Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/562eab88-2956-33cc-ba86-2de1113c5703.roa
File:                     562eab88-2956-33cc-ba86-2de1113c5703.roa (raw, json)
Hash identifier:          PD7VnbFwwa8CZRXti8SQIC0lpiS0VgqV9hmMgjPS4eo=
Subject key identifier:   34:6C:2D:D6:E0:AD:07:8F:69:45:45:7A:10:77:51:17:AF:DE:03:2F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113F1C71FCC8A922FCBDF0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/562eab88-2956-33cc-ba86-2de1113c5703.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:3f:1c:71:fc:c8:a9:22:fc:bd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b9c9f751-44b2-4b0f-b7cf-d469dea5e6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:01:a1:e3:bf:10:c8:e4:8f:10:05:39:a4:
                    c4:82:93:87:34:37:83:c6:a1:a8:08:07:e8:01:a7:
                    c1:35:92:ef:86:79:1f:80:24:03:e8:fd:68:1d:0d:
                    76:b6:81:fd:10:36:f3:0a:27:d2:4d:34:e5:a6:44:
                    41:89:8b:47:19:0c:23:60:66:8a:ed:11:66:65:de:
                    7e:bf:40:a3:74:06:ee:72:45:8f:49:74:1a:9e:ae:
                    28:03:ee:cf:10:69:fc:06:80:75:80:a1:c8:49:87:
                    06:f0:70:52:11:f6:ac:a0:c7:74:d4:79:2c:4c:dd:
                    55:cf:da:e1:f4:7e:1c:1f:da:60:dc:21:0e:b1:1d:
                    2a:ba:6e:39:64:fd:a9:e8:26:7a:2f:10:53:53:7b:
                    89:1d:db:29:4b:04:72:e7:81:f0:6f:d6:28:60:e7:
                    55:db:5e:03:1a:4b:a4:cc:40:8d:a5:da:cd:be:65:
                    49:22:9d:fe:a8:24:b5:f6:98:4c:8a:bc:12:6f:07:
                    15:d6:84:bf:ac:89:ff:67:06:1d:5e:b6:18:dd:9b:
                    69:51:75:50:59:d5:50:c6:16:d6:63:dd:a1:91:e1:
                    d5:e1:14:c1:fa:72:cd:ea:43:6a:ff:37:bb:07:4c:
                    10:77:ea:72:cf:f9:bc:22:e7:eb:10:19:bd:43:ca:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6C:2D:D6:E0:AD:07:8F:69:45:45:7A:10:77:51:17:AF:DE:03:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/562eab88-2956-33cc-ba86-2de1113c5703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:6d:29:21:a5:9d:53:d9:4b:54:16:59:22:cc:05:ef:53:
         ab:34:1c:48:96:90:89:30:fb:f2:56:28:75:20:ec:80:97:e5:
         00:73:71:e3:37:36:bb:5d:26:0b:8d:fe:35:d9:5d:80:a9:e2:
         0a:76:3a:c2:4c:38:24:13:47:5a:c3:28:f8:a2:8f:6d:fb:b4:
         5e:b3:ba:7d:11:3b:83:80:db:19:fe:b0:ad:51:46:2e:69:e7:
         d1:e5:1c:da:a9:7d:3d:6e:05:57:9a:4c:14:1f:dc:86:15:90:
         e7:03:67:f8:98:d6:c5:1f:9e:3e:ee:66:cb:0a:fc:88:15:35:
         83:06:65:9e:e4:f1:05:af:a7:49:f8:9f:5e:38:2c:35:5d:29:
         17:39:84:2d:62:c0:a1:cd:48:4b:b6:c2:96:95:07:e0:6b:32:
         17:07:8d:6c:06:8c:03:ff:e0:25:07:cd:bc:50:b7:a8:fd:51:
         03:82:77:dc:66:73:92:4a:7f:7e:fc:1d:ad:2d:86:da:ef:cd:
         8b:12:08:fa:7f:f4:bd:17:36:1e:06:4d:75:43:1f:a3:4a:0a:
         a0:e7:b0:73:78:d2:7f:e2:4d:c4:f0:a5:e2:de:2d:c9:87:f7:
         0d:64:db:06:8b:17:24:b6:77:68:e0:63:08:75:10:4a:60:c5:
         04:8e:48:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEET8ccfzIqSL8vfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjljOWY3NTEtNDRiMi00YjBmLWI3Y2YtZDQ2OWRlYTVlNmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZIBoeO/EMjkjxAFOaTEgpOHNDeDxqGoCAfo
AafBNZLvhnkfgCQD6P1oHQ12toH9EDbzCifSTTTlpkRBiYtHGQwjYGaK7RFmZd5+
v0CjdAbuckWPSXQanq4oA+7PEGn8BoB1gKHISYcG8HBSEfasoMd01HksTN1Vz9rh
9H4cH9pg3CEOsR0qum45ZP2p6CZ6LxBTU3uJHdspSwRy54Hwb9YoYOdV214DGkuk
zECNpdrNvmVJIp3+qCS19phMirwSbwcV1oS/rIn/ZwYdXrYY3ZtpUXVQWdVQxhbW
Y92hkeHV4RTB+nLN6kNq/ze7B0wQd+pyz/m8IufrEBm9Q8riUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRsLdbgrQePaUVFehB3URev3gMvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTYyZWFiODgtMjk1Ni0z
M2NjLWJhODYtMmRlMTExM2M1NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+KbSkhpZ1T2UtUFlkizAXvU6s0HEiWkIkw+/JWKHUg7ICX5QBzceM3
NrtdJguN/jXZXYCp4gp2OsJMOCQTR1rDKPiij237tF6zun0RO4OA2xn+sK1RRi5p
59HlHNqpfT1uBVeaTBQf3IYVkOcDZ/iY1sUfnj7uZssK/IgVNYMGZZ7k8QWvp0n4
n144LDVdKRc5hC1iwKHNSEu2wpaVB+BrMhcHjWwGjAP/4CUHzbxQt6j9UQOCd9xm
c5JKf378Ha0thtrvzYsSCPp/9L0XNh4GTXVDH6NKCqDnsHN40n/iTcTwpeLeLcmH
9w1k2waLFyS2d2jgYwh1EEpgxQSOSPQ=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:55 2025 by rpki-client