Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a79aa23e-f5fd-3a2b-b885-4823720e7999.roa
File:                     a79aa23e-f5fd-3a2b-b885-4823720e7999.roa (raw, json)
Hash identifier:          7SMhHNmNS3/5A/fUxvln8+2Gl0yVX4zRQMoNJD+Ohqc=
Subject key identifier:   22:55:9C:7B:59:99:D1:A2:9E:5D:FA:9D:49:2E:2F:0C:18:A8:5A:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2ABB8CDBB2EABF10930780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a79aa23e-f5fd-3a2b-b885-4823720e7999.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.103.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:bb:8c:db:b2:ea:bf:10:93:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=d68c45e1-ad71-48d5-b17e-47b7c610ff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:f7:e2:e2:15:9e:17:f4:1d:ee:31:71:b6:
                    30:62:43:59:fb:bd:a4:a7:fe:ef:fa:ea:98:66:fd:
                    10:01:29:8a:8d:25:45:cb:c2:50:1e:09:f2:f5:ea:
                    bc:e0:c2:b9:a6:57:1b:c4:cb:eb:1a:fa:57:b0:16:
                    93:27:ef:8c:9b:1a:dc:3d:33:16:77:5c:23:70:f4:
                    4b:1e:98:28:c9:0d:67:55:a9:40:49:df:d7:e4:3f:
                    17:5e:2f:19:a2:3b:9b:5a:a0:eb:c6:b7:d4:4f:18:
                    c5:70:12:e1:8e:c0:a1:02:1a:9a:f2:0a:10:50:77:
                    e4:cb:d3:de:85:82:82:54:08:6f:89:9f:b7:ad:ec:
                    c8:3c:cb:7c:49:ce:c3:04:7f:aa:97:0e:e4:56:d5:
                    e6:57:e5:01:90:e7:2b:c2:bb:18:8d:23:6c:7a:e1:
                    47:f8:34:3a:96:8c:e6:20:53:7e:29:79:86:61:6d:
                    50:ac:25:f9:56:9f:36:6e:db:7d:b5:b7:d9:f6:a1:
                    c5:69:9b:29:1e:77:c4:48:a8:2c:47:a2:2c:05:a0:
                    d6:85:e5:be:22:44:ed:b5:3a:52:42:7d:09:57:ac:
                    05:9b:a8:98:9e:c1:68:2e:a8:7d:6a:15:ed:14:25:
                    34:96:a2:8e:d8:b0:74:3d:1f:99:28:fb:9c:0f:48:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:9C:7B:59:99:D1:A2:9E:5D:FA:9D:49:2E:2F:0C:18:A8:5A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a79aa23e-f5fd-3a2b-b885-4823720e7999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d2:8b:ed:9c:6d:91:39:43:af:72:74:70:c9:7f:91:8e:a2:
         df:08:6f:b4:ac:2a:85:e6:3e:ae:43:37:a8:90:d1:d8:4a:40:
         eb:7b:22:fc:26:5b:6a:ee:d1:3c:f7:73:e4:6b:86:c9:64:bf:
         a3:4d:77:78:bc:ab:36:9c:98:e2:7e:49:b5:7e:b6:10:71:d1:
         97:29:88:8d:84:af:09:f5:b2:c3:4f:ba:ab:42:03:fb:a4:4f:
         ae:db:4b:3a:7b:fd:09:97:0e:6e:6d:20:3f:0b:4e:e0:fa:8c:
         00:41:16:28:a3:a6:a1:e7:08:f8:8a:e1:8f:a3:6a:a9:5e:4b:
         e4:35:61:4c:d3:c5:b2:50:c8:69:01:b4:c3:50:c0:cb:26:02:
         5e:6d:62:6d:d9:3e:b0:cd:eb:1d:51:0e:77:df:a1:94:8e:2e:
         b0:40:74:01:a6:de:f3:92:f2:61:f8:d8:11:19:d2:d2:3c:cf:
         37:b2:d4:fc:74:5a:9b:04:35:97:ad:b1:71:1d:8e:f7:17:8f:
         b9:d3:97:8b:04:3a:41:13:d7:2c:dc:15:2e:ca:17:7f:2a:c0:
         fb:25:86:88:a0:c8:65:0f:97:55:51:39:0f:8b:21:50:72:ee:
         e8:73:f4:82:f8:dc:62:6d:2d:15:23:30:f9:96:a0:17:91:58:
         7d:ed:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:02:44 2025 by rpki-client