Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa
File:                     2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa (raw, json)
Hash identifier:          ImR0olfv+nq38QmZ6IEL8/RAUrsH3DiCihfwy+WCh/4=
Subject key identifier:   CE:E6:30:0B:CD:E7:03:5C:1C:61:14:E0:39:CC:BD:00:98:9E:10:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F7153532F60F789A67290300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.96.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:35:32:f6:0f:78:9a:67:29:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b021158e-7d54-4e73-ac7d-3b4d97498b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:79:9e:6e:f1:b4:8c:38:d9:f1:5f:3b:b6:4b:
                    4f:e5:30:99:c3:49:f0:38:90:1f:03:5c:79:82:e4:
                    9b:8b:89:ec:f8:c4:06:d6:16:f5:53:01:14:3f:5a:
                    bb:e8:e4:0d:2e:1d:a6:39:6c:ad:af:91:4c:a0:84:
                    99:ac:96:7d:0a:65:a1:4b:56:67:e9:59:73:ac:3b:
                    5c:94:cd:9f:46:3a:cd:35:50:dc:e5:12:25:ce:3c:
                    50:08:9f:34:ac:63:db:2e:1c:74:68:cf:6d:aa:0a:
                    59:ee:ad:91:63:7d:ae:a9:cf:7d:2e:f6:f8:c3:37:
                    b1:49:61:e3:3e:df:fe:3a:de:0d:df:73:e2:9b:c6:
                    3d:2e:de:a0:1e:cd:74:a4:47:20:59:c1:0f:b1:c7:
                    53:92:9d:32:93:43:dc:cd:79:0b:65:96:d3:44:cf:
                    61:36:cf:91:fb:89:2e:18:28:38:02:da:89:61:6c:
                    a5:35:25:85:44:fd:b1:f4:31:a0:e0:21:6f:55:e7:
                    ce:6b:3f:04:aa:51:75:d9:6c:5b:23:67:10:e4:a8:
                    eb:06:c0:ed:54:14:05:54:f9:ee:e5:9c:28:aa:85:
                    d4:6f:cc:d0:d4:6d:5a:2e:e4:24:54:d0:9c:86:e5:
                    e1:a0:d6:fe:1a:6a:95:45:dc:91:9e:2e:be:80:98:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:30:0B:CD:E7:03:5C:1C:61:14:E0:39:CC:BD:00:98:9E:10:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:ec:fc:f6:9b:e6:9d:60:df:c1:e9:77:9d:82:4a:49:dc:
         3d:3b:54:1c:b7:7a:c5:89:93:5e:d2:67:74:84:4a:6b:52:45:
         c7:ea:05:db:14:2c:65:19:49:71:b5:03:a8:17:b0:04:81:6c:
         ba:29:e2:e0:e3:aa:2a:29:99:9d:23:05:8b:fc:9e:84:a1:fa:
         88:35:01:24:b2:f7:74:41:79:79:ba:00:2c:cd:a6:33:0d:2b:
         4b:11:b9:82:e2:79:6f:31:db:93:e6:51:dd:3c:4f:2e:47:d5:
         5b:6a:b0:5b:b6:1e:9f:90:52:2e:4b:40:40:54:44:c5:7f:fc:
         a1:1f:4d:03:59:fd:e1:b8:3e:bc:fb:fc:dd:86:ed:66:37:38:
         c2:58:02:af:e1:f3:3d:5e:55:8f:1f:a7:16:35:b8:01:cb:b0:
         3e:46:fe:1e:97:44:fd:94:e5:a6:ea:fb:76:bf:85:2c:cb:03:
         64:55:99:87:7e:76:ca:66:a3:17:87:b3:18:fa:cf:c1:19:5a:
         00:cb:31:46:9e:9c:4a:20:48:29:12:1c:37:85:45:a6:eb:99:
         3c:e1:c5:7e:99:7c:2b:ca:66:b8:f6:c9:55:c5:22:e9:a2:d1:
         ac:7f:be:26:44:13:5b:5e:bd:e2:27:f3:e8:4d:79:3b:ab:ed:
         56:69:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:51:16 2025 by rpki-client