Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53c62e60-172d-371f-8bea-6f0a906bfbe5.roa
File:                     53c62e60-172d-371f-8bea-6f0a906bfbe5.roa (raw, json)
Hash identifier:          d4PpotDcctDiWFoOV7Pa8/U2HmyadjX8XvYEvsTyIPw=
Subject key identifier:   CC:1C:B2:2F:34:9E:29:C4:A4:56:D7:7C:B0:00:04:F4:0B:B1:8A:14
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411B53FC21E2B64BB33B980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53c62e60-172d-371f-8bea-6f0a906bfbe5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:b5:3f:c2:1e:2b:64:bb:33:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c2e16cbf-e16e-43f8-8176-f6307bd21bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:55:40:79:26:5e:5b:3d:b7:0b:78:e2:00:
                    0e:ca:db:6b:4e:fe:d5:54:f2:25:0f:7c:4c:c9:94:
                    25:de:ab:fb:00:4f:4e:02:6e:92:c0:ed:0c:09:66:
                    b8:d4:4b:84:ba:e3:76:14:94:74:d4:68:90:62:a8:
                    59:d5:cc:9e:6d:85:f1:06:4e:a6:f6:d4:5a:09:7c:
                    53:c8:e5:10:72:11:38:31:76:93:8d:b9:89:e8:53:
                    48:e4:b3:64:78:b3:32:a3:d7:b0:c0:51:7f:70:04:
                    52:79:26:1f:b6:d3:2f:4a:21:45:e3:bd:bc:29:34:
                    ea:cc:c1:db:46:d2:86:17:b1:1b:b5:99:2f:92:53:
                    87:d0:a7:eb:6b:3d:06:6f:74:d1:e9:16:f7:58:8c:
                    cb:1b:58:76:3d:e2:cb:e3:ca:04:f8:56:ed:02:b2:
                    92:98:72:50:7b:95:16:13:97:39:93:5f:e1:30:2e:
                    72:e5:d4:b4:f3:ab:9a:15:6e:b0:41:1f:6d:80:08:
                    c6:e1:0e:70:10:7f:0d:0a:97:b1:f6:c8:1d:49:f8:
                    f8:1e:d0:af:dd:f0:84:a0:e2:9b:84:82:ac:c0:6d:
                    14:64:ef:c4:22:43:77:80:e4:c4:20:69:7e:39:03:
                    da:9f:3f:46:bb:97:ce:aa:9c:1d:07:6c:fc:d1:be:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:B2:2F:34:9E:29:C4:A4:56:D7:7C:B0:00:04:F4:0B:B1:8A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53c62e60-172d-371f-8bea-6f0a906bfbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:74:c4:9b:df:b4:6f:ba:38:36:18:69:58:1d:81:e2:c4:
         ab:c6:4d:a6:c6:4f:be:65:95:e1:9d:b8:2a:d9:68:19:b9:ec:
         d8:b7:4d:69:a1:7b:4e:d5:29:54:dc:4b:c6:d8:ac:41:9f:75:
         6f:69:b5:a4:85:2b:e0:8f:46:c6:f2:d9:d5:cb:99:25:7b:e6:
         a2:05:cc:85:b8:ee:9e:f6:94:69:d9:67:1c:15:6c:5d:ed:a9:
         8b:19:30:5e:7b:01:6e:ad:73:91:a7:36:1f:ef:50:8c:4a:ec:
         a6:62:fe:95:1d:38:05:68:ac:0c:03:4b:b5:93:ed:12:e0:43:
         d7:59:1f:db:50:bd:71:ce:ed:af:23:de:40:c0:92:ea:db:78:
         13:f1:f4:71:7b:82:b3:a0:87:c7:17:84:36:74:61:37:ee:7a:
         56:d9:63:a8:35:90:10:90:6e:6d:80:12:54:bb:07:99:32:67:
         0e:b2:73:c6:ef:36:b7:ab:5f:09:da:c1:78:34:da:68:ed:ad:
         d8:95:32:4a:0b:b3:a4:ee:e5:3b:9e:e6:9c:60:a0:81:1e:b1:
         91:70:95:2f:b2:d2:c1:76:e2:11:e7:15:17:ea:2c:14:70:33:
         b7:9e:2f:72:26:ff:b4:34:3e:5e:b3:6d:d1:c2:a6:f9:62:0d:
         6b:8e:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:50 2025 by rpki-client