Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa
File:                     9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa (raw, json)
Hash identifier:          aRoeTxD6PMqUwpaVcr8b4BHGtpAVAure9PA2KrPbhtU=
Subject key identifier:   27:7E:17:75:47:E3:68:B9:AB:26:7C:14:26:6B:A9:0D:77:E0:E4:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110A551CE7796AE72F4E54
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:0a:55:1c:e7:79:6a:e7:2f:4e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=30ba3b77-4618-47b5-af6f-7168bbc50a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:f3:fa:10:8e:c5:c6:e3:35:dc:e7:13:e8:
                    ce:e7:c6:8b:03:ec:59:f7:98:c1:c0:1f:a7:f3:86:
                    ee:ca:8f:c1:98:ab:d8:3a:f8:e5:d8:a9:93:06:7c:
                    31:3a:c6:b2:7a:eb:c1:bd:3c:c0:c3:f7:26:e5:8a:
                    89:3a:c1:e5:2d:dd:d6:f5:54:a5:40:96:1b:92:28:
                    0c:69:a3:72:be:6a:9b:80:6c:53:6f:70:2a:c9:a1:
                    6d:33:2b:82:ea:8b:10:41:f2:a3:ed:f6:a5:f3:64:
                    c4:2c:5c:4f:69:cf:40:19:f0:90:ac:9c:6d:c3:45:
                    2a:21:d3:71:c6:46:a7:19:39:f8:9d:15:00:a0:03:
                    76:40:6a:1d:48:23:27:29:39:6e:e3:63:c8:b6:6c:
                    1c:dd:dd:00:5d:a9:d2:d9:d1:73:a2:f1:e1:0d:f8:
                    cd:99:ea:c7:90:71:c4:31:01:f8:c6:a6:51:4b:ea:
                    e0:89:b1:36:1f:e5:e6:67:13:28:7d:41:55:53:71:
                    1b:7d:a7:1c:34:d5:6d:69:09:5f:d2:41:f3:27:8a:
                    74:8e:73:5b:e8:69:29:c3:d0:86:4a:49:63:ca:cb:
                    2f:06:4c:94:a2:30:c3:5d:aa:be:ee:c7:d7:e6:06:
                    dd:35:05:b2:01:56:86:8b:fa:1c:f3:17:1b:35:5e:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7E:17:75:47:E3:68:B9:AB:26:7C:14:26:6B:A9:0D:77:E0:E4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9966b560-34b9-37b5-91ae-6ba940d7ec5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:8f:d5:f8:3c:d7:ab:42:7f:40:a3:9a:9e:34:d8:db:38:
         b1:29:d1:9c:87:e9:d6:1f:42:c7:61:03:fe:5d:11:01:26:65:
         75:d7:66:da:1c:15:f0:e7:84:45:a7:7a:4e:4f:d3:ae:57:a6:
         c8:fd:79:7f:f2:60:5e:ba:a4:da:8b:92:c8:39:14:a1:64:c9:
         ee:e0:95:13:96:d1:19:22:7b:14:3f:86:f7:d8:0e:aa:26:b7:
         99:c3:d5:d7:cc:c0:68:c0:f6:45:79:62:7f:99:bb:48:24:22:
         8f:f7:af:15:04:cf:d5:3c:1b:12:b2:99:5d:89:ec:bf:e1:03:
         8e:71:73:43:df:c7:ef:67:27:d1:ba:cb:e0:25:a3:83:6e:0f:
         b5:60:3a:43:75:e9:d8:82:7c:ce:70:61:d9:cd:30:73:41:16:
         94:60:08:d6:9e:99:5b:65:66:18:95:d7:a9:f3:7e:25:67:76:
         80:25:8f:08:e1:a8:1b:99:a5:6e:31:51:64:d7:2a:0a:4c:d9:
         b5:1e:c8:75:6c:6b:f3:26:6c:e8:2e:11:e4:26:93:e3:c0:85:
         f1:41:cd:84:1d:55:8f:fd:0d:41:4e:c6:be:4b:cf:f7:1e:a0:
         c4:51:39:33:62:09:33:bb:66:d8:0c:0f:76:d4:2e:1e:eb:77:
         f0:c0:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:17 2025 by rpki-client