Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa
File:                     efbab09d-fb3d-3770-acbe-e66c34412d53.roa (raw, json)
Hash identifier:          9iTErdGslZ7D9FkV5pWjoc6fuf+BYQvginjtmq0O2hw=
Subject key identifier:   EC:FF:94:DF:7F:89:73:37:DC:7F:76:7F:06:03:09:12:D7:2C:83:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AAF852B436D2867620580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:af:85:2b:43:6d:28:67:62:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=f9392545-76de-495b-bb1b-b28b954c4191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:0b:66:f6:24:90:06:7a:62:74:f8:4c:5a:
                    22:f4:55:56:00:21:df:21:e2:e8:e0:34:0e:ce:a6:
                    c1:a2:04:c8:3d:cb:10:f8:71:22:17:4c:95:df:f3:
                    35:ef:d4:5f:d8:11:e4:f5:8c:cc:da:b3:cd:64:79:
                    f3:bb:7c:9a:dd:48:30:5b:20:18:25:e5:33:6b:17:
                    9a:2c:3b:a9:19:bd:89:6e:5e:38:39:bc:eb:26:9f:
                    f3:71:82:85:86:d9:93:98:b2:63:29:bf:d4:b9:93:
                    7d:52:37:2b:b4:a7:fb:dd:97:31:9b:38:99:3d:0d:
                    59:ce:5c:41:67:c0:9e:28:09:26:33:da:74:53:bd:
                    9b:7e:3c:76:b2:79:14:60:e0:85:80:9a:cc:0d:49:
                    33:9a:8b:70:64:a3:80:6e:c2:40:3a:49:8a:ef:01:
                    a0:00:80:15:37:9e:55:2b:48:be:5f:73:76:00:83:
                    3d:db:e7:1c:af:2f:27:5e:10:f2:21:8f:71:c1:3f:
                    ae:cc:af:a0:34:c0:a8:7f:cd:f9:5a:24:eb:c5:f2:
                    a9:28:3e:d7:b2:84:d3:08:56:36:57:49:b3:32:53:
                    b5:37:c7:57:c2:bd:4c:48:fc:0a:ae:89:49:9d:86:
                    91:e9:7a:d5:f6:95:ed:04:15:a2:0f:b2:54:1d:84:
                    fc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:94:DF:7F:89:73:37:DC:7F:76:7F:06:03:09:12:D7:2C:83:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:7f:05:cb:43:d6:fb:67:19:f5:cb:f2:a6:7f:b2:62:60:
         cf:6b:6f:17:5e:79:4a:97:b9:b8:7e:59:24:76:ce:a1:4e:ec:
         ef:f1:f7:0f:cf:ab:ce:3f:a3:4c:31:97:31:63:e3:f1:31:07:
         00:e7:50:b0:ed:0b:31:77:28:70:f1:22:c5:04:a1:a8:75:ea:
         98:a3:3c:53:06:2d:18:fd:fb:f2:7f:be:51:29:8f:c7:a6:20:
         2b:a0:8a:0a:56:b3:f7:1f:f1:35:22:2c:ff:91:de:3a:b5:ac:
         4f:48:0d:8f:12:0c:ca:cf:14:0a:d2:3e:3c:fb:74:a9:dd:91:
         51:f9:14:e6:31:2f:19:db:33:41:dc:be:a2:3d:83:d9:42:cd:
         f6:de:df:a3:e8:1f:25:31:fc:69:fb:10:cc:f9:f5:5e:b9:fd:
         fb:87:3e:60:25:0d:3a:1f:94:90:05:22:91:b6:27:90:c4:13:
         5b:de:7a:77:e7:4e:52:ab:0f:1e:6c:4f:3c:7b:7a:ec:27:ae:
         ac:a3:7c:ad:f9:b9:39:0b:87:05:53:49:75:72:88:e2:d5:14:
         79:4a:24:15:d3:f8:ff:8c:4c:97:6a:a0:67:bb:c2:91:a7:a4:
         f0:70:24:6a:86:70:4a:e7:50:2f:63:10:84:3e:37:17:78:22:
         9b:6b:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:23 2025 by rpki-client