Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa
File:                     a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa (raw, json)
Hash identifier:          +UWdkm/GjptfXxzRZKRvLEAnAeqFMVOmg6bv4yXsrKo=
Subject key identifier:   D3:1C:9C:1D:DA:CF:52:80:3C:14:B4:4B:12:E7:14:F8:AE:4C:7A:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D13B9CCA66D5C17FB31080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.104.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:3b:9c:ca:66:d5:c1:7f:b3:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=c3329e49-62b8-4f2b-b93a-c842a8e9ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:74:dc:62:0e:dc:1b:0d:03:68:9d:5f:88:
                    02:4b:55:bf:39:ba:0f:4e:3a:7f:38:15:44:a5:ae:
                    2b:59:ab:aa:d0:2b:78:ae:48:61:b1:a8:d7:89:87:
                    a6:99:07:2b:c2:78:f2:46:2b:84:8d:68:24:41:be:
                    fb:79:d3:23:d4:7f:ae:41:d1:ac:11:7b:72:a6:a7:
                    22:d1:db:9c:70:00:27:fa:ac:5b:3d:23:78:74:65:
                    90:50:1c:4e:d7:e3:02:1c:22:36:c0:2e:41:28:5b:
                    60:f1:c2:d4:e2:0f:e8:fa:4e:94:64:dc:9e:43:b2:
                    e5:3c:c6:36:da:50:5c:a0:c6:af:c2:f8:f5:34:8f:
                    a7:db:0a:5a:b3:86:52:30:cb:ef:f9:17:a2:23:be:
                    2c:f1:7c:16:03:48:0a:29:3b:02:e4:2b:ed:c6:9c:
                    c1:ca:a4:5a:fa:d5:90:4c:48:40:72:aa:a8:0f:d0:
                    44:a5:30:63:d9:db:0a:ea:b3:12:cc:3d:a7:10:f9:
                    6f:72:86:ff:99:a2:d5:c6:d6:8b:d6:63:ac:ed:01:
                    79:8a:f3:ea:72:23:78:fb:3f:79:f3:01:72:b0:a2:
                    96:a1:05:3a:09:10:f4:93:44:53:39:15:5a:6e:d1:
                    f8:60:51:23:de:95:ae:bb:ab:77:af:03:50:79:de:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1C:9C:1D:DA:CF:52:80:3C:14:B4:4B:12:E7:14:F8:AE:4C:7A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a609e0bb-bbc9-30a7-b4f9-3a7873fd4d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3f:dd:0b:fa:5f:e6:c6:20:d2:78:03:12:db:ca:50:dd:3a:
         97:c2:5e:0e:01:91:e1:30:30:1b:fc:61:11:20:4b:aa:b3:36:
         d6:ad:8f:d1:de:e6:38:66:34:75:0e:7c:c0:f8:c3:ab:9b:d9:
         b9:74:33:f0:66:cb:6f:f6:86:06:b6:0e:67:45:78:48:59:10:
         a5:83:c6:82:64:30:2a:90:75:ef:5c:ae:ba:06:0d:a8:20:b5:
         13:6e:4c:4b:41:bb:7d:c6:84:5f:8e:77:8d:9d:d4:a2:ab:ab:
         d4:ce:b1:d6:7a:a9:1e:bf:ba:98:60:e0:8e:13:1d:e1:4d:39:
         be:aa:af:62:ed:b4:52:cd:56:19:a5:5c:1a:37:ae:23:c3:ab:
         cf:40:0b:20:52:d6:22:7f:db:70:7f:82:7e:81:b6:25:b1:53:
         90:03:1b:2b:28:ec:d0:cb:f9:41:72:96:1c:53:cf:de:3f:0b:
         d9:aa:50:b1:b1:24:20:44:d5:bb:bf:fc:fc:ab:17:6e:fc:41:
         6b:5b:d8:49:21:08:30:4a:38:76:c0:28:de:17:46:45:0e:03:
         d8:a3:42:5e:e0:ec:45:58:c4:0d:f9:c2:81:02:5b:8b:40:c0:
         a0:1e:44:43:b5:b3:d5:ab:50:95:5e:36:c1:25:e3:b0:22:93:
         67:cb:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:29 2025 by rpki-client