Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f0e483-8d3a-35fe-997b-c63ee743ba72.roa
File:                     16f0e483-8d3a-35fe-997b-c63ee743ba72.roa (raw, json)
Hash identifier:          zX97XPr9EJ71Ef3NIc0vun8LBNVQoO0YEuwwQ6us7q0=
Subject key identifier:   A7:D3:20:D6:60:BB:28:D7:1A:3B:54:7C:D2:7F:8A:E0:A0:67:51:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB14A543418F7445380E4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f0e483-8d3a-35fe-997b-c63ee743ba72.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.106.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b1:4a:54:34:18:f7:44:53:80:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=fa5476e8-ffb0-4bfb-99a7-3b5080e97f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:32:96:fd:88:40:9b:08:d8:ae:69:3e:00:
                    80:73:6e:40:27:14:73:4d:f0:1c:10:09:13:75:4b:
                    87:b2:15:63:14:b9:ad:bd:32:c0:b5:61:2f:19:e5:
                    53:0e:af:95:36:05:c3:be:c5:c2:df:02:f6:53:33:
                    fe:c9:8a:bf:52:12:c0:42:f1:8a:32:ea:58:09:28:
                    6c:cf:38:b7:4a:ad:89:77:17:fb:89:23:5a:84:7c:
                    5b:34:b7:24:99:32:56:e0:69:ff:c4:7b:08:d2:3d:
                    85:e2:cb:f7:2f:c3:3f:da:2a:01:53:3b:3c:96:3a:
                    41:ed:92:6e:d6:fe:01:90:d7:e6:cb:17:57:0d:ca:
                    0a:f7:c0:85:95:b4:07:b3:3f:5a:a3:33:09:74:e4:
                    d9:8c:f8:06:39:df:c0:6c:cd:27:f3:cf:dd:4a:df:
                    85:88:d3:b9:b2:09:37:ae:e7:fc:97:91:5e:4f:f3:
                    8f:a3:f8:e6:33:72:ed:20:7f:1b:1b:68:2f:c1:4b:
                    cd:3a:5f:83:cc:12:eb:0e:fc:cf:59:ab:49:c7:e8:
                    d7:d8:ae:ca:5f:1f:40:51:40:01:fb:83:a5:7b:03:
                    98:64:77:c2:7e:1f:34:d5:e1:01:41:33:1e:68:6c:
                    5d:26:5e:0e:bb:05:ee:b2:7c:93:e7:22:ce:16:0c:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:20:D6:60:BB:28:D7:1A:3B:54:7C:D2:7F:8A:E0:A0:67:51:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f0e483-8d3a-35fe-997b-c63ee743ba72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:82:7f:e9:94:59:8b:20:dd:af:d9:ee:cc:3f:85:51:a5:89:
         84:85:ea:38:82:78:96:ba:2f:05:d2:40:f4:6c:2f:60:32:69:
         58:e2:61:bb:b9:b9:ba:50:be:03:ec:5a:7c:2c:ed:92:07:e7:
         7c:28:ef:da:29:b8:08:a2:e9:52:d8:5e:d9:07:82:69:c9:5d:
         a2:86:94:b3:4a:25:dd:24:f3:ac:88:be:66:9c:25:86:e7:b3:
         89:df:88:d6:9f:c7:f6:fb:64:ef:7e:99:d2:2d:20:11:9e:18:
         90:c8:5f:1a:b6:eb:00:c7:1f:43:22:23:d0:24:fa:11:b8:2f:
         c6:36:c3:90:e2:6d:35:ab:d3:e8:91:4d:05:70:1f:c3:c9:59:
         42:34:e5:5b:92:a7:4a:d4:a6:92:53:da:2e:d9:e7:a4:32:82:
         ed:ad:36:2d:d8:73:1a:ca:0f:66:69:97:60:cf:bc:c4:0b:8a:
         dc:2e:87:c5:bf:3a:11:d0:38:03:3a:0e:5e:6f:c6:d9:f6:c1:
         f9:74:42:99:67:3d:f0:50:ab:fa:36:51:35:97:f8:86:be:b3:
         d3:51:f7:37:78:f7:b5:e0:31:31:f5:bf:0e:3e:76:d7:09:59:
         eb:aa:62:72:ed:61:b2:64:09:aa:47:bb:7a:06:bc:2e:a9:ea:
         6f:ac:15:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrFKVDQY90RTgOQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
ZmE1NDc2ZTgtZmZiMC00YmZiLTk5YTctM2I1MDgwZTk3ZjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcEylv2IQJsI2K5pPgCAc25AJxRzTfAcEAkT
dUuHshVjFLmtvTLAtWEvGeVTDq+VNgXDvsXC3wL2UzP+yYq/UhLAQvGKMupYCShs
zzi3Sq2Jdxf7iSNahHxbNLckmTJW4Gn/xHsI0j2F4sv3L8M/2ioBUzs8ljpB7ZJu
1v4BkNfmyxdXDcoK98CFlbQHsz9aozMJdOTZjPgGOd/AbM0n88/dSt+FiNO5sgk3
ruf8l5FeT/OPo/jmM3LtIH8bG2gvwUvNOl+DzBLrDvzPWatJx+jX2K7KXx9AUUAB
+4OlewOYZHfCfh801eEBQTMeaGxdJl4OuwXusnyT5yLOFgzWNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfTINZguyjXGjtUfNJ/iuCgZ1E+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTZmMGU0ODMtOGQzYS0z
NWZlLTk5N2ItYzYzZWU3NDNiYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGq0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASCf+mUWYsg3a/Z7sw/hVGliYSF6jiCeJa6LwXSQPRsL2AyaVjiYbu5
ubpQvgPsWnws7ZIH53wo79opuAii6VLYXtkHgmnJXaKGlLNKJd0k86yIvmacJYbn
s4nfiNafx/b7ZO9+mdItIBGeGJDIXxq26wDHH0MiI9Ak+hG4L8Y2w5DibTWr0+iR
TQVwH8PJWUI05VuSp0rUppJT2i7Z56Qygu2tNi3YcxrKD2Zpl2DPvMQLitwuh8W/
OhHQOAM6Dl5vxtn2wfl0QplnPfBQq/o2UTWX+Ia+s9NR9zd497XgMTH1vw4+dtcJ
WeuqYnLtYbJkCapHu3oGvC6p6m+sFdQ=
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:51:07 2025 by rpki-client