Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a89d683-4047-3c03-a34d-b48e7f1a1749.roa
File:                     7a89d683-4047-3c03-a34d-b48e7f1a1749.roa (raw, json)
Hash identifier:          GHrEEyUxAeclauqovzRjSMYKH29zho6esebdPamSJPM=
Subject key identifier:   E3:AF:6C:D7:FD:90:1A:AD:A7:BA:90:66:A2:3F:9E:18:03:AE:B6:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F7D3639C0FFE64DC8420
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a89d683-4047-3c03-a34d-b48e7f1a1749.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f7:d3:63:9c:0f:fe:64:dc:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=825fd91c-4bf3-4e71-b666-f83e6feb5ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:8a:b7:67:a2:91:20:43:bf:a6:70:bb:53:
                    c3:e7:ac:73:84:af:e9:b1:03:8d:e2:c1:a6:bd:ca:
                    f7:36:35:41:6c:9c:56:65:7d:3a:b1:65:ca:17:f2:
                    59:6a:93:1d:b3:61:15:27:f2:e4:22:af:7f:38:27:
                    d3:82:19:6a:ad:de:a3:87:e7:8a:55:f5:90:c5:5a:
                    ab:6f:dd:a6:2f:a0:2e:c7:b8:51:a7:e2:0f:ab:db:
                    3f:f4:3b:bd:a5:e6:c4:ac:73:a1:cf:13:d8:73:bc:
                    b6:85:c9:b0:d9:2f:e5:5b:c3:7a:3c:7c:df:54:04:
                    67:8e:bf:86:68:76:9a:f7:f0:eb:20:d2:23:af:a8:
                    7d:ca:8c:e3:ba:a4:57:63:88:c3:26:6b:bb:94:cf:
                    3e:09:e6:14:97:1e:cd:16:43:fe:19:00:98:d6:f9:
                    81:93:11:e3:8c:27:20:35:5b:ac:aa:df:6d:e7:bd:
                    86:0e:b1:69:66:f8:1f:4b:e5:b2:23:ee:8b:dd:9d:
                    f7:36:f8:d6:2b:ec:2c:7e:78:18:b5:3e:89:51:e2:
                    21:fd:e8:c9:a4:7d:11:b0:3e:0c:42:c8:41:22:3c:
                    d1:50:f9:c8:70:bf:46:66:34:4a:d8:e8:75:cb:a3:
                    1d:dd:1b:50:b9:40:8b:2b:ce:7a:62:81:3e:99:7f:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AF:6C:D7:FD:90:1A:AD:A7:BA:90:66:A2:3F:9E:18:03:AE:B6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a89d683-4047-3c03-a34d-b48e7f1a1749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:6b:34:ca:fb:90:c4:b4:fc:e5:c7:8d:7f:cf:08:45:31:
         b1:c8:04:eb:e0:69:4d:38:cb:c1:27:8d:54:7b:12:fd:5a:ea:
         be:94:1d:4e:c3:52:ed:f5:94:94:70:e6:3d:a1:63:e5:54:74:
         d2:b6:7c:c8:02:26:0c:03:1f:94:ee:e0:bf:af:98:ff:3d:58:
         38:35:43:ea:e4:8b:d3:82:c4:9d:eb:08:25:60:d3:b4:76:52:
         3b:84:60:07:2b:3c:31:ca:22:3b:17:36:b0:94:42:de:48:35:
         e1:f5:fd:e8:0f:22:c5:ad:a7:66:54:f2:70:de:a2:05:4e:c6:
         b4:20:4b:40:f5:14:dc:02:72:01:14:ca:e6:63:e3:09:72:16:
         96:60:e3:37:f4:f8:0f:e6:6a:f3:32:91:f7:06:da:6c:4a:44:
         f7:43:d7:34:b4:03:1e:b8:aa:24:77:e5:2f:32:9b:6c:ae:1b:
         77:ba:1b:17:0e:61:52:60:36:dc:36:c4:08:6a:11:67:d7:27:
         5e:73:aa:d3:79:aa:8e:f3:77:30:03:63:18:b1:70:57:93:c3:
         58:a1:31:25:f4:a3:9f:04:d8:1b:21:1c:cb:31:82:49:13:1f:
         45:6c:c1:b3:4a:b5:a5:b8:b3:5b:22:82:27:2b:8e:8d:6a:b4:
         94:59:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:51 2025 by rpki-client