Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c0d2426-e694-33c7-9fae-c2514083d393.roa
File:                     0c0d2426-e694-33c7-9fae-c2514083d393.roa (raw, json)
Hash identifier:          59pr5yHM5TUPon6JcUBj4pNxhoil4EKk6lIsylYKnCI=
Subject key identifier:   6F:28:0F:C8:7C:69:CB:4F:15:65:F9:4F:AE:69:12:BA:56:B1:63:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F71535EBCFFC3856CF093280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c0d2426-e694-33c7-9fae-c2514083d393.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.97.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:35:eb:cf:fc:38:56:cf:09:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=36f6a8ca-8327-41c5-b894-621d04b98897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8a:dc:1e:93:b2:25:37:d7:75:2e:83:e6:d8:
                    65:c5:b0:7a:68:7b:dd:5c:91:83:6f:1c:59:c0:ad:
                    e7:ee:85:04:bf:45:56:62:73:07:17:1f:8a:e4:1f:
                    31:28:bc:b4:49:a0:67:5a:17:d7:09:83:0d:45:81:
                    94:f1:e3:aa:18:de:d1:46:14:13:fd:f8:84:02:95:
                    79:98:7d:4d:66:09:4d:af:98:a0:a6:c4:bf:9a:a8:
                    ea:28:8d:ae:42:3c:5c:cc:78:0a:73:fa:f4:44:55:
                    fb:ce:aa:90:76:34:dd:74:66:eb:2b:1b:35:67:6f:
                    a0:8f:5f:ca:86:09:9b:d2:13:df:c7:a3:e3:16:d5:
                    87:fe:05:4a:e4:99:94:46:f9:27:c4:bb:b7:22:5d:
                    98:dd:55:d8:41:cf:84:d0:b0:84:e5:b3:4a:cd:05:
                    17:db:14:2b:4d:e5:1e:2d:88:6f:3b:23:52:7c:1b:
                    a3:7c:0c:cb:bf:cd:fa:30:77:31:52:be:c5:89:fd:
                    26:e6:53:16:b1:e7:a6:59:3d:5e:c9:57:a2:c6:e3:
                    26:a7:7f:82:dd:22:51:49:26:d4:6b:db:a5:95:6d:
                    49:39:1c:f3:27:74:2b:2d:1e:74:13:cb:df:d5:ab:
                    a3:b4:b3:23:6a:00:9d:96:86:98:34:19:ef:ea:1e:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:0F:C8:7C:69:CB:4F:15:65:F9:4F:AE:69:12:BA:56:B1:63:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c0d2426-e694-33c7-9fae-c2514083d393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:db:c3:09:cf:20:3e:ad:be:59:ed:af:47:6f:b4:47:fb:
         e3:38:43:0e:97:c7:a2:d6:7e:e2:42:52:e2:b4:a9:fd:06:67:
         7c:b3:19:5e:60:d5:0c:0b:04:55:4f:87:17:55:7f:fc:2c:be:
         b8:21:a9:fb:0f:f1:f0:d5:14:3d:c4:a7:f6:b4:0c:25:ba:36:
         fa:d4:da:23:b4:1d:86:ce:9f:03:d0:17:8c:b8:c6:58:cb:1e:
         f0:2c:3a:03:ce:76:54:dd:80:fd:d1:97:d2:73:22:a6:ac:82:
         9c:f8:9a:3f:68:af:6c:1c:15:6e:ec:91:a3:1f:a6:ed:18:7e:
         be:d3:17:f0:06:d2:4f:07:fb:d2:67:23:cd:c6:02:1d:14:d2:
         d4:90:07:34:b8:5b:11:f6:4b:16:dc:93:3e:14:c0:59:e8:82:
         d6:b8:33:13:a2:e5:c5:3b:da:e2:d9:9e:1c:8d:30:e0:0e:21:
         01:0a:2a:a8:07:e7:f8:66:c7:8e:d5:3f:d1:b4:c5:0d:a2:d1:
         12:d9:dc:54:94:d4:c4:50:e3:13:95:49:f8:6d:d3:e2:3f:11:
         ed:cf:73:af:f5:bf:7d:5c:0b:fd:94:f1:93:ce:c2:88:68:69:
         e4:f2:a0:ae:2f:f5:84:15:c3:06:7f:e1:f1:6e:0d:85:91:d0:
         1b:1a:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:55:27 2025 by rpki-client