Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28cd3ce0-85a4-357e-9836-ec14a5ab934d.roa
File:                     28cd3ce0-85a4-357e-9836-ec14a5ab934d.roa (raw, json)
Hash identifier:          qD4eWPT/dbh19ciaddjOeoxwp4R89E87FyBQJFuoknI=
Subject key identifier:   B2:3E:85:89:96:FF:66:3D:6A:58:63:87:55:66:6D:01:2C:A2:A3:71
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2E6C2DA0D2473853CCA8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28cd3ce0-85a4-357e-9836-ec14a5ab934d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2e:6c:2d:a0:d2:47:38:53:cc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4fc90727-529f-4107-b3f6-7cc48d107f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:cd:1b:f4:20:20:d9:59:45:71:5b:7a:4f:
                    f4:da:8f:90:02:6d:4d:9b:b9:be:0f:65:35:31:de:
                    ed:53:3c:9b:ff:4c:99:c0:0b:1d:ed:9d:eb:f7:ef:
                    95:53:62:1e:b1:e1:bd:4b:49:8a:6c:d3:7e:82:d7:
                    0b:91:c9:85:9c:b8:6d:56:4e:1f:dc:34:ce:1a:eb:
                    8a:9c:2f:24:fc:1a:4a:7c:29:95:d4:32:ce:eb:f0:
                    cf:82:4c:9d:0b:d4:f0:42:5b:59:5f:a9:55:b3:03:
                    77:d7:65:e6:3b:66:73:be:0a:8f:02:a0:16:be:17:
                    a5:ce:b8:8a:f0:91:a5:9d:f2:cf:12:f1:d1:2a:02:
                    6b:69:cd:be:dd:57:f2:1a:0e:8f:06:1f:18:e2:79:
                    26:bc:7f:1c:3a:e1:f6:73:1f:fc:5c:9f:a5:50:0d:
                    af:75:c5:81:57:e3:bb:63:c7:cc:4d:27:90:8c:40:
                    0c:f0:e1:a2:01:ed:bf:7d:cb:42:c0:f9:41:b0:bf:
                    55:60:b6:e0:56:93:bc:47:8a:93:a4:ac:2c:5e:b1:
                    b7:8d:58:a6:11:77:37:20:35:6d:e0:04:ce:e6:89:
                    11:cd:b8:b0:8d:36:8b:ea:94:ee:a9:0e:c4:80:17:
                    e8:1b:32:d6:27:d4:72:f9:92:c6:ac:af:66:bc:ba:
                    fa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:85:89:96:FF:66:3D:6A:58:63:87:55:66:6D:01:2C:A2:A3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28cd3ce0-85a4-357e-9836-ec14a5ab934d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:6d:52:e8:4f:44:58:36:d5:a5:ce:94:36:bf:f2:e7:47:
         19:c0:70:20:58:8a:ce:07:6c:2f:59:bc:cc:fd:0d:28:9e:6f:
         d9:dc:d9:d8:6c:08:f6:8b:f1:01:ee:04:be:db:df:01:f1:17:
         e0:f9:22:fc:fa:65:ca:37:fc:8a:fc:42:f6:f5:66:81:a5:0f:
         43:75:e7:3b:8c:3c:ce:bf:68:82:67:35:02:f0:30:a9:7f:81:
         d9:75:ad:2e:0f:af:d8:66:7f:92:79:f0:36:6d:c4:de:df:b8:
         01:e6:1f:e2:63:d1:3b:9d:a1:5c:19:c9:9f:ec:c9:14:f5:02:
         fb:09:ca:55:de:4e:bb:b6:7e:2e:31:fa:80:f0:00:11:ab:9d:
         c4:25:05:79:74:bc:46:85:a0:d7:c7:2a:74:dd:b1:ff:1a:08:
         20:1a:b3:51:c8:d2:57:5d:1d:78:f0:f7:85:25:a6:6a:e7:3c:
         35:7d:fd:ab:60:0c:b5:e9:ef:a6:2d:6c:e1:d0:57:19:2f:fa:
         d2:25:09:9b:cd:47:41:65:d7:4d:b7:90:71:f5:1c:40:90:b2:
         c9:5f:79:15:fe:8c:51:91:d4:7d:85:52:22:70:0c:64:e5:32:
         3e:6b:43:e0:4c:41:45:a3:b8:0f:ad:60:75:c9:4a:d9:d3:35:
         86:a6:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:32:27 2025 by rpki-client