Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa
File:                     69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa (raw, json)
Hash identifier:          JBY6vu0m2cUXGMUB/5fMdF/lgLIQpQqg4WkdifQkhQQ=
Subject key identifier:   7E:A9:98:F8:A2:FA:15:37:88:CC:92:E2:F3:B0:FF:4D:72:CA:56:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8DFD00FED6AAFFEA1600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8d:fd:00:fe:d6:aa:ff:ea:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=800c2123-5213-41b0-a57d-310683ca402c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:c0:3d:73:a4:cf:77:6c:7d:1a:11:6e:28:
                    70:c6:e4:64:69:b0:cb:71:9c:cc:78:1c:4b:82:34:
                    61:15:06:66:18:a2:f2:52:3d:f8:d5:c0:f7:2a:52:
                    68:cd:5e:d4:28:02:ed:d0:6e:12:14:37:99:ec:37:
                    4f:68:f3:13:b1:f2:9e:7b:07:0d:d7:e0:50:2b:27:
                    c5:b6:9b:b0:af:02:3e:90:11:c0:ce:80:ca:a0:97:
                    27:aa:dc:46:a7:e4:f3:9d:37:67:f6:43:16:e2:25:
                    8c:a7:da:58:83:7f:c3:41:6e:6f:9e:2e:e6:b7:fe:
                    f0:97:5e:8d:74:4b:b3:c0:23:d9:29:6d:d9:f6:67:
                    05:3d:1a:7d:0a:53:78:13:97:ea:2b:e5:f4:7f:7e:
                    6d:35:52:50:48:dc:bb:54:58:76:03:ab:41:44:c0:
                    2e:ea:b7:31:bc:f3:13:3b:84:1a:05:dd:c3:b4:d4:
                    16:d2:16:fa:20:a8:80:41:11:85:d8:8d:da:dd:0c:
                    70:e5:e8:3c:44:9c:c6:47:9b:95:5d:49:84:2e:c9:
                    65:f6:90:0b:42:fe:e7:5e:07:c2:f6:d5:f3:05:31:
                    14:ad:18:8e:87:38:13:99:c6:88:25:a0:b9:61:d6:
                    12:b7:30:b1:c0:44:ff:eb:a2:29:17:fe:39:13:24:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:98:F8:A2:FA:15:37:88:CC:92:E2:F3:B0:FF:4D:72:CA:56:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f47a6d-dfe1-3b6b-aeb4-fa5fe17bb271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:81:9f:6e:27:9a:6d:3d:59:4d:28:d5:f4:1e:be:c2:50:
         49:22:6c:8d:31:47:c0:d1:d0:ba:80:82:43:a8:d5:f3:53:74:
         8e:40:40:bc:b1:57:f8:0a:d5:8f:17:bc:35:e5:60:6a:1c:2c:
         32:6b:62:8f:9a:3a:db:49:a2:ae:60:be:f2:15:00:6e:ab:a5:
         59:29:ee:e9:42:b3:9f:83:61:76:67:4a:9d:4e:ab:85:ad:5c:
         b6:38:7c:54:11:98:af:11:60:cf:1a:01:07:64:e9:04:b0:2c:
         1a:14:46:86:cb:b0:b8:1c:a7:7f:b3:13:9a:d8:ba:e2:9a:2f:
         2e:98:25:fb:e0:00:e9:25:5b:38:08:31:4b:23:5f:11:cd:94:
         d5:73:79:3d:b0:61:a8:6e:80:a3:b9:f7:ed:d2:b2:56:c3:bd:
         aa:47:8b:b7:ff:45:e1:fa:e2:54:83:b0:36:01:b3:e9:19:82:
         4f:67:b1:24:3b:b2:31:c9:0d:fa:ef:b2:c8:fd:26:ee:1e:48:
         54:ce:00:9f:70:5f:f5:79:65:38:b6:90:be:46:79:f6:5e:3e:
         12:e4:05:c3:3b:ed:4c:36:43:b6:6e:1f:2c:d1:33:24:dc:64:
         13:4b:19:27:26:63:e5:61:c9:f7:52:34:ee:5a:9e:77:36:ef:
         90:ee:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:57:11 2025 by rpki-client