Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f566a455-ebc3-39fe-893a-9849d3b03c0f.roa
File:                     f566a455-ebc3-39fe-893a-9849d3b03c0f.roa (raw, json)
Hash identifier:          jRcvMtH2AN1xVeod5BmMAR+g3D6JLEEMYEBwyUHwvZQ=
Subject key identifier:   DA:2B:88:1C:ED:54:96:65:88:1A:E3:70:EC:DA:29:AC:CB:50:CE:FF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8D04B8911F7CC198FF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f566a455-ebc3-39fe-893a-9849d3b03c0f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8d:04:b8:91:1f:7c:c1:98:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a57a4db9-39cc-4bf6-ad7f-d7f315864672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:05:8f:83:76:c4:f7:53:44:87:5a:79:92:
                    cd:09:37:aa:a5:cb:c0:39:7f:61:ca:ce:de:11:52:
                    77:24:11:cf:10:1b:b8:ed:55:61:4f:61:0a:2d:0b:
                    0e:50:a1:e6:2f:0e:ad:3f:e7:de:7a:c6:45:55:3f:
                    3e:f2:03:15:b8:75:fc:b7:64:41:0e:7e:58:9d:ec:
                    59:39:b1:77:35:fd:6e:0a:5f:78:a3:a6:d9:1f:f4:
                    34:83:6b:fb:63:9e:ca:de:22:39:06:0e:89:17:97:
                    95:f1:09:d6:f9:a8:91:2f:ab:d9:08:0a:7c:de:81:
                    9e:a4:ed:f1:98:cc:7f:2b:0e:ec:68:9b:b8:13:28:
                    dc:f9:18:7e:25:eb:e9:2b:23:c6:13:5b:41:7d:f7:
                    3b:35:48:e0:05:cf:81:b7:b3:59:6b:82:a2:94:97:
                    29:2f:2b:7a:b6:a2:cf:58:ed:18:67:9a:6f:b2:e7:
                    c3:03:88:eb:d5:a9:21:0e:a1:b6:de:64:ec:95:ef:
                    c4:b3:14:d6:2c:6e:6a:dc:aa:09:47:f8:75:5c:1c:
                    47:28:ad:be:33:f1:a3:52:4b:b2:19:14:bb:46:0e:
                    27:24:70:30:83:fa:fb:69:f3:36:b1:36:70:e5:55:
                    61:6d:5e:f7:d2:d1:51:90:84:df:3d:b3:f5:d6:f6:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2B:88:1C:ED:54:96:65:88:1A:E3:70:EC:DA:29:AC:CB:50:CE:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f566a455-ebc3-39fe-893a-9849d3b03c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:31:7d:c3:70:47:d6:04:3a:c4:75:36:5c:e0:83:8d:a7:
         e1:0f:2e:e4:d0:49:e2:26:97:da:9f:a1:70:1f:4e:61:9d:ac:
         fe:1c:c0:01:bf:4d:72:c4:a8:23:59:9c:a7:e4:b7:83:77:8c:
         0c:d4:92:0f:f8:12:62:49:15:b1:22:c8:d5:ae:fe:ad:24:da:
         fd:7a:55:10:1f:d1:7f:a9:72:e8:3a:c1:f9:0c:8f:42:53:d5:
         2c:63:16:52:a3:0b:ff:0d:65:2c:07:60:4c:dd:83:d8:4b:6b:
         30:9e:49:97:6e:af:82:68:d1:b7:d4:87:73:a8:40:d1:cf:84:
         fb:c6:fb:b5:2a:87:e8:ba:c1:b2:78:5a:ae:32:5e:fb:db:85:
         cd:a0:38:5a:aa:21:20:cc:26:86:5d:4d:6d:e0:81:00:3c:c3:
         94:60:04:f4:69:88:76:b5:2a:ef:55:b9:07:99:64:d8:55:f5:
         30:45:06:f9:83:ae:8a:0d:47:40:a5:50:11:d5:4e:fc:23:83:
         74:b8:ed:3d:d2:8b:28:bb:a7:2a:6c:ae:38:20:f8:2c:99:0f:
         79:b5:52:02:66:cb:60:3b:a2:0c:88:b3:13:b8:88:a9:ca:51:
         8f:9b:79:5a:48:de:5e:3a:09:f2:3a:4b:13:22:3d:5d:53:9b:
         18:94:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:28 2025 by rpki-client