Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd19883-748b-373c-88fc-81d9e15ca2a7.roa
File:                     8bd19883-748b-373c-88fc-81d9e15ca2a7.roa (raw, json)
Hash identifier:          2n3quemCX6hXLQVEUdRUoqqeRhNHrs2XcEzfl2GdMU0=
Subject key identifier:   AF:3D:5A:2B:FD:97:4B:13:61:46:96:54:1B:97:2B:FC:B5:C6:FE:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB005A641C7C957E14280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd19883-748b-373c-88fc-81d9e15ca2a7.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.97.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b0:05:a6:41:c7:c9:57:e1:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=346677f1-f649-4cf0-b791-249dfecce2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:16:c7:3f:0d:a8:85:2e:0f:cf:4e:d1:10:
                    11:b8:c4:ff:b0:d1:13:ec:10:4e:c8:5c:a8:db:d5:
                    39:6c:b8:6c:16:cb:78:cc:02:13:51:d1:77:e4:db:
                    52:cb:f4:07:98:fd:1b:1b:05:bb:38:1c:c4:ee:a8:
                    2f:58:1c:c8:ab:a3:8c:5e:20:a9:31:98:00:a8:ed:
                    76:72:b0:27:21:44:ac:76:23:35:c3:34:7b:a5:f5:
                    aa:f4:94:1d:9f:8d:f1:8a:41:53:cb:f2:a0:30:8a:
                    d2:0c:b9:fe:f4:60:60:fc:d8:9c:f5:a9:b9:64:bc:
                    e4:f1:75:74:75:67:6e:3f:c4:81:d5:e6:30:44:e3:
                    58:66:51:71:ab:e2:1c:2d:9e:7a:86:c2:fd:dd:03:
                    26:09:8b:24:5b:c5:7d:eb:60:b2:02:8f:00:23:79:
                    b3:ea:0c:fc:d7:11:4d:61:d0:67:13:73:d5:74:9a:
                    fd:90:42:d0:73:ef:51:45:0f:e3:0c:60:a3:e5:ec:
                    fa:bf:e3:4b:76:7f:3c:49:11:89:fe:1f:f8:0d:38:
                    92:2c:fc:4d:72:4d:5c:0d:0e:1d:6a:c2:a5:df:c0:
                    0f:32:84:b2:4f:f1:fb:b8:eb:59:83:a9:e8:0a:52:
                    6a:53:76:79:8f:43:2f:b1:48:ba:7c:48:26:a9:a8:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:5A:2B:FD:97:4B:13:61:46:96:54:1B:97:2B:FC:B5:C6:FE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd19883-748b-373c-88fc-81d9e15ca2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:7a:38:4f:cf:86:fe:1e:ca:2c:43:34:08:ce:60:1e:d0:
         bb:fd:dd:a0:65:23:4c:a9:0b:0f:6a:aa:dd:33:bb:0e:58:21:
         3b:04:70:54:e5:47:b2:96:c3:ae:92:5f:c1:49:e3:df:af:a8:
         33:68:0e:05:eb:80:db:cf:90:26:39:66:3c:4b:c7:77:d6:45:
         98:5c:d5:70:c3:77:6a:8f:7b:af:f1:1f:bb:28:69:29:03:44:
         46:0b:35:b5:36:92:9d:d3:25:b3:76:61:a7:d9:e8:db:22:d5:
         14:90:c5:da:3e:c8:cf:97:6b:30:ee:57:d5:89:b4:b7:b5:4a:
         da:ea:99:ca:2b:87:75:22:99:19:ef:b0:2d:11:25:b2:2b:ee:
         73:0d:d4:d9:65:48:c2:ab:a8:e0:aa:c1:b0:4f:ff:2c:e9:09:
         4a:84:27:60:d5:26:1f:66:c1:aa:a3:d1:33:4e:2f:14:6f:2c:
         1d:1b:6a:a5:ca:cf:2c:02:06:cc:71:b5:3c:d3:6c:ab:96:94:
         53:ee:48:7c:fb:c6:6f:91:37:ce:d9:2e:fe:3f:12:30:7b:88:
         b0:97:b2:71:49:89:f8:85:f8:a9:2c:94:7d:05:69:54:20:7a:
         9c:b0:2b:13:f0:f5:4b:5e:0e:a1:a2:b1:b9:a4:c3:23:1c:e6:
         0c:16:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:25:21 2025 by rpki-client