Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e611917-ab94-3c65-96d2-f7cb545c9e25.roa
File:                     2e611917-ab94-3c65-96d2-f7cb545c9e25.roa (raw, json)
Hash identifier:          7I95pv+WYUd1q9f5LcMspt0vfKYttLWV8SViDbeI25g=
Subject key identifier:   A5:4C:4B:E0:F0:A4:D0:28:EE:88:45:48:63:36:19:32:64:1B:7D:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F764CAE912795A791C30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e611917-ab94-3c65-96d2-f7cb545c9e25.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f7:64:ca:e9:12:79:5a:79:1c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=89e756f8-ab1f-474f-b4b7-92437b18a018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:03:8c:d4:21:49:3f:bf:06:55:10:eb:5c:
                    c0:75:9f:50:ee:d4:70:d5:0d:53:f6:eb:7f:6a:5e:
                    e2:cd:60:15:27:d2:56:37:11:08:ca:12:26:2c:5f:
                    42:1e:7d:15:5d:87:b7:28:35:79:16:ed:24:b7:3e:
                    97:8c:e0:72:fc:da:b1:d5:22:ff:e9:83:f0:dd:ad:
                    b9:af:f0:e7:86:38:3e:2a:94:d2:f5:cf:01:83:54:
                    e1:e2:7c:8c:24:fd:d4:2c:7c:fa:ee:04:29:2d:bb:
                    6a:bd:87:6f:04:c2:0a:fa:c6:99:f6:e3:71:b4:ca:
                    0f:b1:d2:87:04:85:16:d0:96:60:d6:9c:dc:da:d0:
                    d2:ec:d2:61:2d:70:c3:78:63:e6:4f:2c:dc:aa:18:
                    20:a6:37:a3:0d:9d:da:87:8c:45:e8:b5:23:41:9b:
                    a3:24:f4:c2:36:3e:55:0d:35:b8:50:26:3e:07:ee:
                    e1:4b:ce:fd:25:04:09:6d:dd:e1:2a:19:17:de:d6:
                    57:9c:94:ac:2d:91:25:6a:0f:ba:1e:0a:82:2e:60:
                    24:85:24:6d:42:0e:a9:58:78:4b:88:27:9f:ba:fe:
                    4e:ef:a7:e5:2e:bd:59:11:41:b2:eb:1f:2b:e5:bb:
                    1b:4e:d2:e3:3d:ec:6d:d2:8d:86:62:5b:55:8f:5e:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4C:4B:E0:F0:A4:D0:28:EE:88:45:48:63:36:19:32:64:1B:7D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e611917-ab94-3c65-96d2-f7cb545c9e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:f9:5c:19:49:6f:e9:8b:38:b4:92:9a:c3:da:d6:ad:9c:59:
         2f:79:7a:42:4d:58:43:2a:f9:5e:05:be:42:36:d9:de:cc:47:
         d9:5a:a3:9f:07:8b:66:c2:19:3a:d3:17:80:3c:64:0c:33:36:
         36:9a:59:0f:b2:12:ca:c3:01:13:7f:44:0a:84:c3:2a:52:d6:
         b3:ed:eb:66:b4:d6:32:c7:f9:e8:d2:3d:35:b8:e1:76:c0:01:
         2d:03:b6:98:8c:ff:b9:5c:2d:5b:db:91:8c:66:c3:c4:d3:64:
         dc:dc:e5:67:2d:9a:59:10:39:b4:d1:0a:cf:ff:a6:c8:4e:01:
         da:32:a9:eb:bb:26:6c:7c:c7:9b:4b:7b:cc:67:0f:e6:6d:89:
         c8:fb:b2:8d:ce:2f:cc:a7:d4:61:0d:b5:71:4c:cd:cf:77:e4:
         0f:2a:70:a5:ac:6c:4b:42:14:da:35:0e:db:f3:39:d7:69:3f:
         b8:b8:ee:4b:c3:0e:57:f8:42:8d:9d:07:2a:fc:c4:46:df:8a:
         ad:97:f8:8d:2a:46:1a:3e:00:ad:2f:a1:00:b4:92:ed:99:34:
         20:ce:64:3b:70:af:45:e7:06:26:70:7e:48:84:49:a4:93:68:
         c2:ce:2a:99:b9:c5:8e:f6:fc:4a:f0:ab:6b:91:57:ed:26:7b:
         5c:78:54:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfdkyukSeVp5HDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ODllNzU2ZjgtYWIxZi00NzRmLWI0YjctOTI0MzdiMThhMDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ4DjNQhST+/BlUQ61zAdZ9Q7tRw1Q1T9ut/
al7izWAVJ9JWNxEIyhImLF9CHn0VXYe3KDV5Fu0ktz6XjOBy/Nqx1SL/6YPw3a25
r/Dnhjg+KpTS9c8Bg1Th4nyMJP3ULHz67gQpLbtqvYdvBMIK+saZ9uNxtMoPsdKH
BIUW0JZg1pzc2tDS7NJhLXDDeGPmTyzcqhggpjejDZ3ah4xF6LUjQZujJPTCNj5V
DTW4UCY+B+7hS879JQQJbd3hKhkX3tZXnJSsLZElag+6HgqCLmAkhSRtQg6pWHhL
iCefuv5O76flLr1ZEUGy6x8r5bsbTtLjPext0o2GYltVj17yZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVMS+DwpNAo7ohFSGM2GTJkG31JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmU2MTE5MTctYWI5NC0z
YzY1LTk2ZDItZjdjYjU0NWM5ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokioMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMr5XBlJb+mLOLSSmsPa1q2cWS95ekJNWEMq+V4FvkI22d7MR9lao58H
i2bCGTrTF4A8ZAwzNjaaWQ+yEsrDARN/RAqEwypS1rPt62a01jLH+ejSPTW44XbA
AS0DtpiM/7lcLVvbkYxmw8TTZNzc5WctmlkQObTRCs//pshOAdoyqeu7Jmx8x5tL
e8xnD+Zticj7so3OL8yn1GENtXFMzc935A8qcKWsbEtCFNo1DtvzOddpP7i47kvD
Dlf4Qo2dByr8xEbfiq2X+I0qRho+AK0voQC0ku2ZNCDOZDtwr0XnBiZwfkiESaST
aMLOKpm5xY72/Erwq2uRV+0me1x4VDM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:24 2025 by rpki-client