Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6d4780-128d-349d-a1ea-ab07a12e9f19.roa
File:                     ba6d4780-128d-349d-a1ea-ab07a12e9f19.roa (raw, json)
Hash identifier:          BqyHKtdUuW6AF9lESftPcYq5gDVSD/DD2N9F8hhJ54c=
Subject key identifier:   6B:9D:D6:8F:44:57:C6:EC:8F:46:59:B7:B1:49:39:FB:A1:2D:53:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A1E2AB104F60096495F5D2140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6d4780-128d-349d-a1ea-ab07a12e9f19.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.103.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b1:04:f6:00:96:49:5f:5d:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=76bdb056-c717-47b0-af6d-27c0c925dfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:f8:fd:71:62:03:e3:90:ca:a4:71:0f:19:
                    40:5d:04:85:53:1a:20:28:f7:41:1e:0c:f7:8d:a5:
                    60:c3:2f:2c:78:86:8a:a8:6d:ea:20:00:7e:bc:7a:
                    5e:0c:57:dd:a9:80:00:0b:76:4b:d9:ac:bb:90:6a:
                    10:4d:b4:c7:9d:7a:02:c3:db:13:d6:78:7e:ed:e5:
                    c2:32:0f:82:a2:4e:40:e0:04:2a:e4:d4:b5:23:cb:
                    44:92:78:2e:9d:f9:96:f3:0e:38:14:0d:3d:35:07:
                    6e:08:65:1c:84:0a:cb:3c:2c:82:56:de:eb:09:25:
                    02:8b:a1:95:9e:52:a7:c5:ec:69:db:f9:8d:2d:13:
                    90:62:10:da:30:71:c9:53:01:be:a6:e0:dc:32:f1:
                    51:35:1f:a6:34:82:d7:3a:b7:92:df:f8:51:87:39:
                    2e:fa:6a:ff:b4:0a:7c:2a:a6:e4:5e:4d:da:5c:12:
                    b9:b6:69:56:17:e3:cf:84:d8:b1:12:1e:bb:18:62:
                    c9:8b:e0:f6:7a:c8:8d:6a:a7:63:c6:37:5b:94:db:
                    86:75:09:95:b5:ea:21:c4:fb:d6:6e:aa:e1:bb:ea:
                    dd:6b:60:88:02:a5:6a:28:9d:be:b5:ae:57:a3:86:
                    22:6d:81:d9:bd:79:64:b2:06:7a:b8:ee:27:e6:6d:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9D:D6:8F:44:57:C6:EC:8F:46:59:B7:B1:49:39:FB:A1:2D:53:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6d4780-128d-349d-a1ea-ab07a12e9f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:96:b8:b2:52:e4:ee:f6:40:86:c4:e0:fc:75:08:56:18:17:
         79:28:95:ad:06:7c:d1:dd:f6:0c:d0:b4:46:16:29:d2:82:1c:
         01:cb:01:bf:5a:32:7e:3e:60:b2:78:e7:b5:c8:81:5c:74:ac:
         51:1a:e2:29:a7:38:7a:54:85:84:4e:69:79:38:64:a7:f8:0f:
         ff:ae:9b:16:d3:29:4f:d8:c7:55:93:a7:df:7c:26:b8:de:89:
         a9:28:68:a5:c1:29:2f:9d:b1:22:98:f6:b7:f6:a5:a3:26:0a:
         c0:e5:97:12:bd:85:61:af:5f:48:c3:fd:6d:e4:49:12:b7:3f:
         b5:8a:44:7e:7b:b4:d3:7f:ff:0b:12:f2:33:57:11:9b:0a:ae:
         ce:07:79:79:eb:9a:b9:34:e2:62:1f:2f:82:18:fb:fe:32:6e:
         91:e1:b9:31:b3:ce:de:e1:2a:b4:93:bc:e9:69:cc:f9:d4:8e:
         b0:c3:14:50:34:0a:08:f8:e5:97:da:fd:26:83:47:2c:d8:61:
         9e:b6:3d:fc:40:0c:37:2d:fa:f2:f8:59:ba:b4:e2:40:8c:ca:
         bf:2e:13:96:41:e4:29:e1:da:7a:a9:ef:21:d6:bf:91:1e:c7:
         d9:e4:5d:a0:4c:e6:de:d2:f3:23:98:71:37:ca:0d:44:78:c3:
         aa:1f:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:53:01 2025 by rpki-client