Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6641a736-1777-3240-aeae-1b11e9dc3c85.roa
File:                     6641a736-1777-3240-aeae-1b11e9dc3c85.roa (raw, json)
Hash identifier:          w69aw/DASTUJJCi9lxY8Kug9PSWzWRpSJERb+klL8Pg=
Subject key identifier:   63:2D:DC:D9:05:AC:EB:38:2A:BE:A8:BB:B8:FD:A9:0B:BD:2B:9D:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411AFE434284352A4D91CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6641a736-1777-3240-aeae-1b11e9dc3c85.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:af:e4:34:28:43:52:a4:d9:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5b7c98c9-8d09-4067-aafd-0804b6a083d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:7d:a1:d2:d2:0c:c4:4b:77:93:59:41:a4:
                    bf:df:c2:e6:3a:8b:be:ed:b0:e2:be:20:97:8b:99:
                    e7:95:06:58:75:1e:de:f1:36:f0:a0:85:5c:f4:47:
                    76:31:f0:9e:73:a2:16:5e:04:73:8d:03:d8:27:34:
                    88:37:68:50:5f:e4:06:96:08:d9:2e:e1:53:cd:56:
                    d5:23:3e:5f:e5:d1:79:76:4f:ad:35:d0:c0:07:f2:
                    d5:52:27:e2:67:bd:08:62:2a:ff:15:fd:e4:1b:03:
                    9f:ef:24:f7:33:8f:e8:ba:e7:64:1d:b7:02:49:86:
                    0a:7d:3f:06:b6:57:16:b8:b1:e6:9e:63:a5:c8:fd:
                    41:f2:d5:78:c8:91:08:97:9a:57:36:dd:5e:92:10:
                    59:cd:3b:0a:38:04:6e:fc:99:ab:66:1d:c6:f9:a4:
                    cd:77:1d:ee:c0:9d:1e:dc:bb:ae:57:d0:fd:8d:b9:
                    f0:4e:da:6d:7b:43:67:46:82:e5:ba:7d:fb:78:06:
                    cd:97:5a:68:e4:95:7c:5c:78:d5:04:a1:12:d9:05:
                    d8:2f:c8:32:1c:01:30:7a:29:72:1e:e7:2b:bd:ad:
                    eb:77:dd:e8:45:10:10:b8:57:11:7f:ef:50:45:4c:
                    bf:0f:ad:45:a5:53:cd:36:d7:25:74:0e:1c:2f:e2:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:DC:D9:05:AC:EB:38:2A:BE:A8:BB:B8:FD:A9:0B:BD:2B:9D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6641a736-1777-3240-aeae-1b11e9dc3c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:50:6a:cf:52:a8:9b:5c:d1:53:5e:b2:c8:12:32:76:ff:30:
         af:9b:db:c9:de:af:10:92:4a:53:8d:e6:8e:d1:c3:d2:59:c4:
         2b:7b:58:73:1c:ab:79:fc:8f:33:43:40:a2:91:f7:11:89:ab:
         4f:75:14:42:09:bb:a8:59:d8:93:fa:72:b6:92:62:a8:81:85:
         d7:1b:13:5d:ca:5a:72:08:4d:d4:e2:57:05:3a:38:d3:74:ff:
         b0:04:ce:a8:60:ed:21:fa:cd:0c:2a:75:d2:e0:24:69:69:5a:
         10:9f:c5:9b:93:a8:b7:06:05:e4:76:56:b4:b5:28:95:36:ba:
         98:6c:7d:01:20:78:51:95:57:93:16:69:d8:6a:3c:d2:53:7a:
         45:35:b4:8c:2b:43:74:fc:24:2e:d1:b6:8d:fc:2c:e0:48:76:
         e0:0a:c4:62:99:10:d5:09:23:6b:06:28:7e:06:1f:b8:4f:36:
         0e:3a:2f:28:c8:91:66:36:af:17:b8:c3:90:4e:cc:57:d8:4e:
         a9:d4:5b:9b:33:7f:b2:3b:11:eb:6b:fb:26:db:08:fe:d2:28:
         63:9d:22:60:5c:f6:14:67:8a:68:5d:16:8b:ee:f6:7c:3e:30:
         ad:d1:27:9c:e1:d0:c0:ed:9a:dc:b1:f3:24:6b:0f:35:49:0b:
         c2:e1:43:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEa/kNChDUqTZHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NWI3Yzk4YzktOGQwOS00MDY3LWFhZmQtMDgwNGI2YTA4M2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsl9odLSDMRLd5NZQaS/38LmOou+7bDiviCX
i5nnlQZYdR7e8TbwoIVc9Ed2MfCec6IWXgRzjQPYJzSIN2hQX+QGlgjZLuFTzVbV
Iz5f5dF5dk+tNdDAB/LVUifiZ70IYir/Ff3kGwOf7yT3M4/ouudkHbcCSYYKfT8G
tlcWuLHmnmOlyP1B8tV4yJEIl5pXNt1ekhBZzTsKOARu/JmrZh3G+aTNdx3uwJ0e
3LuuV9D9jbnwTtpte0NnRoLlun37eAbNl1po5JV8XHjVBKES2QXYL8gyHAEweily
Hucrva3rd93oRRAQuFcRf+9QRUy/D61FpVPNNtcldA4cL+IrOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMt3NkFrOs4Kr6ou7j9qQu9K52mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjY0MWE3MzYtMTc3Ny0z
MjQwLWFlYWUtMWIxMWU5ZGMzYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFQas9SqJtc0VNessgSMnb/MK+b28nerxCSSlON5o7Rw9JZxCt7WHMc
q3n8jzNDQKKR9xGJq091FEIJu6hZ2JP6craSYqiBhdcbE13KWnIITdTiVwU6ONN0
/7AEzqhg7SH6zQwqddLgJGlpWhCfxZuTqLcGBeR2VrS1KJU2uphsfQEgeFGVV5MW
adhqPNJTekU1tIwrQ3T8JC7Rto38LOBIduAKxGKZENUJI2sGKH4GH7hPNg46LyjI
kWY2rxe4w5BOzFfYTqnUW5szf7I7Eetr+ybbCP7SKGOdImBc9hRnimhdFovu9nw+
MK3RJ5zh0MDtmtyx8yRrDzVJC8LhQ9Y=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:16:01 2025 by rpki-client