Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9a47959-3fb9-38a1-b7d4-ed9ff5cb7c33.roa
File:                     a9a47959-3fb9-38a1-b7d4-ed9ff5cb7c33.roa (raw, json)
Hash identifier:          ddFLtpp8K23uTYMSdwrkBCTzyKoaFNX366Fn3+Yx0+8=
Subject key identifier:   52:34:7A:C6:2D:E5:D5:AF:8D:7E:5F:C6:A5:92:95:64:3D:69:8F:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113EC52F6A1707C7707AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9a47959-3fb9-38a1-b7d4-ed9ff5cb7c33.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:3e:c5:2f:6a:17:07:c7:70:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=db47f4c9-3287-4cf1-a087-6b3bd176296c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:91:0f:a6:54:e6:bb:20:6c:36:49:cb:15:
                    8c:6a:8d:f5:2c:b9:a1:82:69:ab:ec:76:c5:0f:6f:
                    ef:33:30:ee:e9:82:fe:39:94:54:47:5f:77:dc:f4:
                    3b:6f:ec:6f:cb:65:ea:07:e6:0a:58:9d:e8:d0:78:
                    91:96:26:e0:8e:e0:d4:e3:44:a5:4c:58:9b:64:2a:
                    35:e9:ea:6c:1d:b0:c1:4e:4f:f2:ba:e7:92:b5:10:
                    2e:4a:28:cf:da:54:4b:c0:d1:02:b9:14:9b:ab:e1:
                    2e:2f:94:69:3f:79:d2:4e:e3:39:1b:d9:32:0d:d4:
                    4d:ff:7b:c6:6f:34:32:0b:af:6f:19:05:70:44:e4:
                    36:8c:a4:8e:9f:96:56:d2:fd:6f:2e:8b:73:0e:2c:
                    7f:d2:dd:f2:f9:a0:7d:41:ff:b9:5e:d0:d5:91:ca:
                    be:ef:cd:09:d2:6b:03:80:25:4c:a2:04:a3:34:f0:
                    d9:32:1e:f1:2e:de:a0:51:4a:12:93:43:b3:c7:38:
                    fa:64:d8:8b:52:c8:16:9f:2d:a6:65:1b:d5:08:52:
                    78:ca:73:01:ed:48:e7:ef:38:38:e1:39:7b:2e:cb:
                    75:96:1e:9a:6f:a7:87:90:76:4d:dc:4c:24:62:83:
                    4a:9e:00:4b:d0:d1:a7:c7:77:49:31:4b:15:1f:72:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:34:7A:C6:2D:E5:D5:AF:8D:7E:5F:C6:A5:92:95:64:3D:69:8F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9a47959-3fb9-38a1-b7d4-ed9ff5cb7c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:7e:e9:62:d9:3a:e6:b5:a9:b6:d5:a6:1f:a8:20:3a:7a:
         8f:b0:33:b4:8c:51:98:b8:fe:f0:fb:83:be:3e:8d:c7:3e:1b:
         f9:d5:3e:2f:7c:2f:fe:fc:73:c7:f3:e2:6f:b2:68:8b:52:a5:
         43:51:d8:72:69:b9:e9:a2:ac:ba:04:7e:c1:7a:c4:47:3c:72:
         fd:84:ad:ad:f3:ea:c4:85:80:f7:9b:c0:57:a9:49:88:df:48:
         6c:cc:08:de:6f:d4:60:e9:ae:5b:1b:d0:78:4e:73:5b:91:96:
         1a:a2:d7:8d:8b:1b:23:d4:84:85:aa:b9:43:7b:00:d8:26:10:
         54:90:e4:df:3d:07:d7:ad:52:41:ff:b2:aa:4a:98:f7:e2:f1:
         00:86:8b:f7:4f:df:9b:6d:3a:26:ae:2d:39:12:76:e3:14:de:
         95:a6:99:11:a3:f2:0a:25:c9:ae:1e:07:c7:e9:d3:ea:5e:a4:
         80:39:98:22:dc:5f:21:e5:b7:17:1b:79:4a:6a:c0:f0:e0:59:
         2e:d9:f0:f8:34:c3:4c:28:e2:b6:0e:24:1a:b1:cd:06:56:53:
         41:16:49:36:c2:b8:9f:ce:57:5f:7d:f4:5b:af:71:bd:ee:d4:
         a1:52:c9:9f:de:76:a6:5a:7e:88:23:bd:01:c2:68:87:d6:17:
         83:f9:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:22 2025 by rpki-client