Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1edec8f9-d36b-36c6-bafa-7295ac01a6ee.roa
File:                     1edec8f9-d36b-36c6-bafa-7295ac01a6ee.roa (raw, json)
Hash identifier:          cK8NvAeZZpIu0ENOvcgH06NXeYkfaoFKEm6yh+O2qCE=
Subject key identifier:   E4:8B:21:20:5A:F3:E8:E2:85:CE:DC:F7:FD:96:98:E1:95:0B:C4:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2ABC19C9DB7B80CD2D4880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1edec8f9-d36b-36c6-bafa-7295ac01a6ee.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.108.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:bc:19:c9:db:7b:80:cd:2d:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=7fea814f-4b67-488e-bc2d-df3203f3aa0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:5d:85:c7:60:4c:2d:d2:d8:98:82:12:0c:
                    74:e7:ef:a3:61:4f:78:ca:74:df:a9:47:d0:33:25:
                    8d:6a:6e:0c:d9:2d:43:ed:08:b1:e6:ef:64:5c:1a:
                    3a:57:13:19:8b:de:3f:61:a3:5a:3b:00:d3:1f:1c:
                    42:b6:32:b0:37:f3:55:ee:31:72:fc:e1:6b:1e:7d:
                    a5:0a:90:fc:13:dd:e7:fa:41:d6:10:7d:03:88:dd:
                    be:cc:bf:11:8d:02:70:1b:92:14:76:e1:2c:a6:73:
                    99:c2:db:58:21:cc:3d:78:d0:e9:87:21:a0:1d:72:
                    82:2a:e0:b9:4c:e2:93:b4:83:cf:62:10:fc:6b:77:
                    7e:ee:9a:b2:d8:54:6c:b8:75:f3:48:eb:7f:10:56:
                    27:7c:d2:de:99:a3:ad:af:45:1d:80:09:47:ba:ac:
                    d3:26:15:3c:d0:66:90:d1:63:a1:d0:89:66:0b:d5:
                    f9:9f:f3:79:d3:73:05:d4:9e:73:0d:41:b0:bc:f6:
                    1a:12:0d:26:41:3e:fb:45:32:15:f9:e8:3a:54:3d:
                    14:6c:71:7c:38:b7:64:a6:29:85:3f:cf:95:e3:91:
                    d5:cd:d5:7d:f7:a1:51:4f:95:06:f8:3d:b8:cb:2e:
                    9a:c6:a5:8f:bb:a1:ec:60:93:aa:22:a6:7b:9a:65:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8B:21:20:5A:F3:E8:E2:85:CE:DC:F7:FD:96:98:E1:95:0B:C4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1edec8f9-d36b-36c6-bafa-7295ac01a6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:33:c1:60:b2:23:a3:24:32:97:d9:6d:27:8a:0f:f6:75:
         1a:2a:04:f2:f2:95:54:ac:66:7f:8b:d4:81:5a:2e:d5:2b:4d:
         cc:cf:34:e3:d1:15:95:dc:fd:b9:e3:da:ab:b3:90:44:69:90:
         6f:5f:3a:02:b5:66:57:fd:fc:cd:31:b6:fa:e2:64:80:e0:17:
         58:6c:94:eb:9a:a6:e9:46:59:72:1b:50:c6:8f:3f:ca:3f:ea:
         fd:20:ae:44:82:49:c4:9d:d9:d5:c9:3a:77:d3:38:29:66:23:
         37:89:2d:12:d5:6f:09:a3:8d:2b:bd:f3:09:dd:ad:d5:f1:13:
         84:92:0c:3c:3d:f8:9d:da:2c:82:93:b2:06:05:9b:12:8d:ee:
         6d:48:18:2a:46:04:65:78:bd:7f:5c:02:a0:cf:90:8e:41:5b:
         e0:21:0a:30:8f:fb:43:e1:9a:d4:63:7f:44:14:75:38:68:62:
         f0:4b:77:a4:96:aa:a6:04:06:d3:2d:82:ad:8f:ec:fe:0d:be:
         8c:fe:9b:05:c7:d6:9e:dc:f6:c8:01:73:e7:1a:91:ac:08:fe:
         02:e5:de:76:1b:d4:b8:f6:37:d2:ad:3c:95:76:d5:63:9e:0d:
         2f:07:f7:45:75:95:ee:17:d2:63:12:fa:28:70:ef:62:fe:54:
         68:54:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:49:17 2025 by rpki-client