Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f4bb15e-0609-377f-a1dc-beb5d200f931.roa
File:                     2f4bb15e-0609-377f-a1dc-beb5d200f931.roa (raw, json)
Hash identifier:          qhln7tB5TzPVxWlqpgcA51RvkP8QEBn2SmaFIQO/ofo=
Subject key identifier:   82:CD:BE:CB:11:9B:20:1E:70:1F:54:AB:AF:33:4A:D7:04:00:96:68
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113DA5E563E253D4F6D100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f4bb15e-0609-377f-a1dc-beb5d200f931.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:3d:a5:e5:63:e2:53:d4:f6:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f02e4c58-40ed-4195-8f5b-1c025d8fff77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:83:a9:c0:95:c1:61:1c:78:d7:8c:f8:ff:
                    da:61:b8:36:5d:db:d9:b7:ee:c6:3f:bb:6f:cc:01:
                    90:e8:96:c8:b9:9b:9e:8f:49:50:98:36:39:a8:6b:
                    97:77:13:7d:cd:b4:a1:b0:62:97:b7:91:c8:bc:28:
                    53:8d:51:f0:84:fa:81:89:25:98:5d:67:69:15:02:
                    c3:20:aa:2d:0d:b8:25:ba:b2:3c:a8:eb:bb:69:2a:
                    18:9c:48:e6:06:50:22:59:a0:b6:c8:51:b5:17:37:
                    85:92:ea:d6:54:74:a4:75:c8:b5:7d:ac:93:99:c8:
                    b2:84:51:ed:66:2a:8b:bb:9f:90:df:70:48:7d:ca:
                    a4:6e:ed:5c:ca:fc:42:46:69:05:fb:7a:26:79:df:
                    36:a9:b7:65:8d:cb:47:71:2c:ee:78:fa:6a:de:54:
                    6b:00:7c:b6:2b:80:31:14:86:d2:e0:14:2c:c7:d0:
                    27:f5:b7:f2:c5:a5:88:38:c9:df:c8:96:d4:c3:17:
                    20:00:13:86:d9:cd:97:73:20:cc:82:9f:14:db:00:
                    16:b7:13:8d:c1:2c:10:4a:9c:97:b6:82:55:f5:65:
                    a7:84:2a:2e:88:18:55:50:38:1a:6b:43:93:45:7e:
                    18:5a:55:68:b4:01:42:47:ea:64:ac:89:58:46:f3:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:BE:CB:11:9B:20:1E:70:1F:54:AB:AF:33:4A:D7:04:00:96:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f4bb15e-0609-377f-a1dc-beb5d200f931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:95:94:16:12:b5:b3:f3:7b:5d:77:7d:22:b2:9f:45:95:d9:
         2c:ca:ee:78:bb:a8:b9:12:b5:0b:c6:a7:51:bd:cf:23:e0:19:
         88:c3:be:94:8f:0d:39:70:85:24:04:df:a3:5a:28:bc:6d:a4:
         56:f3:12:c6:36:55:8f:10:2d:30:95:f5:6b:5e:1f:01:20:f3:
         19:0d:58:aa:66:4c:2b:a9:f2:9d:ff:16:ec:86:f7:2b:ae:06:
         84:7c:47:7a:8e:fe:64:68:76:89:9f:53:18:09:42:dc:85:0e:
         5b:16:24:34:45:0f:97:bc:e5:13:fd:e5:5e:00:94:66:cc:af:
         89:54:76:18:62:b6:1d:07:c5:cd:1f:a1:4d:9d:f4:02:d1:5b:
         5c:6a:ad:00:e6:df:b0:89:fd:44:03:c3:97:b8:16:15:01:1d:
         4f:d5:1c:17:2c:62:88:61:a5:f1:84:f0:93:a1:7c:15:bb:1a:
         be:98:f6:bc:bf:7c:af:a7:5b:cc:7b:ae:fe:20:3a:1d:33:dc:
         8a:5c:66:88:d5:1d:70:ee:a1:08:ff:e2:f8:65:f5:cb:18:65:
         71:89:4c:44:69:d7:9e:cf:94:a4:02:7b:cd:33:64:79:bd:cf:
         01:d3:2b:10:1b:86:bc:da:50:00:82:b6:50:fe:54:9e:30:69:
         3b:8d:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:25 2025 by rpki-client