Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa
File:                     b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa (raw, json)
Hash identifier:          5xFybD6N5mmi3AKTCFL7+e8LV0/r9OxVtNbYpV8meAQ=
Subject key identifier:   FE:93:AD:69:A0:08:B6:0A:EC:FA:E2:B0:11:0C:41:EC:8C:E5:2A:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411B8F71F6F82D3E7352A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:b8:f7:1f:6f:82:d3:e7:35:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=20e2c239-8871-4c66-a0a2-8d2372120adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:df:85:68:97:90:c2:24:10:a2:02:89:d9:
                    85:78:42:c0:f2:18:db:af:a3:07:a8:2e:48:8f:d3:
                    45:d0:55:10:c4:47:5e:5b:8c:b2:f7:ea:d2:ec:b8:
                    2b:2a:8a:0a:40:99:b9:8f:8f:10:94:f9:b2:2e:b4:
                    77:f1:b6:00:5d:ec:6b:81:ea:1a:04:86:3e:aa:9c:
                    91:59:66:13:b5:52:5e:e7:39:d2:84:e7:72:81:af:
                    f0:3f:6b:87:da:1d:26:2b:ba:60:18:ec:18:8c:d9:
                    c5:12:d6:6e:30:af:af:5e:9b:d4:1e:5b:66:98:1f:
                    84:30:18:21:20:cc:b6:5b:91:5a:78:85:66:d0:d0:
                    88:78:db:d9:4d:d2:4a:62:c8:0a:d3:ba:28:4a:c8:
                    d3:87:f5:93:5d:ad:c0:42:a2:9d:0e:31:29:bf:af:
                    1a:60:be:5b:b4:77:31:67:10:c5:84:77:46:2e:88:
                    f0:ef:cc:af:37:a9:f9:b8:5f:08:1c:64:32:e5:54:
                    b9:a4:78:53:dc:4e:68:92:4c:8f:53:54:32:48:2a:
                    fb:25:db:7a:27:b1:76:80:d6:08:7e:e0:41:1d:80:
                    ae:62:56:09:b4:25:38:ac:cf:90:3a:2f:5b:d2:8f:
                    b7:04:58:0e:2b:45:3e:04:12:8f:c9:c2:d6:a8:94:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:93:AD:69:A0:08:B6:0A:EC:FA:E2:B0:11:0C:41:EC:8C:E5:2A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:af:47:bd:e5:19:d7:e2:07:49:4b:89:03:a4:42:a7:6f:0d:
         59:d5:58:5f:52:ff:6a:92:d1:74:bd:e5:78:1c:4a:ab:eb:d7:
         77:d3:2e:83:86:a0:24:28:00:b1:7a:83:c6:6f:84:01:5e:7b:
         c8:7b:e3:8e:49:f7:d5:86:e0:58:e0:f1:3c:c2:b9:97:27:a9:
         91:b0:59:4d:98:78:4c:4e:38:ad:ea:9c:55:4f:aa:c2:26:fa:
         dd:b8:6d:03:1c:52:d6:fb:33:11:bb:05:11:c0:f9:e6:f2:15:
         6c:ab:42:45:4a:99:ca:58:56:6c:69:36:fe:3f:07:d1:34:61:
         cd:2b:1b:bb:54:34:93:17:4a:81:2d:60:a8:f5:54:e0:3f:46:
         c1:40:7e:d6:f1:99:2f:2d:1b:bf:bc:22:b4:93:ea:66:33:c7:
         55:56:58:40:65:44:f6:93:fd:bb:c8:3d:d6:ec:43:f6:18:64:
         d1:c1:a6:ac:dc:5a:96:8d:bc:58:af:35:e5:ac:85:c7:23:91:
         e1:83:ff:58:ce:8f:5a:5a:7c:dd:93:06:2e:52:14:d4:43:43:
         2d:37:0e:e6:b8:29:bf:e6:55:d4:df:27:ac:d1:6f:df:1e:04:
         8c:fe:ad:76:02:1d:b5:45:fd:e9:5d:0f:9b:69:96:23:66:54:
         68:2e:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:11 2025 by rpki-client