Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa
File:                     01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa (raw, json)
Hash identifier:          4M54FBGP+DMb+mDCOkHZkjRCh8VVwji3zDzY4WOZEQQ=
Subject key identifier:   F8:B3:61:FB:2A:D1:AA:EF:DE:8B:5C:4D:E4:0B:DF:07:B2:9A:49:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110EDEDC561E544E190B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:0e:de:dc:56:1e:54:4e:19:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4da13251-4871-4316-9ab3-b80c735fe8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:13:d7:16:d5:07:25:39:8c:fd:80:51:95:
                    9c:1a:8d:71:df:cf:dd:3e:3b:03:f4:34:27:2c:eb:
                    b6:67:85:0b:d4:a7:18:f7:2a:cb:7d:e3:40:fd:e6:
                    c6:76:5d:84:b3:dd:ce:78:b5:ab:15:86:e7:9c:c3:
                    e6:dd:39:4f:58:07:4e:b1:6a:84:38:69:ca:ad:7e:
                    c3:14:5d:3e:4d:03:1a:fc:df:40:ce:97:c0:f8:8d:
                    7f:4e:88:68:aa:10:94:26:6a:7f:88:3e:f4:4f:36:
                    95:28:f8:dd:35:4d:57:00:8a:90:e1:5d:66:d5:62:
                    b5:3d:40:90:33:9b:25:f5:7a:f1:bd:2a:7a:bd:81:
                    9a:c0:c9:52:e2:f3:96:d8:fa:da:25:51:b3:4d:b4:
                    ef:66:59:2a:6e:67:78:8a:ae:00:93:f1:c7:41:48:
                    0a:6b:82:ea:7d:7e:3c:c7:a7:a1:82:e8:88:43:c9:
                    94:54:e0:67:e6:ed:2a:ee:76:7f:10:57:79:97:85:
                    ea:52:03:a1:ea:48:e0:3e:38:b5:61:e6:f7:85:b2:
                    bc:ab:a8:00:d2:44:09:6b:b1:76:9e:b0:44:92:ae:
                    a4:0d:4b:82:47:1c:5e:7e:69:af:ad:b5:63:6e:1d:
                    26:a5:45:06:43:87:0e:ea:b8:99:18:f8:a9:13:10:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:61:FB:2A:D1:AA:EF:DE:8B:5C:4D:E4:0B:DF:07:B2:9A:49:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b4:51:81:65:97:6e:56:30:a9:1d:ca:41:db:90:7d:a0:3a:
         04:a0:69:63:00:bc:64:94:94:ba:cd:d3:23:5c:b1:d7:24:a3:
         07:5f:5a:8b:34:d6:89:46:40:d3:3a:19:f5:26:aa:95:12:30:
         28:ce:f8:92:83:92:09:ab:71:38:f9:b9:35:60:7b:5e:23:7a:
         a6:e6:88:ac:d1:92:02:2c:94:d8:a7:a3:68:57:74:18:e6:59:
         18:e2:a0:b3:6b:3d:8c:79:74:83:38:f5:24:fe:95:01:83:72:
         e8:b0:60:d5:2f:46:71:c0:8a:73:d5:39:52:33:d1:c9:90:0c:
         ba:9d:8c:e6:94:7e:2a:e8:f3:33:2f:89:b4:0c:e3:a1:bd:79:
         be:b6:db:b2:fd:fe:32:b1:8b:52:ac:fd:f0:d8:ff:4f:7b:da:
         2e:18:a3:d8:cb:55:59:8b:a0:6f:34:22:f5:23:fa:da:81:59:
         c1:84:05:0e:5e:ad:3b:2e:7f:1e:fe:7c:04:08:f1:2d:be:68:
         34:26:de:82:9e:3d:0f:9e:0d:88:f4:b3:04:50:ce:c7:17:c3:
         16:eb:61:03:39:83:84:49:a6:d6:a6:9f:65:ec:3a:c0:08:27:
         01:01:e4:e9:72:19:a2:4a:3c:45:ee:20:89:61:fa:c9:ea:71:
         50:f9:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:57 2025 by rpki-client