Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa
File:                     30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa (raw, json)
Hash identifier:          yZ/x3nFechrBVTUBJ66E9J03rV4k+Jr2aKgPTj819s4=
Subject key identifier:   81:B7:A1:0A:50:23:DD:A2:73:2A:8F:23:5A:9B:89:76:DC:94:AF:D2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F97330D3792DEB6901C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f9:73:30:d3:79:2d:eb:69:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0fe33ae5-c929-419e-8f2c-68ef1f1652b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:1a:5d:15:c2:01:45:18:eb:d7:50:44:2c:
                    a8:63:45:f9:0b:9d:ee:22:b8:5e:85:f4:91:b4:88:
                    9e:57:42:5c:a6:21:58:d4:f6:78:69:88:f7:8f:e4:
                    43:7f:aa:70:9a:56:db:8c:67:96:fc:88:3c:35:d9:
                    6e:a9:25:f3:a0:c0:8d:d5:6f:88:8a:90:2d:f4:68:
                    3c:ff:07:28:e5:59:c1:5a:af:f2:a4:81:e1:aa:ee:
                    c7:c7:e0:a5:9a:a6:77:5c:d8:ed:a9:2c:d9:17:c5:
                    cc:19:c2:2f:9d:52:a0:8e:a3:38:3f:4f:c1:fa:10:
                    ac:44:4e:16:5b:46:95:00:08:61:74:09:a3:73:43:
                    28:cb:20:ff:ac:9b:1d:77:ef:43:1b:39:63:6c:6c:
                    ad:e4:45:ab:ab:c0:2a:93:26:7b:66:d1:58:58:24:
                    80:77:c0:e8:cf:27:31:e6:ef:e3:af:e6:6f:60:b3:
                    37:71:c7:13:d3:dc:c9:15:f1:a2:d8:74:9b:9e:dc:
                    35:64:51:1c:53:20:d2:dc:ed:42:d5:f2:f3:57:0d:
                    f0:ac:9c:32:63:5e:42:e2:c1:3a:79:14:35:44:ef:
                    43:46:74:c2:62:3e:e0:86:41:bb:e5:a9:94:41:b1:
                    ba:1b:44:d0:9c:3f:f2:0a:d2:19:68:d5:be:13:4f:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B7:A1:0A:50:23:DD:A2:73:2A:8F:23:5A:9B:89:76:DC:94:AF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30915cbd-858f-3c08-9ed3-5fdb6f1e3a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ee:a8:44:e6:4b:09:a3:93:01:4e:44:d7:9d:7a:a4:1b:60:
         15:1b:6b:8e:ce:ea:16:5c:0e:11:f4:ac:77:a7:9f:63:94:bd:
         81:04:89:03:bd:57:7c:aa:36:bb:8b:e5:4d:a2:50:98:90:98:
         14:ec:03:ea:5d:ea:3b:47:bc:59:27:80:f5:94:b0:0e:28:40:
         c3:97:b1:a6:82:f1:18:28:95:43:3e:2a:03:88:cc:bf:bc:e3:
         fd:df:2c:d4:aa:a8:43:b7:a1:3e:04:89:2a:06:24:ac:18:de:
         c1:9c:9d:52:c3:33:c1:4e:5d:9d:3d:e9:49:44:89:28:79:c9:
         4f:fd:52:4d:e5:3f:4c:dc:80:2f:b0:4e:14:30:0f:e3:ad:61:
         87:cf:97:14:dd:59:8e:de:56:f2:a4:3c:dc:b1:58:34:9d:19:
         f3:ae:13:84:8d:30:0d:e9:c6:99:c1:cb:ea:ff:60:03:72:a8:
         d8:a7:7d:20:08:d8:22:1f:15:17:0a:81:bf:73:5f:94:82:85:
         c5:c6:83:3a:1d:7d:05:d7:dd:40:4e:94:4a:54:a8:9a:4f:e9:
         e1:16:de:fa:5b:43:b8:dc:7b:af:22:a6:48:53:eb:83:6d:11:
         55:50:e5:bb:95:72:88:9b:6c:c1:41:cd:fb:d7:47:08:5f:d0:
         d6:4e:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:10 2025 by rpki-client