Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa
File:                     95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa (raw, json)
Hash identifier:          IMpbpct/qD521dTWy0mgV4Yjs5UTMUcQtj1N9AV33Zg=
Subject key identifier:   8B:F9:5E:58:85:BF:4F:5F:C7:C1:23:00:A4:C2:ED:E4:A8:64:6A:07
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F3DB7C0BE147B63C4220
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f3:db:7c:0b:e1:47:b6:3c:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ba532e4e-e50e-494b-9c42-edfcead76e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:24:41:c2:a6:28:7a:5a:77:8f:d5:02:c3:
                    dc:9d:75:f2:5e:cb:f4:59:5a:44:de:15:c0:1a:60:
                    5a:56:13:84:93:6c:e1:29:77:60:6d:51:bd:28:9d:
                    3f:2c:51:0f:3c:22:23:4a:be:60:8c:1b:5b:15:f1:
                    5e:aa:a1:d6:60:a0:21:6b:a4:ae:a1:e6:5b:c5:ad:
                    4b:21:fb:ac:46:59:89:31:04:42:fd:78:80:93:03:
                    68:78:9e:ea:8e:3c:80:e0:0e:6f:4b:9c:4b:6f:95:
                    a3:0d:77:2d:a9:16:3d:8a:b8:ae:3b:36:16:9c:f0:
                    e9:05:22:18:dd:aa:9c:b1:87:e3:1b:b8:18:1b:40:
                    68:19:0c:8b:76:df:75:23:d1:d3:86:22:71:76:e0:
                    12:b2:bd:1f:fa:3a:49:8a:38:18:1f:1b:4d:7a:48:
                    0c:08:b5:f8:07:70:80:4c:47:d4:99:0e:19:c9:14:
                    ba:87:b2:af:c8:ef:11:b4:48:80:e5:e3:6d:3c:28:
                    61:ac:54:c4:52:b2:e7:ef:d6:68:31:d8:9a:34:a2:
                    f6:5c:af:4f:5e:d7:cf:ca:e1:c4:1c:d7:be:ba:78:
                    9d:d0:ad:f3:f0:10:c3:f1:09:03:50:50:59:a5:f6:
                    af:50:8e:df:50:7b:66:a3:76:fa:59:c2:28:ad:9d:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:5E:58:85:BF:4F:5F:C7:C1:23:00:A4:C2:ED:E4:A8:64:6A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95d519f2-9e7f-362e-acb4-6627c2f1efd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:5c:b2:e1:70:b1:a0:e0:83:b0:21:7f:02:bc:54:d6:7f:
         dd:c5:2d:6f:df:96:a2:09:09:cb:ad:42:39:9a:db:a8:0e:d2:
         7a:2e:3d:2f:3f:69:6d:9d:f3:9c:71:f2:d6:9c:c8:f9:23:e1:
         ff:75:49:27:6e:81:60:78:85:d5:31:ae:b5:8b:18:0b:fa:8f:
         ec:33:8e:c3:d7:4d:79:16:20:6c:60:66:45:bd:44:73:76:27:
         10:b8:8a:c6:00:ea:68:6d:8c:92:e3:aa:1d:bd:e4:e4:05:39:
         90:f9:bb:6b:3c:77:83:85:a6:b0:0f:0a:94:5b:fc:f7:63:e5:
         02:a1:5c:85:45:d3:39:34:0c:a5:8e:e0:53:7a:c3:12:6f:f5:
         c2:06:e6:e9:5a:90:6e:ce:30:4d:a0:8a:45:46:88:5c:75:c4:
         5b:ee:fc:7a:af:a9:16:08:c9:55:8f:ad:66:c7:30:61:7a:af:
         5c:d5:42:cb:18:ac:fc:2c:97:fc:8d:bc:a3:d3:65:34:b7:04:
         60:32:40:1f:d8:f3:42:7e:82:42:5e:7a:6d:0c:fa:c7:50:c4:
         28:d1:52:62:ce:f6:e2:2e:ad:bf:5d:97:22:fe:e7:7b:bd:2a:
         a8:39:92:f2:a5:27:45:75:f9:28:08:94:ca:b8:f5:76:d2:0d:
         2b:54:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:06:53 2025 by rpki-client