Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa
File:                     8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa (raw, json)
Hash identifier:          7yWQxKOWM3vZpmBTzyjQwNKryl5/dcY0KKxVlYh67Z4=
Subject key identifier:   28:C8:A6:03:9F:4A:B6:55:46:14:DA:E7:41:35:C8:B5:99:8C:81:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB3A2206AC4EE540F42480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.243.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:3a:22:06:ac:4e:e5:40:f4:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9f4e34bb-2879-42ea-af87-3cf3bbc4d3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:6c:90:bd:39:fa:02:af:f4:61:3d:8a:1b:
                    b7:72:49:dc:22:45:87:84:6c:50:a2:26:79:02:b2:
                    46:67:27:06:84:dd:d0:4e:d3:57:bf:0d:f8:b5:e5:
                    12:95:d2:6c:30:43:a4:c5:69:28:ae:0e:b0:33:6e:
                    11:17:56:66:25:32:47:04:a0:a0:0a:ef:b9:a4:f9:
                    24:8f:2e:5d:dd:f1:0d:20:c3:07:76:60:f6:27:57:
                    be:8d:ad:71:3f:2a:a0:c8:50:b2:e4:c5:66:43:f3:
                    b7:91:49:27:ef:ad:a6:87:aa:fb:f1:0a:64:fd:d1:
                    53:2b:ad:43:d6:af:0d:66:b3:66:76:88:27:4e:de:
                    14:04:1b:56:69:fb:10:66:07:c1:ef:ee:06:bf:b0:
                    9b:fb:26:02:9f:6c:50:46:78:82:26:76:40:6f:8c:
                    e0:83:48:0d:02:cb:5a:03:17:24:97:15:96:07:86:
                    3f:f2:cd:17:14:f4:19:84:68:8b:f2:49:b5:1a:91:
                    b4:0b:c1:c7:b5:a2:57:43:cc:e8:bb:53:83:6b:aa:
                    59:48:94:25:12:51:12:94:ec:a6:ab:11:e1:84:50:
                    f6:1c:b1:af:9a:94:fc:2c:18:13:d5:a4:c7:e5:2c:
                    8d:20:83:9d:2a:d0:97:c3:ef:6d:8a:69:5b:3c:97:
                    ea:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:A6:03:9F:4A:B6:55:46:14:DA:E7:41:35:C8:B5:99:8C:81:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:dd:c1:7d:a8:96:de:28:1d:f4:0e:b2:56:c9:f7:0f:cb:
         55:06:0e:9e:29:ea:f9:59:11:3a:00:d0:84:88:80:1a:57:0f:
         0e:bc:7c:3f:14:2e:bf:82:1d:4e:65:79:ac:f4:5f:dc:29:ce:
         24:9f:4e:7d:78:1a:7c:77:97:c8:7e:7f:b5:0c:07:14:a6:f7:
         4c:b8:65:6b:56:54:d4:53:7f:5a:c5:97:03:2e:41:7f:b8:58:
         8e:03:07:71:12:3b:cc:e9:c7:cc:95:e1:ca:18:dc:19:0c:2f:
         aa:70:af:12:61:a9:67:43:37:e5:87:c5:56:9f:70:2b:6b:65:
         b2:48:fa:37:52:53:b3:3b:44:e0:f4:3d:b9:1d:29:3f:3d:69:
         8b:e2:c0:78:4a:5c:f6:b9:cd:6e:5c:27:4d:a2:9b:3d:38:3d:
         89:30:7f:26:1d:c7:bb:9a:bc:9b:88:ed:78:3b:f4:6d:b3:c3:
         64:6e:cd:23:82:cb:ed:19:8a:4b:73:65:93:32:63:91:96:45:
         d9:69:a1:be:d6:98:c6:26:02:e2:df:10:73:22:c6:c1:fd:3e:
         6d:1b:a5:51:e7:ff:eb:2c:ef:1d:e2:bd:69:95:34:c1:ad:25:
         0f:31:7a:b3:91:19:07:26:05:37:0d:b6:fa:ad:76:c4:ca:0b:
         66:47:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:14:02 2025 by rpki-client