Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/313bac88-5c70-324d-a4a7-3504f1b284b5.roa
File:                     313bac88-5c70-324d-a4a7-3504f1b284b5.roa (raw, json)
Hash identifier:          VWofdxvLDHnTaBg+JN+ZzZjPGBRvSVgb0o3wNzCLBQM=
Subject key identifier:   6A:65:1B:13:4B:BB:AA:61:EF:D5:C6:E7:B6:1C:0B:31:A1:96:8B:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2BD056D0F6F2678DDD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/313bac88-5c70-324d-a4a7-3504f1b284b5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2b:d0:56:d0:f6:f2:67:8d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=3e1ac11f-2599-43b7-992a-23accdec1123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:fc:ce:2c:0f:89:48:2b:22:15:36:a6:ce:
                    5e:a5:34:58:07:21:6d:e2:74:6d:40:54:67:bc:50:
                    33:ca:62:b1:85:43:da:59:49:08:b4:e6:3f:68:af:
                    53:f6:da:0d:3b:8c:c2:c6:ce:62:77:8c:8c:c3:29:
                    aa:5b:1b:7b:03:fa:22:e8:44:50:6c:af:a7:93:1d:
                    e5:02:a9:e5:cd:bd:20:42:36:29:82:70:c0:29:c9:
                    1b:14:e2:87:30:f4:6d:3d:af:83:f6:5e:58:cd:a7:
                    3c:37:d4:60:99:8a:bb:9e:f3:ad:bb:38:e5:dd:e3:
                    e7:43:a7:9a:1c:09:31:b6:37:99:a2:07:88:fb:9c:
                    c6:6d:58:c4:36:ef:33:11:0e:eb:01:72:b4:68:1a:
                    ea:4b:2d:6c:7f:92:7a:98:37:c8:d0:13:52:06:03:
                    17:01:49:e7:de:71:cd:2c:bd:d2:88:bd:2c:24:29:
                    78:94:09:fd:b4:85:74:7f:4c:00:bd:da:04:72:7b:
                    84:e5:8c:05:fe:62:21:e8:74:3c:da:1e:61:0e:dd:
                    44:21:b0:5a:83:98:12:03:ee:72:f6:2f:ee:fa:60:
                    f1:13:f0:b8:61:6c:9c:1e:50:3a:e2:cf:76:6a:81:
                    d2:c3:2b:7b:8b:1c:06:5d:7a:b6:74:b5:7c:bd:19:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:65:1B:13:4B:BB:AA:61:EF:D5:C6:E7:B6:1C:0B:31:A1:96:8B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/313bac88-5c70-324d-a4a7-3504f1b284b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b2:97:8a:17:fc:ad:36:01:6a:cc:6e:fa:b5:de:91:8f:44:
         ed:12:f8:2e:dd:92:f9:58:1a:e0:85:c8:da:76:e1:db:9b:12:
         bd:a2:3f:93:08:a6:35:11:02:7e:c6:68:ea:cf:9f:0b:23:1c:
         f7:a9:75:de:f2:04:23:b0:e5:72:3e:62:de:64:c6:97:6e:b8:
         3b:0a:4b:e7:ec:b4:c2:20:96:8c:df:5d:33:db:16:f1:c8:2c:
         d3:46:c5:7f:c0:cc:0c:7e:47:65:b8:ed:99:00:8e:10:9f:69:
         52:3c:ee:5e:4c:05:fa:7c:30:c1:2a:cf:47:df:75:48:7d:e8:
         85:26:ba:7b:86:32:41:5e:19:f0:f0:97:f6:8c:39:9f:49:ba:
         e0:0b:b2:52:d7:10:1a:e3:28:72:38:f1:dc:0f:b2:b1:ad:07:
         a7:06:04:ee:22:b3:40:47:1b:73:f1:63:82:58:c6:5a:5d:a4:
         51:31:d8:bd:a0:be:4d:0b:aa:7b:ea:04:e2:41:11:aa:64:1d:
         66:0d:3a:e0:42:09:19:3d:c2:42:92:94:55:21:b1:7c:21:95:
         69:14:8a:ca:8d:65:55:bc:76:af:aa:3d:f6:fc:3f:ce:3e:09:
         69:df:b4:d8:00:99:73:ba:38:8e:68:9c:c0:e2:40:76:97:3c:
         e4:5a:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:42 2025 by rpki-client