Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d7aec5-0bfd-3427-b7ca-85c9d1547171.roa
File:                     47d7aec5-0bfd-3427-b7ca-85c9d1547171.roa (raw, json)
Hash identifier:          lrHSKZxcxgiCV4CkHMqRQoYxF7MPwnOuUKDhxFnfTMs=
Subject key identifier:   6B:62:B5:C0:B3:C3:1F:D7:31:53:26:AB:6D:2E:73:F6:E4:36:32:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12D8DBEECFC8931A21220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d7aec5-0bfd-3427-b7ca-85c9d1547171.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.97.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2d:8d:be:ec:fc:89:31:a2:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=e2c07274-3249-425e-b4be-c00e86e404f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:f1:0b:0d:19:d9:cf:d2:18:fc:f7:af:85:
                    df:f1:55:8e:59:fe:69:6c:fe:97:1c:91:da:6f:e7:
                    a2:b6:50:57:b9:89:cc:74:e7:91:da:78:77:c1:cd:
                    36:33:6e:1f:74:20:bf:c7:79:92:a9:9c:ed:b1:72:
                    7c:b5:00:09:8a:33:a0:6e:92:6e:9d:5c:de:4b:68:
                    eb:fe:bd:51:e8:09:63:2c:86:d4:87:b9:2e:60:34:
                    7f:4f:c3:a4:ae:30:a4:dd:b6:9c:0e:cf:ec:e8:ac:
                    81:15:40:1e:2e:64:15:2c:06:e0:fa:e0:52:31:27:
                    db:da:0c:2a:32:5a:d4:fe:89:a6:65:ce:bb:cf:f6:
                    55:43:b1:e8:8e:fa:df:b4:6e:86:fa:d3:52:3c:c8:
                    1b:08:0e:02:fa:a7:a8:75:5a:af:2f:eb:cc:34:c4:
                    48:ff:51:91:c2:35:6c:1e:c1:71:c4:04:ac:fb:71:
                    05:bc:66:db:27:e8:ff:b2:3c:43:f8:33:b1:5b:c9:
                    44:08:35:c6:7c:50:07:8d:65:af:a8:9b:4b:4e:05:
                    e4:17:76:67:a7:33:e5:bc:07:88:7a:e8:ed:d6:eb:
                    f8:6d:a8:35:8b:a9:c0:c7:69:6a:76:a9:3a:82:6d:
                    06:19:6d:0b:9c:a7:bd:01:fc:d0:41:11:bf:b1:d9:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:B5:C0:B3:C3:1F:D7:31:53:26:AB:6D:2E:73:F6:E4:36:32:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d7aec5-0bfd-3427-b7ca-85c9d1547171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:29:c2:ad:05:b8:31:7e:50:12:a9:f5:96:97:75:84:c7:
         8e:50:85:e8:ae:34:f1:b1:63:b5:02:4c:eb:75:f6:61:fb:f1:
         fc:11:41:ac:cb:f5:ba:78:41:e7:e4:75:fc:b0:f0:f6:a5:f8:
         11:59:a1:a6:65:16:35:2a:c5:bc:5c:af:0d:f6:a8:d7:42:12:
         8c:e4:7a:00:e8:fe:74:80:1d:21:20:ed:55:94:21:0a:f7:3e:
         2c:ae:8a:8a:25:76:61:0e:8b:0f:6c:d7:52:a7:45:b5:f6:7f:
         a1:9f:76:db:fb:46:8b:21:34:95:86:d5:cb:86:0a:65:cd:b5:
         9b:fe:cd:6d:a0:21:61:18:fd:e8:39:4d:29:6e:b3:a2:53:b0:
         ac:76:cd:c2:0c:2e:d4:8e:3e:52:2c:ee:e6:37:da:b7:91:26:
         8a:0e:dd:bd:37:2c:5e:61:3c:16:e4:6b:b2:3a:53:e1:b6:d4:
         34:97:60:02:6d:f1:fe:71:76:b6:49:08:bd:0b:e0:a9:ae:6a:
         b0:22:c4:0e:38:66:17:e0:70:88:ea:7f:3b:d6:39:62:7c:60:
         0f:3d:82:11:15:1a:1e:dd:a1:5c:fe:3c:b9:10:bc:4a:cb:9a:
         06:d0:72:79:bc:11:c6:e1:cd:a6:05:e9:3f:b9:f9:61:86:90:
         10:9d:31:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0S2Nvuz8iTGiEiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTJjMDcyNzQtMzI0OS00MjVlLWI0YmUtYzAwZTg2ZTQwNGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJTxCw0Z2c/SGPz3r4Xf8VWOWf5pbP6XHJHa
b+eitlBXuYnMdOeR2nh3wc02M24fdCC/x3mSqZztsXJ8tQAJijOgbpJunVzeS2jr
/r1R6AljLIbUh7kuYDR/T8OkrjCk3bacDs/s6KyBFUAeLmQVLAbg+uBSMSfb2gwq
MlrU/ommZc67z/ZVQ7HojvrftG6G+tNSPMgbCA4C+qeodVqvL+vMNMRI/1GRwjVs
HsFxxASs+3EFvGbbJ+j/sjxD+DOxW8lECDXGfFAHjWWvqJtLTgXkF3ZnpzPlvAeI
eujt1uv4bag1i6nAx2lqdqk6gm0GGW0LnKe9AfzQQRG/sdlwcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtitcCzwx/XMVMmq20uc/bkNjINMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDdkN2FlYzUtMGJmZC0z
NDI3LWI3Y2EtODVjOWQxNTQ3MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGFIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbzKcKtBbgxflASqfWWl3WEx45QheiuNPGxY7UCTOt19mH78fwRQazL
9bp4Qefkdfyw8Pal+BFZoaZlFjUqxbxcrw32qNdCEozkegDo/nSAHSEg7VWUIQr3
PiyuiooldmEOiw9s11KnRbX2f6Gfdtv7RoshNJWG1cuGCmXNtZv+zW2gIWEY/eg5
TSlus6JTsKx2zcIMLtSOPlIs7uY32reRJooO3b03LF5hPBbka7I6U+G21DSXYAJt
8f5xdrZJCL0L4KmuarAixA44ZhfgcIjqfzvWOWJ8YA89ghEVGh7doVz+PLkQvErL
mgbQcnm8EcbhzaYF6T+5+WGGkBCdMdY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:53 2025 by rpki-client