Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa
File:                     9616acc1-d051-3148-b53e-b4dbc9a2f093.roa (raw, json)
Hash identifier:          MzDs5qd8g0Iz1bvNyoPPVWdNnHpKuaxWpT16ywUrcFM=
Subject key identifier:   D9:21:D2:54:71:2F:EE:AA:80:6A:94:A4:CE:13:E0:26:91:57:CD:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB2B9E72C5DEECF22B4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.103.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b2:b9:e7:2c:5d:ee:cf:22:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=ac05be14-cd1a-4379-9144-0a37abc10bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:18:e4:8a:7b:11:4b:aa:c6:52:98:dc:ac:e7:
                    24:fb:72:87:d7:53:77:57:af:5f:dd:62:86:fa:a6:
                    f3:97:1e:3d:9f:3f:2f:5b:82:18:bc:87:b8:27:00:
                    3e:0a:3e:92:b1:cf:6d:4b:96:b1:9c:7b:7b:76:af:
                    fc:5b:03:f6:3a:db:ff:af:30:1f:de:0c:24:e6:19:
                    b7:94:29:df:a8:50:2e:28:48:dc:ae:5a:27:2a:ba:
                    41:7d:d7:28:cf:9d:9a:23:15:fa:0c:43:e1:6b:bb:
                    24:bd:ae:99:62:97:72:40:ae:14:1f:9b:13:9a:db:
                    0a:d1:ae:09:8d:34:4e:d1:50:99:c9:70:b9:cf:41:
                    1a:8f:6b:fa:b2:33:0b:1f:95:27:72:07:34:0c:dc:
                    51:42:4d:d0:d9:28:72:06:b1:10:ed:93:60:36:8e:
                    a4:be:23:15:44:dc:a4:d7:83:7c:95:e0:50:6d:0e:
                    6e:2b:d1:87:69:35:27:32:0e:61:c3:e6:23:8b:a0:
                    46:42:6b:78:40:ff:db:d1:56:72:bb:c8:6e:06:3f:
                    36:69:a9:93:7f:d5:da:55:9a:8c:47:a3:23:7d:21:
                    bb:8b:8c:cf:91:d2:01:12:3a:39:3a:ec:d5:36:c6:
                    eb:3f:d0:ba:02:2f:d4:7e:52:e1:3d:c2:2e:9b:69:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:21:D2:54:71:2F:EE:AA:80:6A:94:A4:CE:13:E0:26:91:57:CD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9616acc1-d051-3148-b53e-b4dbc9a2f093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:08:92:66:91:cc:b4:ad:3f:80:c1:5c:8b:b5:7b:82:74:
         99:c4:27:7d:cf:c4:c6:5d:2d:45:3d:5d:f9:9c:89:4b:50:e9:
         cd:3e:4e:17:93:05:28:1c:4e:8b:d1:50:6a:9b:24:9e:5c:ed:
         a9:76:0d:d6:11:ed:c1:52:57:08:af:cb:c1:82:89:cb:a1:13:
         95:94:7e:c9:a6:2e:a9:d1:cc:37:4d:4e:77:e2:87:7a:77:23:
         a2:40:09:29:12:a4:58:77:fa:e0:7e:57:8e:6a:62:b9:f9:38:
         de:d0:bc:b6:d2:28:7d:61:c7:81:67:58:99:dd:40:6f:8e:76:
         ff:89:44:24:4b:10:8f:73:aa:74:75:bc:c0:85:59:fa:12:11:
         f6:19:b4:86:48:35:85:31:5a:90:4d:6f:a2:1c:75:92:95:fc:
         4e:41:e6:37:93:f9:62:c4:f4:d5:c4:1b:03:00:a6:32:47:4e:
         a0:c3:d3:0e:24:1e:89:ed:e6:21:d9:a8:9a:c0:20:57:43:65:
         44:81:cb:00:cc:3e:6c:20:15:30:3b:c3:f7:5e:96:8f:56:74:
         12:0e:43:9b:c6:0c:b1:88:e8:e4:c2:cb:2b:6b:c0:14:2d:76:
         17:12:e0:be:d2:f1:e7:e8:ac:ca:f3:5d:d9:61:f7:fe:b6:be:
         0a:1c:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:44:34 2025 by rpki-client