Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa
File:                     c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa (raw, json)
Hash identifier:          cn1O4gJNcTI45UiUS70vWvNjfeKeNxRlSQ5mHoLWEOQ=
Subject key identifier:   CE:E7:3D:BE:7C:CC:AD:13:59:65:E0:A7:71:E0:B6:3A:F1:18:28:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD7D12C1FDFC9F518C80FC480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2c:1f:df:c9:f5:18:c8:0f:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=3b76cc0d-f636-4e07-ab6f-3355753bb1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:32:0f:da:6e:48:6f:a2:2d:0d:f3:a9:c3:
                    57:74:5b:b0:ef:f7:63:e6:c7:1f:ff:93:46:9b:ee:
                    2d:13:79:89:49:d6:de:02:d0:9d:b1:75:30:70:0c:
                    20:92:8e:e4:c2:85:e5:29:21:bc:a6:38:20:14:5d:
                    a2:33:bc:99:73:dd:d1:8f:a8:b4:f2:38:23:ad:e1:
                    c6:97:7a:40:ee:51:9f:c1:84:6d:f6:f2:18:d3:2a:
                    81:9a:19:65:23:1d:53:bf:4a:e0:fc:a7:22:c4:ca:
                    ce:a9:fc:f1:a8:2c:23:65:e4:50:aa:26:40:f5:4d:
                    36:8e:fd:e0:dd:77:60:d2:c1:91:2d:84:4f:42:92:
                    09:17:47:7e:c4:f3:64:a8:d5:3c:ed:c7:46:bb:9f:
                    36:04:0a:5d:f9:e3:48:29:bb:96:2c:df:ff:ae:b8:
                    44:16:a6:1d:8d:43:cf:b0:85:93:03:0d:ad:e9:1a:
                    22:41:82:5e:ae:0c:a4:0c:c9:e3:10:78:71:06:82:
                    74:74:06:73:d1:76:6d:fb:4a:65:13:08:ab:6c:09:
                    91:68:5c:d6:5d:f0:fe:9d:b0:87:9c:7d:24:65:7d:
                    49:f3:74:af:28:d9:b8:3e:93:39:f1:2b:a8:94:e4:
                    2f:27:6f:cf:fb:32:38:db:69:4b:e9:67:08:ac:87:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:3D:BE:7C:CC:AD:13:59:65:E0:A7:71:E0:B6:3A:F1:18:28:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c30a6ea9-676e-3ee3-ba25-5e4b87851a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:3a:51:32:7f:ca:94:7a:4c:fa:9e:e2:85:a3:1a:0e:f4:
         a5:36:41:5c:15:71:f8:63:c1:8d:bd:22:64:93:fa:29:16:98:
         14:a8:4e:c2:8e:fc:78:81:68:57:79:27:36:b2:7a:71:ca:09:
         bd:12:27:93:07:85:99:9a:6e:c3:bb:fa:1a:cc:08:5d:05:52:
         1a:0b:3f:2d:f8:08:65:87:f2:38:f3:a8:24:3a:32:36:e4:63:
         77:5a:4d:77:9d:4e:a9:87:5d:e5:fc:e1:da:ac:d8:39:02:2b:
         3e:dd:fa:bb:8d:78:15:6f:8c:c2:00:c3:98:40:0c:4c:71:de:
         6d:df:af:79:5c:f2:b8:d7:22:af:dd:29:f6:d5:82:c7:be:b6:
         90:26:d6:57:c3:cb:6e:87:9c:23:1e:60:f9:31:a1:26:c1:a6:
         0d:db:af:24:96:e3:a0:85:aa:e3:c4:20:94:04:e4:be:6d:f7:
         3b:4a:11:0d:68:06:81:eb:5e:1a:dd:bf:0e:98:26:88:e5:51:
         32:0f:5c:81:4a:0b:bc:57:be:ce:68:bd:fc:c1:33:c8:e3:c2:
         ea:44:8d:fa:4d:99:f5:83:e9:c3:7b:e3:43:53:f8:83:f4:dc:
         1d:df:0d:fd:c0:ec:e9:af:99:61:e5:3f:28:55:34:be:4e:0f:
         ce:84:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:47 2025 by rpki-client