Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b225081-bcee-3bdd-bf13-006e32765201.roa
File:                     9b225081-bcee-3bdd-bf13-006e32765201.roa (raw, json)
Hash identifier:          uzvSOsaopoA10Zh6jTZpuJyXHcbduihlxWqY52YqF0I=
Subject key identifier:   CE:2C:12:2B:27:C4:95:B8:11:B8:36:EC:60:66:5D:AC:4E:AC:9A:A8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F7E91356209ADB10DC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b225081-bcee-3bdd-bf13-006e32765201.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f7:e9:13:56:20:9a:db:10:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=84387d16-822e-4050-be10-a84640bffc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:fa:e3:59:13:fd:ad:a4:35:47:77:2e:64:
                    a0:4a:ec:8e:b5:03:20:07:84:32:bf:03:43:8f:b0:
                    f4:ae:35:dd:bc:14:8d:0e:b7:ff:27:2b:0b:21:36:
                    72:b3:39:3b:a9:27:61:13:12:f2:9a:32:b3:34:2e:
                    cc:d6:e5:8d:d8:ab:45:4b:e5:90:e9:c2:fb:a7:86:
                    a4:7f:5f:9b:0b:d6:83:68:19:a7:2b:4f:ad:65:f7:
                    48:dc:03:af:a0:73:01:5c:86:27:6a:68:5c:a2:13:
                    62:a3:2f:8c:e9:ea:ca:54:da:95:ce:36:cb:da:4f:
                    73:12:46:c5:40:5b:c3:76:ec:3b:e1:f2:58:3b:4d:
                    f0:69:d5:ff:f1:5f:ff:b8:c8:db:64:b8:7b:fe:f4:
                    70:f1:82:92:a2:1d:ac:80:f0:c1:32:e9:d1:76:48:
                    36:3f:5e:36:f1:fd:8f:c2:aa:62:53:39:68:34:c6:
                    01:0d:c2:c4:c1:7e:fe:2b:86:8d:64:2e:88:68:13:
                    a2:0e:3a:99:a2:c0:7f:7c:e3:e8:12:76:b8:aa:ed:
                    b0:3c:dd:45:ba:e1:fe:d1:0d:d2:6e:dc:e3:56:be:
                    90:9f:22:41:d3:3c:04:40:3a:9f:8c:75:14:84:4f:
                    de:e5:67:7f:93:ae:56:e9:ee:c0:a3:d8:99:e6:e6:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:12:2B:27:C4:95:B8:11:B8:36:EC:60:66:5D:AC:4E:AC:9A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b225081-bcee-3bdd-bf13-006e32765201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a8:64:cf:42:46:d0:99:76:42:46:b5:e0:66:33:83:99:de:
         cf:90:3b:6a:70:8a:d1:0c:41:48:da:2c:b2:f3:7b:ef:1d:5b:
         a4:bb:00:eb:e5:bc:49:c5:35:f6:72:0f:eb:14:ed:52:44:bc:
         a9:5d:a7:4b:24:fd:1f:81:b0:98:4c:4e:6c:80:3f:52:83:1d:
         ff:99:97:64:30:50:b1:47:2f:1f:c8:5b:86:09:dd:2d:15:6e:
         66:7b:ac:c1:9e:45:5b:14:de:08:d9:6b:7d:9b:53:ef:da:4b:
         16:33:f9:f0:6f:9d:bb:45:dc:55:7b:cf:d0:7e:f6:b9:5a:2a:
         f8:b7:5f:44:53:c9:70:4a:bc:74:71:6f:20:f4:37:0d:08:25:
         81:86:30:e6:a1:6a:11:bd:12:09:d4:4f:e0:9b:bf:0a:2f:18:
         db:01:42:3b:53:5d:54:70:d1:60:bb:66:f8:fe:8e:a6:fb:f5:
         06:22:47:9f:22:92:3e:c4:a0:0f:08:70:b5:85:79:ce:5c:c4:
         38:05:79:45:e4:fd:56:f0:93:88:c8:5e:f2:02:39:ce:5d:00:
         17:8e:98:4f:5c:ef:77:79:fe:e5:e8:6a:05:99:9e:af:06:46:
         ad:5c:98:a7:0c:fb:62:95:a8:b0:41:ea:59:bc:be:42:1b:97:
         cc:f3:9a:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEffpE1YgmtsQ3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ODQzODdkMTYtODIyZS00MDUwLWJlMTAtYTg0NjQwYmZmYzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQX641kT/a2kNUd3LmSgSuyOtQMgB4QyvwND
j7D0rjXdvBSNDrf/JysLITZyszk7qSdhExLymjKzNC7M1uWN2KtFS+WQ6cL7p4ak
f1+bC9aDaBmnK0+tZfdI3AOvoHMBXIYnamhcohNioy+M6erKVNqVzjbL2k9zEkbF
QFvDduw74fJYO03wadX/8V//uMjbZLh7/vRw8YKSoh2sgPDBMunRdkg2P1428f2P
wqpiUzloNMYBDcLEwX7+K4aNZC6IaBOiDjqZosB/fOPoEna4qu2wPN1FuuH+0Q3S
btzjVr6QnyJB0zwEQDqfjHUUhE/e5Wd/k65W6e7Ao9iZ5uaWAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4sEisnxJW4Ebg27GBmXaxOrJqoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWIyMjUwODEtYmNlZS0z
YmRkLWJmMTMtMDA2ZTMyNzY1MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoki6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASoZM9CRtCZdkJGteBmM4OZ3s+QO2pwitEMQUjaLLLze+8dW6S7AOvl
vEnFNfZyD+sU7VJEvKldp0sk/R+BsJhMTmyAP1KDHf+Zl2QwULFHLx/IW4YJ3S0V
bmZ7rMGeRVsU3gjZa32bU+/aSxYz+fBvnbtF3FV7z9B+9rlaKvi3X0RTyXBKvHRx
byD0Nw0IJYGGMOahahG9EgnUT+CbvwovGNsBQjtTXVRw0WC7Zvj+jqb79QYiR58i
kj7EoA8IcLWFec5cxDgFeUXk/Vbwk4jIXvICOc5dABeOmE9c73d5/uXoagWZnq8G
Rq1cmKcM+2KVqLBB6lm8vkIbl8zzmvo=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:59 2025 by rpki-client