1:c5:09:f5:70:bf:e9:92:29:9e:
         94:bf:e6:d8:97:26:db:40:89:a3:b4:0a:ad:b3:f6:95:d5:c5:
         43:49:ba:ae:5b:8d:fb:7d:16:cf:aa:2f:12:37:de:5e:3b:ce:
         80:db:49:f9:ca:7a:4d:40:7b:68:fd:5a:85:f2:15:bc:27:e9:
         52:f9:dc:b5:b5:39:78:f1:0e:02:f2:46:ed:20:9f:1a:d0:fd:
         85:ba:23:6f:60:b0:bf:28:c5:e5:ba:50:c6:46:e3:32:97:be:
         ca:a4:2c:a6:eb:c4:5f:0f:6a:5b:a0:ff:1d:a1:4c:6e:38:13:
         a6:1b:97:3a:b2:13:d2:d1:64:53:e9:ca:47:f7:a0:c0:6f:41:
         e7:6d:a1:4e:c9:15:2d:16:fc:69:64:58:15:a2:f6:86:b1:ac:
         84:d7:06:a9:77:96:64:2a:67:aa:3e:81:b1:14:ab:18:d0:88:
         7e:a3:e9:db:f4:4c:61:aa:bb:f4:74:d4:80:b9:5c:fb:e4:b9:
         2b:72:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:59:09 2025 by rpki-client