Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa
File:                     0d79ec36-8620-3067-986c-38e60dc2d208.roa (raw, json)
Hash identifier:          OSVNW4+in5CdjNJ2Z0XB0TQBh7HhWfkpLksMGl4UVd4=
Subject key identifier:   43:23:46:66:21:80:8A:53:EA:36:89:C9:18:E5:61:C2:51:1E:32:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB32253DF1974E546D5600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:32:25:3d:f1:97:4e:54:6d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ef5bd74f-04d7-42f5-aa0f-f571a9a46742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:4c:b1:c1:fc:64:86:e1:cf:98:f4:89:00:
                    41:35:05:d3:0d:e7:d6:d8:1a:4f:d3:d6:5d:13:97:
                    15:6f:61:37:c0:f2:fd:08:aa:01:53:93:92:e6:0f:
                    bc:1d:02:b9:54:9a:43:da:3e:f8:aa:1b:c4:69:29:
                    11:1a:ec:5b:ed:0d:6e:63:85:0c:7a:9a:9c:0a:a5:
                    9e:46:f5:d9:ac:0f:95:e0:58:2f:e5:00:6f:95:98:
                    21:00:62:10:3c:0d:fb:96:4c:58:68:4a:6a:1e:5c:
                    d6:c0:7b:25:cc:43:9e:4b:a4:1b:21:1e:0c:76:85:
                    b4:30:a9:1e:96:e9:aa:11:eb:93:5c:9e:28:3c:a5:
                    55:ea:b1:43:79:e5:25:50:f8:eb:0a:80:6e:05:7f:
                    f3:9a:a3:89:33:76:51:e9:73:98:0d:bb:9e:a7:a4:
                    cc:50:3e:67:57:df:b5:de:47:90:b7:5b:b1:07:cd:
                    e9:78:93:12:ad:77:4c:ea:4a:07:cc:13:71:e7:e1:
                    d0:6c:4c:23:82:c6:23:3e:a8:28:a9:34:10:8f:cf:
                    19:b4:71:2b:43:be:f4:6b:97:a8:45:2d:55:99:6c:
                    86:63:9a:8f:9b:88:40:75:14:14:7b:8c:fc:c4:16:
                    be:21:f7:30:cd:b0:fc:5d:f9:4c:35:18:b1:28:7a:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:23:46:66:21:80:8A:53:EA:36:89:C9:18:E5:61:C2:51:1E:32:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b0:9d:9d:cc:cc:6e:a5:1c:2f:e6:c1:8e:f8:29:92:db:4e:
         3e:23:f8:45:40:42:85:26:1f:40:50:c3:b0:b6:3c:31:cb:21:
         16:c3:33:fc:73:a9:5e:96:8f:f1:32:0b:eb:8b:1a:da:3c:70:
         14:72:a3:c5:8f:45:04:54:17:7a:c1:8a:1e:8e:af:aa:64:78:
         28:e5:65:2a:b5:16:ee:64:d0:c4:33:f6:a6:61:88:ba:26:10:
         ea:14:72:09:ce:08:8e:4e:00:d7:84:ff:64:36:e8:70:07:12:
         5d:cd:93:89:77:0f:81:87:7a:98:6d:e6:6c:15:46:b7:a3:4a:
         fc:9a:13:33:89:eb:ba:4a:44:65:91:3f:27:b6:93:7e:12:b6:
         02:80:dc:d8:3b:cd:d6:e3:c1:70:54:fb:10:b5:d9:7d:f4:0d:
         b2:e9:c0:6b:9d:98:b5:9a:30:b8:15:0f:43:8d:d2:7b:f2:1d:
         87:93:bf:51:a8:6a:7a:21:72:92:19:62:36:d2:a0:ca:00:e7:
         fb:51:78:60:35:74:e4:ee:b6:53:9d:a4:90:b5:f4:1a:ed:0c:
         9a:5c:a7:5c:5e:1d:9b:33:58:91:bc:12:e7:fd:b6:43:97:6f:
         ca:b0:1c:65:88:fe:96:54:3f:0d:35:53:88:79:b8:f9:b5:b2:
         9f:10:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:35 2025 by rpki-client