Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa
File:                     b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa (raw, json)
Hash identifier:          BbwC3ZdQJx0RvX/2uMZskBBzHAdejPArsqOwSQBU6ts=
Subject key identifier:   65:57:D6:7F:DF:87:A9:FE:08:72:30:E8:DD:D1:AF:E4:61:05:3E:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8AEDA2D8AD3CB9FD8FD0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8a:ed:a2:d8:ad:3c:b9:fd:8f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2a13a42c-c243-4cf5-8062-05515e6c4a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:51:fe:4d:0c:74:a6:9f:9e:3b:d5:71:20:
                    d7:07:b7:d2:9d:a7:fe:9f:92:f1:8d:db:0f:6f:cb:
                    3e:3f:2d:4e:c1:31:00:97:d7:4a:85:b2:33:67:c1:
                    5f:d2:73:71:3d:22:62:f3:71:0b:2f:ed:62:28:81:
                    1f:54:29:61:9e:e9:fa:4b:5a:06:c0:6e:a5:70:76:
                    2b:89:de:5d:86:15:53:5b:ac:e3:93:ae:f2:4f:1f:
                    c6:16:75:60:0f:90:30:75:e5:bc:70:0a:be:3c:f4:
                    ea:7b:c6:db:ed:2a:92:e3:70:0d:d3:77:f6:30:a4:
                    52:e5:81:d6:9e:07:37:e7:ef:76:c5:41:20:ac:3b:
                    72:57:97:06:06:69:81:16:31:49:9a:64:a9:4d:68:
                    ae:3f:da:8d:59:07:49:a5:2f:14:de:ba:9c:7b:4d:
                    e5:b9:b2:07:19:32:39:1f:05:d8:a2:c4:86:40:45:
                    a1:3a:bd:af:d5:b6:a9:54:3e:14:9c:db:d9:0d:12:
                    51:78:23:8d:bc:24:3f:7c:3d:59:e5:6f:56:6d:38:
                    6d:64:53:94:04:c5:da:e8:d2:61:0d:23:c1:c0:42:
                    9d:73:21:ed:37:0e:99:c9:b1:22:f3:32:86:46:05:
                    5d:69:07:71:cc:fc:21:3b:89:c5:86:34:d9:7f:3d:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:D6:7F:DF:87:A9:FE:08:72:30:E8:DD:D1:AF:E4:61:05:3E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b92dfe30-3f7b-344e-b2d3-c9eebde412dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:33:8f:3c:c5:3e:6f:3e:55:c5:02:e7:58:2e:bd:48:cf:b0:
         78:b8:57:e3:58:09:35:74:f3:22:a4:df:e6:9b:27:9c:d9:23:
         4c:be:45:f4:f7:24:a7:32:90:f7:35:0a:1c:7b:00:d2:3d:da:
         05:14:c0:4d:34:57:4b:99:64:dc:47:80:d8:03:ff:bc:90:1a:
         d0:18:da:ba:d8:e7:79:11:76:79:32:8e:26:74:f2:6d:85:bb:
         f0:73:62:00:a0:02:09:fb:ad:60:34:c3:31:e6:aa:44:09:9d:
         9e:1e:1f:6e:b8:0e:11:a9:3f:8e:75:08:01:01:ac:95:61:9e:
         5e:49:b1:6f:b8:a6:94:24:5a:46:3f:94:25:a6:f6:04:37:4f:
         8d:46:f4:3a:4a:c1:a5:eb:e5:26:24:a9:e3:83:86:ac:3d:71:
         c3:07:98:2f:dd:77:1b:e5:01:d5:2b:96:87:4a:8f:81:5b:6a:
         85:72:03:d3:8d:59:20:a1:cd:a5:cf:7c:f1:46:63:be:34:bf:
         74:0b:d6:06:3e:aa:75:3a:95:b6:69:9e:2b:94:8a:31:15:e8:
         fc:fd:af:4e:c2:76:a0:b7:6e:79:27:f4:8c:ba:56:be:7c:7a:
         ae:39:6c:b4:b3:54:4c:db:f5:16:65:65:ea:8b:1b:77:e8:29:
         ea:ed:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:51 2025 by rpki-client