Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b0ea034-9134-3f55-88b7-1e43d4b46364.roa
File:                     4b0ea034-9134-3f55-88b7-1e43d4b46364.roa (raw, json)
Hash identifier:          GvX8BJEKRD6dVMAEmzcLv0NRt7kZBmLQrbrUykPLnIY=
Subject key identifier:   6A:82:9B:38:35:B7:95:97:41:90:7E:FA:6E:30:04:5F:F3:D8:C5:3E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8C5ED769BB0880533400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b0ea034-9134-3f55-88b7-1e43d4b46364.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8c:5e:d7:69:bb:08:80:53:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=df7af21f-9c90-47c9-a7b4-cab0ebe34305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:dd:ef:e6:35:c0:5b:e2:25:b7:45:17:e7:
                    b9:a6:fc:2e:6e:92:45:0f:f1:b4:d0:ef:01:f2:da:
                    d4:b2:74:b7:f4:ec:20:cb:bd:d1:2f:93:6a:9e:52:
                    c4:a9:30:f3:ef:62:6d:47:4a:b7:10:18:07:7a:e7:
                    6d:9d:f3:c0:bb:82:cb:1e:46:60:e1:81:86:6e:95:
                    bf:ca:3d:6f:43:8f:ee:18:79:b2:dc:e9:c0:ff:0b:
                    46:dc:e4:0c:9f:8a:9c:e7:ff:32:4f:da:41:61:82:
                    50:80:80:4a:f7:02:bf:21:49:af:ee:49:72:fd:62:
                    2d:4d:39:24:91:9e:73:d1:cc:77:0d:aa:4c:ad:bb:
                    2b:d0:ae:01:db:7a:69:7f:7f:54:29:a7:48:20:7e:
                    f9:6f:46:a7:2b:fc:ca:9a:ec:10:25:fd:3a:e2:73:
                    05:f2:98:39:a6:19:35:40:60:64:97:81:3f:b2:4d:
                    14:19:5e:d0:e2:d4:b3:97:c3:a4:5f:44:58:64:a1:
                    ce:d3:50:6e:03:8c:d5:b4:7d:48:8b:05:fd:e1:f6:
                    47:6a:84:f5:cc:fe:ed:4b:42:f6:f7:53:95:43:f8:
                    61:b1:b0:52:f5:e9:f1:fe:25:29:42:94:a6:e4:af:
                    71:d2:f7:15:a4:65:a8:58:7f:1e:93:a8:9f:eb:83:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:9B:38:35:B7:95:97:41:90:7E:FA:6E:30:04:5F:F3:D8:C5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b0ea034-9134-3f55-88b7-1e43d4b46364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:01:39:3b:98:53:3f:fe:37:3f:de:1d:b2:ff:f4:2b:ab:45:
         c6:bc:30:1a:df:90:e5:65:a3:67:28:d3:c8:06:4c:3d:e1:45:
         01:8d:4b:76:89:08:02:da:e6:56:53:6e:fd:45:ce:31:f3:99:
         cf:0c:f7:58:94:d8:7c:54:c8:05:30:a3:84:a1:76:6a:8f:96:
         d7:bc:cd:0d:a5:c1:70:67:bc:fd:cc:09:f8:76:c4:49:9b:98:
         e6:2f:21:46:03:28:10:53:c3:d0:d9:4a:ac:66:9e:85:a4:14:
         75:9d:7a:73:16:3a:98:97:77:3c:40:1f:76:32:f2:73:4c:1a:
         7f:4a:96:a6:6d:60:95:86:f9:36:62:6a:76:58:07:55:a6:3b:
         04:f0:d5:a5:3c:bf:79:c8:0b:19:35:0a:05:4e:e2:98:0a:11:
         e6:ef:1c:30:cb:70:88:fd:a8:96:60:a3:34:d6:5a:fb:d3:c8:
         d6:0d:98:66:0e:b6:39:df:ba:b4:cc:0b:3d:c5:57:20:a7:e4:
         ef:44:b1:c6:38:b5:6f:c9:f5:86:97:78:e7:f8:6f:9e:59:08:
         27:d2:73:2b:f8:a7:84:ff:66:b1:54:75:26:ff:50:fd:6e:b0:
         94:cc:e4:a6:f4:b0:ec:2e:36:ee:10:bf:37:ce:bb:3e:76:b3:
         39:5f:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:09:07 2025 by rpki-client