Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9890faca-f317-3f02-9e28-f48e704ef4ae.roa
File:                     9890faca-f317-3f02-9e28-f48e704ef4ae.roa (raw, json)
Hash identifier:          CFmnmR7IrjmqSji7G9WyzuTQKQTa6ci4cV3fanBsK80=
Subject key identifier:   E6:4C:FC:1D:24:AA:86:A5:49:DD:33:07:80:E7:52:90:68:2E:45:AB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F721956B5E72A09044C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9890faca-f317-3f02-9e28-f48e704ef4ae.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f7:21:95:6b:5e:72:a0:90:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0d0038a7-33bc-4045-a5a4-0926d00f1003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:9b:e2:49:fb:9d:32:06:c1:1e:e4:18:70:
                    bf:8a:ff:84:59:e9:4e:22:b0:77:21:4e:18:d8:4d:
                    56:20:ae:f5:72:ee:c0:bb:02:ca:e2:2e:49:dd:ec:
                    ec:ab:37:9b:5d:9a:52:ca:4d:90:3b:0e:cf:88:92:
                    fa:06:a0:c7:46:61:11:8d:37:5c:6f:54:42:bd:32:
                    5d:73:31:8c:7f:58:d6:14:cb:f7:7c:6c:6a:af:52:
                    60:ec:03:2a:72:00:83:81:f2:52:60:31:ac:28:16:
                    71:6a:12:ee:14:87:c5:e2:13:23:d1:35:37:2a:51:
                    6e:bd:c8:ca:bb:47:e7:4b:aa:99:15:72:bf:fe:ff:
                    ba:c3:6b:bd:9b:12:7d:57:67:6c:1f:b3:17:44:8f:
                    56:5d:e6:a3:d2:bd:40:e2:c0:b1:eb:22:d9:cf:e0:
                    e4:b5:4f:36:2c:66:dc:0f:b5:2a:ca:75:3b:c7:91:
                    20:eb:26:f5:48:c4:15:50:62:1e:a1:0e:f6:e1:71:
                    c8:7f:8b:18:c7:0e:bc:26:2d:d1:3d:54:1d:e2:e0:
                    ed:8b:15:94:c9:41:3b:c2:2b:87:a6:c2:b6:66:55:
                    6e:4e:b9:cc:dc:76:69:4d:8b:50:8b:48:5e:ff:8e:
                    b5:a1:de:3e:10:1c:f4:e0:85:75:ed:3e:3a:6d:83:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4C:FC:1D:24:AA:86:A5:49:DD:33:07:80:E7:52:90:68:2E:45:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9890faca-f317-3f02-9e28-f48e704ef4ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:25:31:25:8b:12:08:de:be:31:21:96:06:50:b8:ca:e5:53:
         4e:fc:70:0b:b9:f8:8f:73:75:24:16:b1:a5:49:7d:18:52:74:
         20:72:b7:0e:8b:85:3a:b2:8a:60:5b:a8:a4:97:60:38:93:cd:
         b4:29:a9:55:f7:16:ee:1d:07:56:fa:27:47:5b:ba:6b:a8:86:
         d0:2f:4f:74:2c:a6:1a:01:9f:9c:c7:40:45:78:6c:d6:de:02:
         43:8c:fe:bc:dd:d5:42:ec:be:5b:68:28:8d:c9:dd:f7:dd:27:
         fd:7a:fc:0f:90:99:64:02:98:6f:e7:ff:31:6a:8e:bd:9c:75:
         a0:a1:f4:56:c1:27:fd:ef:92:a1:6c:4d:74:d7:fd:a9:4c:12:
         ed:9c:ed:aa:21:a0:ef:da:bc:0b:01:73:96:13:85:8b:75:49:
         d3:f8:df:42:9b:5d:23:6d:e6:6d:f3:c8:34:6b:bd:ab:12:9e:
         04:df:95:04:89:ee:6b:17:31:1d:fe:e0:88:d2:ff:f7:43:b7:
         c0:67:f2:69:22:58:dd:00:05:6d:2f:a1:c4:f0:80:a3:72:d8:
         33:67:f6:ed:6a:d6:f0:1e:bb:01:a9:36:d9:0a:b5:99:1d:bc:
         04:18:03:64:a7:19:20:2e:c7:6d:3b:e5:5c:3e:6a:cf:59:95:
         82:d3:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:44:38 2025 by rpki-client