Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa
File:                     ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa (raw, json)
Hash identifier:          KN3XjVBK9sEhfFkNFMgeHRJ25brj+qi4nUs5kjgs6xE=
Subject key identifier:   DD:AF:CC:A9:87:E3:D0:A6:75:86:05:EB:0B:0F:F6:C3:62:4A:A0:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412198DF6FE94B17ECBAF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:19:8d:f6:fe:94:b1:7e:cb:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=51b1e2b9-7be2-4279-a98e-ba5ff9d37f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:6d:57:2a:bd:92:e2:1a:19:63:bf:e2:38:
                    45:2a:8b:22:de:32:bb:e9:c9:39:1d:c5:13:75:52:
                    13:cd:f2:10:5f:c1:cc:f8:7b:b6:ae:45:68:1e:87:
                    79:c8:01:1c:03:9c:4c:96:72:66:a3:a1:73:11:b6:
                    37:0b:e1:ba:ef:bc:ab:62:6c:2e:a2:98:25:5f:51:
                    03:24:5c:37:7b:01:ed:04:53:2d:0a:cb:90:ae:07:
                    cc:a8:2c:51:0a:c8:dc:49:2e:ba:d1:6a:9c:86:86:
                    db:19:b6:5d:20:fa:1c:b6:12:60:7b:46:72:9a:0e:
                    dd:0a:4c:2e:ae:53:77:e7:a8:3b:36:f7:51:1b:91:
                    1d:bf:fb:9c:d5:6d:92:31:c0:93:40:92:7a:d6:8b:
                    01:05:fd:22:be:7d:bd:ea:b1:fb:17:3f:de:9b:c3:
                    99:16:34:1e:d0:35:46:30:47:81:6c:17:b9:3b:de:
                    a3:19:59:68:b2:64:3a:ae:44:36:ed:23:02:14:b3:
                    b4:82:11:a1:ad:10:e1:39:e6:ad:5f:e6:d3:2e:c7:
                    4d:e5:82:26:5a:d5:87:ab:76:df:50:91:7c:20:e9:
                    ba:9f:53:b5:c5:ff:e1:65:94:4f:6b:ad:43:45:89:
                    72:4a:ec:c2:71:83:a7:62:7f:e9:fa:cd:f4:a4:5d:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AF:CC:A9:87:E3:D0:A6:75:86:05:EB:0B:0F:F6:C3:62:4A:A0:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad8375b4-58f6-3ee2-a9cf-ee1868d6e3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:c8:61:df:9a:8d:af:01:22:0f:fe:09:9c:64:37:a4:fc:
         44:d9:79:29:12:15:b2:c8:fd:22:17:09:38:97:92:df:9a:a5:
         f6:ec:3a:68:1a:87:58:56:60:e8:56:1d:41:45:04:c3:93:c1:
         86:9e:e6:b3:d4:d4:ce:dd:98:ec:6f:83:a6:52:7e:43:6b:21:
         f5:2a:ae:07:c3:17:78:74:1c:1a:fa:5f:a1:35:d1:74:8d:04:
         62:69:9e:f6:1b:da:92:d5:5b:80:d4:09:7a:e2:d3:e3:8e:b1:
         a7:c2:6b:73:9c:bc:d4:b3:50:cc:2d:5e:09:cb:76:62:11:b7:
         f2:da:07:dc:f1:68:1b:a3:0e:45:cb:31:51:52:ad:a9:91:8f:
         66:1f:e3:27:37:e6:90:56:8e:8f:e2:e2:d0:e0:af:7c:6d:d2:
         d1:16:9a:76:58:0b:7e:5a:69:59:30:62:b8:46:1b:37:c2:b0:
         d0:e4:67:9b:8f:6b:9c:f4:23:15:27:7d:a8:eb:dd:4a:60:5e:
         2e:d8:39:29:3a:9c:ea:f1:fb:91:e7:b3:3d:3e:67:e6:92:86:
         ab:7f:f4:1d:75:a1:64:b7:80:b4:50:4d:90:2d:da:5e:d2:32:
         fc:04:98:92:5c:7f:44:09:19:a2:f7:9b:74:48:46:6b:d7:d0:
         8b:af:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:10:10 2025 by rpki-client