Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d6d03-13c6-3c94-8210-34d3c47880d8.roa
File:                     638d6d03-13c6-3c94-8210-34d3c47880d8.roa (raw, json)
Hash identifier:          oA/vV5FS85iTbB0ozVxA/WgURTerGxNIMKwuKiUjiMg=
Subject key identifier:   31:11:D1:89:1E:A7:30:01:0B:4A:CB:AE:D4:51:83:A4:CC:B7:69:CF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2F04011A9CBBF48C2400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d6d03-13c6-3c94-8210-34d3c47880d8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2f:04:01:1a:9c:bb:f4:8c:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=dcb6358f-1455-45f0-a75e-09ecf27d8726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:13:81:9b:4d:c8:e3:cc:8b:22:57:23:f6:
                    11:f9:7e:e2:63:ea:a6:c4:86:20:05:54:8d:90:63:
                    31:10:c2:20:46:e8:ad:b5:95:5c:b4:24:d1:35:a4:
                    2a:f5:17:54:8b:02:0a:af:08:a2:a1:6e:b8:53:b0:
                    f6:49:b8:95:bd:59:4a:af:97:8d:c8:6b:44:72:cc:
                    55:9c:15:6c:60:89:17:53:5e:4c:9f:32:e7:00:21:
                    fe:4b:a2:b0:fa:72:89:1d:bb:d8:dc:84:77:61:48:
                    d2:27:71:ca:2f:8c:25:85:79:e5:14:20:3d:4e:18:
                    d9:d2:34:a1:01:79:ec:f1:80:11:a3:17:be:05:b7:
                    b1:e1:c0:ec:a6:ac:f0:22:28:55:38:d2:6d:96:0f:
                    82:0a:3d:cb:6d:5d:f4:fd:63:64:b3:d9:bd:e0:ad:
                    f2:ff:56:28:6b:cb:d5:b1:44:73:85:5e:12:e8:5d:
                    6a:f7:9b:0c:f7:25:0c:25:04:0d:cf:2d:04:fb:0c:
                    f0:dc:98:bf:aa:90:b5:0d:df:48:80:54:81:af:8f:
                    16:cd:f6:f8:58:d3:d4:98:dd:b0:44:9b:e2:0d:7d:
                    77:af:0d:f5:f8:c2:a2:d7:e0:c9:8b:8e:5c:e5:d0:
                    4b:7d:cc:12:5c:28:ce:0d:ab:fe:7a:a5:c3:4c:fa:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:11:D1:89:1E:A7:30:01:0B:4A:CB:AE:D4:51:83:A4:CC:B7:69:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d6d03-13c6-3c94-8210-34d3c47880d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:2d:1e:38:9e:59:49:03:24:ea:bf:0d:db:78:6c:59:f0:
         5f:ef:91:ed:84:fb:40:51:cd:a2:92:df:00:f5:48:24:60:5f:
         b6:9c:b2:25:94:b2:a9:1b:ce:45:e6:00:fe:4f:d6:d4:22:72:
         b2:ec:cc:41:15:35:b3:74:bb:16:69:b9:ed:35:22:c3:8a:12:
         cf:6b:3b:53:9c:50:3c:0b:13:00:57:a7:32:05:08:40:07:a8:
         df:4b:b4:cc:39:77:a3:a9:c6:ff:af:85:d1:69:6b:cd:26:19:
         02:21:f8:50:4c:c8:4d:bc:97:0e:e5:33:ee:b3:45:a6:7a:ed:
         2a:57:df:fc:6d:95:fd:2a:db:3c:16:83:80:33:0b:f9:68:92:
         17:ac:30:9e:b6:e3:c7:c4:21:7d:d6:69:69:19:0c:e6:c0:74:
         55:0a:35:e2:38:4e:0a:1f:72:77:fa:68:b0:cc:3e:0d:d5:54:
         bb:39:1f:d9:01:e4:1c:0d:3f:b1:a6:c3:c7:d0:ca:ca:0e:a2:
         2d:65:46:15:c1:a5:16:fc:b3:06:53:91:2d:13:a0:a2:5a:e1:
         87:37:06:13:66:33:94:49:cd:dc:25:6f:20:5a:91:05:38:4e:
         79:8d:fa:4f:08:4f:43:a0:2f:4a:2e:bf:c7:d7:c3:62:e6:cb:
         3c:5e:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:51 2025 by rpki-client