Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e6c6a60-f7fb-3f7a-a7d4-55a9c182ac1c.roa
File:                     7e6c6a60-f7fb-3f7a-a7d4-55a9c182ac1c.roa (raw, json)
Hash identifier:          3orKkdOOX/jGmsIPvMpJY2pvJjm6Uiinllq1ekpElUM=
Subject key identifier:   52:32:44:30:19:0E:FD:EE:21:CD:7F:90:30:68:C4:58:EF:DE:19:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB4319090155C2E109E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e6c6a60-f7fb-3f7a-a7d4-55a9c182ac1c.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.107.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b4:31:90:90:15:5c:2e:10:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=236ed2a3-5674-467d-bc4d-253e3cb33f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:f9:c8:31:8a:02:11:ab:80:0c:a0:35:91:
                    42:c5:d4:c4:be:6b:89:d4:bd:6f:e2:1f:bd:8d:bb:
                    40:34:7c:23:37:37:b4:20:f7:cd:18:ef:31:96:21:
                    53:79:e3:b1:07:f2:71:01:23:af:90:21:ef:f5:65:
                    d9:14:7d:67:a2:4f:33:b0:69:da:dc:1f:3a:4a:65:
                    a1:52:59:32:57:85:58:5c:38:8d:42:4e:b0:87:6e:
                    52:b1:4d:f3:b1:5f:64:9e:39:7f:13:70:76:ab:fd:
                    87:53:9c:7f:d2:04:68:b6:40:03:9a:fd:0d:d5:0b:
                    00:af:fa:5a:8a:d3:ec:77:b0:89:e5:8e:fe:b6:c1:
                    77:98:80:2a:d6:22:d3:77:e5:6c:d4:2d:b1:f1:6e:
                    ca:47:49:8f:93:0d:f9:7c:bf:f7:59:24:11:3b:93:
                    11:71:f0:fa:b9:7b:02:f8:bf:91:14:4a:e1:e8:2f:
                    65:4e:e0:17:99:b2:dd:20:57:1d:80:99:78:e4:6d:
                    2d:39:fd:bd:e7:4d:d0:8d:61:15:5c:86:0b:59:a7:
                    e7:91:ef:23:ac:30:79:99:8e:39:6e:8b:8b:a5:4a:
                    3f:20:ce:85:1d:8e:dd:c2:5d:04:19:76:cd:d5:86:
                    b2:90:48:88:81:37:01:6d:65:eb:25:28:26:ec:b1:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:44:30:19:0E:FD:EE:21:CD:7F:90:30:68:C4:58:EF:DE:19:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e6c6a60-f7fb-3f7a-a7d4-55a9c182ac1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:47:f9:d2:94:2c:44:5b:62:99:ae:95:92:d6:23:ff:b8:c8:
         95:80:73:4b:29:66:13:33:d3:b0:62:dd:bf:9f:c0:62:d8:a8:
         59:98:ac:66:31:db:f3:18:bd:40:3a:44:b4:b5:fe:75:df:2a:
         e5:53:cd:d8:44:10:b7:d2:87:28:7e:95:15:dc:b9:6c:a2:bf:
         4e:f1:91:e9:29:7c:60:32:5d:29:46:3a:e1:eb:f2:0d:3d:f7:
         38:e6:1c:92:32:98:1c:0a:28:d7:d1:7d:d7:07:98:18:20:96:
         78:21:3b:94:c1:82:06:57:b6:6c:a8:7d:bf:b0:6c:4c:af:80:
         df:4a:36:12:1c:50:5e:34:d9:a7:e7:b9:fa:de:43:5c:b0:8c:
         c4:21:bf:40:96:e6:cc:46:9a:fd:02:55:86:ee:16:c8:e6:8f:
         ae:0a:9c:05:70:78:e7:66:a9:9a:4f:6b:45:9e:61:a5:8d:34:
         cd:47:05:1c:07:e7:6c:fe:eb:32:84:58:bf:94:1e:51:51:df:
         21:11:07:1c:c6:43:7d:8b:1f:78:cd:a4:fc:80:7a:6a:21:a5:
         cc:f5:01:ef:fc:0a:47:aa:29:43:d2:3e:c4:a9:da:ef:88:33:
         fd:14:9a:04:fb:1c:30:a7:04:ce:10:f7:6f:05:3e:bb:99:ba:
         1c:35:74:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKrQxkJAVXC4QnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
MjM2ZWQyYTMtNTY3NC00NjdkLWJjNGQtMjUzZTNjYjMzZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR35yDGKAhGrgAygNZFCxdTEvmuJ1L1v4h+9
jbtANHwjNze0IPfNGO8xliFTeeOxB/JxASOvkCHv9WXZFH1nok8zsGna3B86SmWh
UlkyV4VYXDiNQk6wh25SsU3zsV9knjl/E3B2q/2HU5x/0gRotkADmv0N1QsAr/pa
itPsd7CJ5Y7+tsF3mIAq1iLTd+Vs1C2x8W7KR0mPkw35fL/3WSQRO5MRcfD6uXsC
+L+RFErh6C9lTuAXmbLdIFcdgJl45G0tOf29503QjWEVXIYLWafnke8jrDB5mY45
bouLpUo/IM6FHY7dwl0EGXbN1YaykEiIgTcBbWXrJSgm7LEpowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIyRDAZDv3uIc1/kDBoxFjv3hk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2U2YzZhNjAtZjdmYi0z
ZjdhLWE3ZDQtNTVhOWMxODJhYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGu4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZH+dKULERbYpmulZLWI/+4yJWAc0spZhMz07Bi3b+fwGLYqFmYrGYx
2/MYvUA6RLS1/nXfKuVTzdhEELfShyh+lRXcuWyiv07xkekpfGAyXSlGOuHr8g09
9zjmHJIymBwKKNfRfdcHmBgglnghO5TBggZXtmyofb+wbEyvgN9KNhIcUF402afn
ufreQ1ywjMQhv0CW5sxGmv0CVYbuFsjmj64KnAVweOdmqZpPa0WeYaWNNM1HBRwH
52z+6zKEWL+UHlFR3yERBxzGQ32LH3jNpPyAemohpcz1Ae/8CkeqKUPSPsSp2u+I
M/0UmgT7HDCnBM4Q928FPruZuhw1dEs=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:33:26 2025 by rpki-client