Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6ae4724-da96-33c7-8248-d399d0c63d4c.roa
File:                     c6ae4724-da96-33c7-8248-d399d0c63d4c.roa (raw, json)
Hash identifier:          rPklkrbmxjktBrDaPabxyzDYeXd2F4Jn5MW5L/80a98=
Subject key identifier:   46:9F:5F:DF:62:B4:56:FE:D8:70:72:B4:46:5A:29:CD:C7:54:48:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F715297F5576C483F5B75180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6ae4724-da96-33c7-8248-d399d0c63d4c.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        72.105.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:29:7f:55:76:c4:83:f5:b7:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=38de4cb2-40fb-41bc-ac2f-c93c90975022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:8b:4a:9f:ef:cd:97:0b:40:45:d0:f0:1e:
                    bd:ad:2a:c8:86:58:7f:de:2f:17:2a:73:35:22:5f:
                    50:f3:0f:ae:06:68:7d:9e:8d:40:64:56:de:8f:ca:
                    fe:38:1b:4b:de:1f:92:9c:12:64:cb:7c:3c:34:18:
                    d8:f2:28:e9:be:31:af:a2:97:fc:4c:7c:0f:44:4b:
                    fa:2a:60:30:a2:51:0e:85:75:14:cd:27:84:69:c9:
                    cf:03:92:0c:23:12:e6:c5:78:fe:f5:54:fd:9f:cd:
                    10:4b:6c:89:f2:86:9f:0e:5a:13:9b:ef:f5:66:64:
                    1f:a3:23:c1:b2:cb:7d:53:3a:e5:60:78:41:de:6f:
                    fe:89:3b:8b:41:a1:55:8f:bd:27:74:66:49:fc:56:
                    83:6e:00:21:24:45:f3:fd:8e:ee:b5:e8:17:14:48:
                    f9:0d:fe:ed:6c:0a:32:e5:97:e0:72:61:8b:da:8a:
                    c2:02:25:bf:e6:4b:45:3b:fb:c5:ae:3a:25:9f:6d:
                    6f:d9:76:41:94:32:57:32:9c:b5:a8:70:71:8f:c7:
                    6c:b5:9a:d9:58:4a:44:bd:6e:1e:48:bd:05:85:d5:
                    fe:a0:63:22:46:f5:be:1f:c6:dc:ff:a0:53:fe:2a:
                    aa:c8:09:9e:4a:cc:01:be:b3:ee:5d:6a:4e:98:a8:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9F:5F:DF:62:B4:56:FE:D8:70:72:B4:46:5A:29:CD:C7:54:48:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6ae4724-da96-33c7-8248-d399d0c63d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:4d:8b:85:ba:68:31:6a:4d:ce:3f:b9:d3:87:fd:36:58:
         c8:8d:23:d9:79:9a:fb:3f:b7:cd:d9:fd:f8:29:3c:93:d2:a3:
         c7:0d:85:5c:9b:3a:3c:25:70:d7:4b:c4:df:3c:38:04:41:02:
         a1:04:79:2a:33:40:0f:03:24:0e:cf:85:b9:ad:59:79:0d:13:
         a8:2a:4b:04:29:fc:9b:51:15:eb:62:8e:99:73:64:32:91:17:
         c1:14:fa:81:4e:cf:4e:cd:70:19:fb:f8:d4:76:0c:ca:7a:df:
         62:15:d1:fa:99:5d:78:11:8f:1a:89:16:1f:e8:59:54:cb:8b:
         f2:07:af:c9:3b:18:3e:31:7b:86:d7:83:1f:19:ca:ca:2c:11:
         f1:eb:93:c5:5c:cb:a0:17:67:3a:79:62:d1:4d:68:04:a4:cb:
         71:cb:ec:ba:e3:ba:ff:a1:1e:84:98:48:c7:d9:fd:a2:3b:52:
         f8:26:4f:49:0f:a3:d0:00:85:2a:2c:6d:60:7c:15:f1:33:8c:
         b1:4f:dc:b3:c9:c6:02:a1:bc:36:bd:24:d2:f1:11:e3:ef:9c:
         c3:49:e3:11:bb:16:46:03:41:94:30:b3:dd:2c:d0:20:f6:d5:
         27:ac:b5:a4:0a:d9:04:8d:a4:7e:a8:5b:77:ae:57:d6:c8:32:
         a5:27:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:44:29 2025 by rpki-client