Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa
File:                     0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa (raw, json)
Hash identifier:          p4sMFyVqtMW1N8zL3c85iRIpT13VHKOLshMvcID6Tj4=
Subject key identifier:   45:B9:43:B8:E5:48:BA:52:A6:E5:0D:61:C2:77:1D:4B:64:B6:B8:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2D48055441350B25B880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2d:48:05:54:41:35:0b:25:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f93a9196-364f-4f61-88d2-0086d030a917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:8d:19:29:74:13:db:81:0c:8e:1e:6e:c4:
                    e1:b7:98:fc:45:fb:4c:26:f4:93:b3:81:1d:f6:9d:
                    30:60:49:92:0d:e4:d9:23:36:54:d1:39:53:82:ca:
                    7b:90:1c:1b:58:00:dd:82:7b:97:6a:42:55:ee:a3:
                    00:d0:66:46:51:89:8f:6d:99:6b:5a:c0:32:e8:86:
                    9d:5d:a6:fa:7a:3f:4e:97:9f:03:09:a4:07:77:e8:
                    46:57:a7:e0:af:c3:04:6c:c8:95:97:7d:61:0d:e1:
                    c3:1e:8a:50:05:61:0f:7f:8c:29:2d:06:7e:29:dc:
                    39:f1:ef:be:b4:07:79:22:f4:e2:97:9e:ff:fd:57:
                    9b:43:94:7a:a8:7b:d8:95:e5:66:5e:f3:1e:44:a6:
                    31:e6:7c:a8:43:17:d3:0e:6a:ef:59:10:f9:0a:d1:
                    e5:99:ee:10:c7:d0:aa:30:08:87:e8:c4:30:a0:ca:
                    10:8b:95:88:01:73:73:85:2a:42:6d:9b:c4:17:0d:
                    f6:75:e3:4b:47:c2:ef:51:e8:75:25:4c:72:b2:ad:
                    40:74:9f:b2:8f:4b:d9:68:25:4a:01:16:93:d8:1c:
                    81:2a:c1:56:92:4c:12:9a:13:e6:08:3b:e3:4c:08:
                    77:06:78:bc:d4:1f:91:ba:9d:6f:bd:ae:3e:2f:3f:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:43:B8:E5:48:BA:52:A6:E5:0D:61:C2:77:1D:4B:64:B6:B8:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:18:f3:fe:11:08:67:fb:ed:75:8e:3d:0c:47:6b:6c:10:
         4e:23:43:ac:24:9a:da:b3:90:3c:95:fc:c1:18:a8:e9:ee:fe:
         56:98:84:b5:38:19:a0:7b:05:43:16:cb:bc:6c:a8:ea:a8:df:
         17:13:6e:ad:66:d2:81:81:2d:ec:2f:cf:23:5d:89:45:28:0f:
         39:63:ed:8f:fe:88:0f:f5:14:97:02:f7:56:32:1d:26:fd:b2:
         3b:a0:10:bf:b5:d9:d7:5d:63:6e:0b:9e:91:07:08:c9:4b:13:
         bc:11:69:18:31:b2:89:fa:da:df:d9:40:cb:ac:bf:a0:3d:ae:
         81:f9:e4:7d:24:e5:95:81:f1:c9:51:ce:b2:af:75:34:26:fa:
         07:09:84:3c:53:0c:e4:3a:ac:12:11:86:35:13:ac:2c:96:89:
         d2:78:34:41:02:4b:5d:28:63:5a:22:4a:19:6a:d1:3d:5d:c7:
         f7:53:47:0d:54:d4:aa:4f:76:32:44:a5:72:78:e3:6b:ef:56:
         f3:6a:9d:43:80:cd:1a:3d:36:45:2a:b8:6a:73:27:12:a5:5b:
         9c:3b:cb:fd:74:fb:ec:3b:b3:53:40:f9:e9:e4:69:11:23:be:
         75:ad:af:99:6e:36:32:53:b9:33:4c:59:cc:01:5b:22:fc:14:
         98:46:6c:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuy1IBVRBNQsluIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjkzYTkxOTYtMzY0Zi00ZjYxLTg4ZDItMDA4NmQwMzBhOTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiGNGSl0E9uBDI4ebsTht5j8RftMJvSTs4Ed
9p0wYEmSDeTZIzZU0TlTgsp7kBwbWADdgnuXakJV7qMA0GZGUYmPbZlrWsAy6Iad
Xab6ej9Ol58DCaQHd+hGV6fgr8MEbMiVl31hDeHDHopQBWEPf4wpLQZ+Kdw58e++
tAd5IvTil57//VebQ5R6qHvYleVmXvMeRKYx5nyoQxfTDmrvWRD5CtHlme4Qx9Cq
MAiH6MQwoMoQi5WIAXNzhSpCbZvEFw32deNLR8LvUeh1JUxysq1AdJ+yj0vZaCVK
ARaT2ByBKsFWkkwSmhPmCDvjTAh3Bni81B+Rup1vva4+Lz+eqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEW5Q7jlSLpSpuUNYcJ3HUtktrhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGFmMGFmNjUtZWM3Yy0z
ZTRhLTk3MWYtZjlkMDk3Mjk2YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa4GPP+EQhn++11jj0MR2tsEE4jQ6wkmtqzkDyV/MEYqOnu/laYhLU4
GaB7BUMWy7xsqOqo3xcTbq1m0oGBLewvzyNdiUUoDzlj7Y/+iA/1FJcC91YyHSb9
sjugEL+12dddY24LnpEHCMlLE7wRaRgxson62t/ZQMusv6A9roH55H0k5ZWB8clR
zrKvdTQm+gcJhDxTDOQ6rBIRhjUTrCyWidJ4NEECS10oY1oiShlq0T1dx/dTRw1U
1KpPdjJEpXJ442vvVvNqnUOAzRo9NkUquGpzJxKlW5w7y/10++w7s1NA+enkaREj
vnWtr5luNjJTuTNMWcwBWyL8FJhGbPM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:18:17 2025 by rpki-client