Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa
File:                     e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa (raw, json)
Hash identifier:          N4QArTW92Fkr42TNRi5+oJ4Ihfwh33SWhaXOgOvt27k=
Subject key identifier:   C8:F8:7C:C3:72:BD:24:8B:FE:6E:C2:48:38:11:37:49:17:77:8B:A9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8D3FCFF549304B960780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8d:3f:cf:f5:49:30:4b:96:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1b0f29a2-1557-4d47-99cf-dfe9bd241675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:41:b8:7d:22:1e:4f:87:70:e2:57:d0:23:
                    38:50:e2:5e:a7:e0:da:8c:76:99:c7:46:a3:36:46:
                    92:11:e7:71:72:38:84:3c:24:0f:37:3a:c9:2a:77:
                    98:b8:3a:67:b0:81:dc:63:92:b7:cf:85:bc:4f:42:
                    ed:ca:39:b7:4d:45:3a:fe:22:3f:67:da:a7:b8:37:
                    a5:10:90:5a:2c:f6:bc:84:1d:33:9d:fe:4a:d6:3f:
                    72:40:4c:34:4b:14:2d:6f:52:ab:04:59:a7:37:43:
                    6e:ba:0b:6d:04:74:38:21:ed:08:b1:97:05:04:1b:
                    08:fa:c7:c6:1f:87:2a:a3:f1:e2:e3:c5:87:57:a6:
                    ba:5f:bc:b3:a1:be:e7:66:54:ea:1b:e3:97:fe:16:
                    54:1e:73:70:06:09:85:c7:17:5a:31:56:fc:a0:08:
                    4d:a8:7d:11:71:85:36:30:19:89:d7:b9:7a:d8:c9:
                    31:a2:19:c4:74:9a:c1:0b:09:05:d5:73:4c:9c:18:
                    6a:ae:04:53:7d:ad:2c:38:fb:19:4d:07:b4:a5:55:
                    dd:ef:8b:8f:cf:80:3e:1e:c5:8e:fe:ff:1c:56:83:
                    b4:31:11:5d:b7:45:07:e8:be:36:11:df:fe:af:c3:
                    a9:71:a7:99:b6:1a:81:8f:f0:fa:5c:99:1d:13:63:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:7C:C3:72:BD:24:8B:FE:6E:C2:48:38:11:37:49:17:77:8B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:42:ac:ec:e4:ff:f3:95:59:90:ab:97:72:57:06:7f:e1:
         49:ef:bd:71:7b:99:5a:67:54:d1:09:d7:8e:cf:c7:65:b8:bc:
         80:1c:20:58:6e:ac:f3:b0:b0:1c:65:d1:39:30:ab:b0:f9:e9:
         d4:67:92:4d:c4:3d:53:a0:96:41:c1:3c:f6:c6:29:f0:37:c1:
         dc:99:fe:8f:20:fe:70:1e:f6:f3:f3:b2:20:cf:25:30:b4:59:
         aa:8f:c0:a9:cd:01:31:e9:89:a7:8b:02:3e:a3:d8:a5:ee:15:
         ca:73:51:64:6c:7f:e2:4c:44:ca:89:e5:c7:52:ee:2f:83:05:
         56:a8:51:a8:8e:e8:19:96:ee:0d:b2:1e:9e:fe:4c:bd:a5:dd:
         c6:34:10:74:1d:a6:29:3b:58:1d:b5:d3:bc:56:c4:09:f8:22:
         01:01:b1:c0:a4:d5:6d:e7:e9:eb:91:b2:df:b5:d8:0f:e2:a2:
         16:80:42:81:77:8a:cd:dd:50:f1:63:ff:be:66:36:59:7c:6c:
         58:99:ce:2d:8d:87:b2:16:e8:05:04:ca:d0:7f:4b:43:83:c2:
         43:98:46:92:b1:66:97:82:46:4e:44:88:b2:c3:4d:cc:47:d9:
         0b:d5:c4:05:0f:11:f4:ac:8b:c9:fa:8c:ad:85:82:2c:c3:38:
         30:06:79:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo0/z/VJMEuWB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MWIwZjI5YTItMTU1Ny00ZDQ3LTk5Y2YtZGZlOWJkMjQxNjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrVBuH0iHk+HcOJX0CM4UOJep+DajHaZx0aj
NkaSEedxcjiEPCQPNzrJKneYuDpnsIHcY5K3z4W8T0Ltyjm3TUU6/iI/Z9qnuDel
EJBaLPa8hB0znf5K1j9yQEw0SxQtb1KrBFmnN0NuugttBHQ4Ie0IsZcFBBsI+sfG
H4cqo/Hi48WHV6a6X7yzob7nZlTqG+OX/hZUHnNwBgmFxxdaMVb8oAhNqH0RcYU2
MBmJ17l62MkxohnEdJrBCwkF1XNMnBhqrgRTfa0sOPsZTQe0pVXd74uPz4A+HsWO
/v8cVoO0MRFdt0UH6L42Ed/+r8OpcaeZthqBj/D6XJkdE2MiWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMj4fMNyvSSL/m7CSDgRN0kXd4upMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTczNWQ1YzUtNjk3MC0z
ZDdlLWFlMTItYmViNWE0ZDg5Mzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADx+Qqzs5P/zlVmQq5dyVwZ/4UnvvXF7mVpnVNEJ147Px2W4vIAcIFhu
rPOwsBxl0Tkwq7D56dRnkk3EPVOglkHBPPbGKfA3wdyZ/o8g/nAe9vPzsiDPJTC0
WaqPwKnNATHpiaeLAj6j2KXuFcpzUWRsf+JMRMqJ5cdS7i+DBVaoUaiO6BmW7g2y
Hp7+TL2l3cY0EHQdpik7WB2107xWxAn4IgEBscCk1W3n6euRst+12A/iohaAQoF3
is3dUPFj/75mNll8bFiZzi2Nh7IW6AUEytB/S0ODwkOYRpKxZpeCRk5EiLLDTcxH
2QvVxAUPEfSsi8n6jK2FgizDODAGeZ4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:21 2025 by rpki-client