Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa
File:                     cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa (raw, json)
Hash identifier:          l8ezZK7NTjhWBZtNNH+T+UykuOB6T4HBeEfUJR4Poxk=
Subject key identifier:   F8:0E:DC:3D:A9:21:2C:4B:13:F9:F2:E5:E4:74:53:14:7B:F1:EC:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8A20361444BB02BCEF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8a:20:36:14:44:bb:02:bc:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=170dad78-f833-47fa-91b4-0c173f19faf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:67:26:14:d1:30:be:c9:51:e9:6e:c5:f4:
                    86:f1:b5:a9:0a:1c:1e:ea:2b:a4:5a:f0:9f:3a:49:
                    aa:df:66:f9:14:2c:8b:4a:fa:d8:5c:33:ad:5c:13:
                    7d:d9:0d:7d:ad:28:75:a8:13:7a:23:16:ac:24:41:
                    f9:f6:12:50:f5:a3:b2:8c:46:b8:6f:31:eb:cc:42:
                    86:29:64:a0:5b:9c:04:95:df:d2:31:fd:86:01:14:
                    ab:15:d9:f4:b4:3f:cd:57:36:22:34:13:b0:7c:37:
                    8d:ff:61:5f:2b:c5:06:7c:3f:db:5e:82:39:25:30:
                    06:23:36:17:03:33:4d:0a:28:f8:e9:fa:88:17:1d:
                    2f:0b:96:dc:fb:f6:5c:68:5b:5c:e9:92:1a:57:d8:
                    75:63:81:05:e9:63:20:14:16:cf:6e:1f:ae:62:f2:
                    f2:cc:68:31:82:1d:f4:44:58:1f:d3:d1:d5:71:3d:
                    84:6a:20:34:21:75:77:34:fe:1e:80:56:ae:ba:10:
                    72:88:f4:b6:29:ef:c0:84:e4:d2:1b:d4:81:2d:72:
                    f5:20:bc:60:1a:40:a7:68:81:59:4e:8e:df:58:21:
                    fb:fe:37:4e:54:b2:4e:4b:64:31:7c:27:3b:20:c5:
                    8e:4e:09:6e:5b:a1:69:fd:ed:1d:d3:39:7c:45:64:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:DC:3D:A9:21:2C:4B:13:F9:F2:E5:E4:74:53:14:7B:F1:EC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd5c253d-7be1-390f-b8f3-6a2fb50cc8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:33:9d:92:1d:cd:62:6d:d8:f4:ce:d4:5e:52:d0:0b:cd:0b:
         46:77:88:53:75:ed:62:c6:c8:06:1e:de:1a:53:9d:e8:da:6a:
         6c:77:b6:83:86:80:fb:24:1c:0b:8c:c8:b7:45:d8:34:f5:5c:
         9d:b2:33:82:88:21:63:69:62:c1:4d:fb:41:aa:60:97:da:f0:
         29:3e:58:6d:f6:b6:9c:1c:99:ed:c5:cf:0a:ad:5a:e9:81:d6:
         fa:55:2f:d3:fe:02:d9:88:17:4b:6e:0b:96:58:5d:8a:8b:57:
         13:75:2a:af:46:52:47:b2:1b:2c:a1:07:66:53:c7:89:ac:c0:
         63:2f:cc:13:02:5e:53:d6:59:0f:1e:48:21:cd:f2:71:06:72:
         b0:56:55:ff:30:0d:35:0f:dd:42:01:5c:5d:17:ed:4e:d3:5c:
         83:ca:6b:ca:e7:ea:c1:e9:f0:8f:3b:c3:ef:c3:10:17:56:b0:
         54:13:19:6e:f3:fa:cc:2d:45:2c:05:fc:2f:10:b0:72:11:eb:
         3b:48:d9:e6:8a:48:ac:39:a9:8e:45:a3:c6:51:ba:77:57:c6:
         b4:e1:f8:44:67:20:af:24:e8:fd:3d:1f:9f:1a:03:bf:71:a8:
         d8:ef:32:5f:91:c4:33:35:bc:e3:c8:98:15:97:4f:78:28:17:
         eb:ba:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:13:53 2025 by rpki-client