Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa
File:                     c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa (raw, json)
Hash identifier:          aZoSTL57p1D7LUKdfTi6LLnhcobRX4VXBSlqS5pWHMw=
Subject key identifier:   E9:DB:FE:CC:5F:C9:C1:10:3D:F8:19:58:DE:C3:B9:A0:02:14:1F:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F40B32258BBB85980D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f4:0b:32:25:8b:bb:85:98:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=db20a232-0323-4ffb-bdff-5170cb518b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:1f:48:cd:46:4c:6b:3c:fd:83:6f:64:2b:
                    9c:93:d2:dc:48:d1:b2:9c:fd:d5:db:76:01:46:98:
                    29:e5:1b:59:87:b5:5d:50:53:59:8c:d4:0d:a7:60:
                    c0:47:6c:b3:b8:8c:49:ba:b1:33:ee:54:56:41:dd:
                    41:b3:a3:20:fc:2c:ea:0d:87:14:10:1b:37:f6:99:
                    61:25:21:78:3f:6a:d3:cd:ef:df:7e:da:56:5d:d1:
                    59:94:42:f0:c0:d7:13:3f:6c:59:54:84:10:b4:69:
                    c9:9b:0d:a4:f5:35:74:b4:08:9f:0f:d0:10:9a:f9:
                    b4:3f:fa:f3:29:82:be:19:a0:4f:54:48:d6:5a:88:
                    a0:da:37:2a:00:a1:15:75:45:e6:54:4c:d7:7c:d9:
                    24:8f:1f:29:34:84:55:99:6f:51:53:6c:51:45:a3:
                    0d:d5:79:e2:26:d3:31:9c:a2:b3:2c:50:5f:64:da:
                    ca:58:a1:fe:c6:bc:5b:0b:8b:d4:48:4c:12:b2:2c:
                    be:95:6d:24:33:19:20:65:b0:35:bd:f5:bd:4d:c2:
                    97:ad:9d:8c:6a:df:6e:cd:eb:75:67:2b:cb:d1:5a:
                    e2:f7:e0:5b:60:df:5d:ad:26:6e:c7:60:3e:47:a3:
                    6d:61:8e:71:4c:92:75:db:e0:e6:e3:5c:6f:6c:ea:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DB:FE:CC:5F:C9:C1:10:3D:F8:19:58:DE:C3:B9:A0:02:14:1F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:1f:b9:66:c8:f6:59:9c:23:ec:ec:57:07:14:2a:9f:46:
         62:20:dd:0f:ab:7a:fe:c9:09:3f:9b:e8:7e:83:34:8c:9b:f8:
         13:2a:9c:6d:94:58:ab:5c:b7:7e:67:2a:5c:3b:aa:41:25:88:
         6c:a8:92:d5:8f:cd:98:8e:60:8c:08:a4:9a:5f:09:94:6d:d4:
         57:cd:51:1b:10:38:a3:58:98:44:e3:87:e9:45:9d:e1:40:5f:
         e6:72:26:dc:ab:5f:e2:d5:a9:f9:d6:54:b2:a7:a3:75:4e:70:
         6c:18:72:cc:d9:cb:3d:29:67:a8:a5:74:71:f9:c8:92:8d:13:
         35:1b:08:52:7c:55:c4:e3:18:38:45:62:13:eb:c3:9b:4a:2b:
         6a:81:68:9b:fe:1e:80:52:0d:76:3d:e1:0c:63:91:b7:e7:bc:
         36:8d:54:1e:eb:22:65:4f:55:a8:14:1e:82:6c:db:f0:e3:66:
         44:e3:1f:39:67:40:04:46:68:3e:54:2e:56:8b:0f:80:af:50:
         9a:8e:ee:22:b8:8c:44:58:58:ea:7e:e4:a6:c8:4b:c1:31:d9:
         5c:83:5a:39:a4:ac:ab:4e:29:dc:a5:ed:56:be:85:b0:c1:fa:
         96:18:d1:46:6f:60:21:40:22:3a:ac:2d:0f:4a:a2:fb:16:2e:
         c5:27:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:52 2025 by rpki-client