Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64bbcda-2420-3f84-99d1-ec13b5a57964.roa
File:                     c64bbcda-2420-3f84-99d1-ec13b5a57964.roa (raw, json)
Hash identifier:          qNqhwI19awKM43xUq5hQiVyxSSSP230MBkCxa9P9w/M=
Subject key identifier:   40:FE:4A:0C:7B:70:E1:06:24:62:67:52:87:B5:79:B0:91:B6:C1:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F42F82ECF7D0FB9AA580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64bbcda-2420-3f84-99d1-ec13b5a57964.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f4:2f:82:ec:f7:d0:fb:9a:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ea0362c8-0f40-4bb4-a663-89fdfc595da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:dc:c8:f8:2a:f9:64:93:6e:c0:80:33:b9:
                    6b:db:2c:0f:a1:a9:29:56:29:20:39:5d:0d:69:51:
                    9e:7c:e6:23:e9:bc:93:6e:57:56:d7:33:18:03:27:
                    f9:9f:59:a6:8a:68:a0:de:e5:f3:5f:52:31:46:8b:
                    20:35:c3:8e:21:6a:cf:51:81:6f:00:5c:36:f3:22:
                    60:95:54:e8:d3:1e:38:ce:02:79:95:58:e0:75:e0:
                    28:4c:7e:d0:32:e1:eb:04:08:82:4d:7a:39:c8:22:
                    9f:ee:d2:59:50:c8:2b:6d:36:64:27:cc:f8:eb:26:
                    bf:de:85:ef:e7:43:bc:41:50:7c:b7:1e:d7:eb:7f:
                    fa:f5:36:28:34:87:3e:e4:18:e9:7d:a2:97:41:97:
                    18:54:c0:c3:4d:17:2b:f1:09:4b:c2:26:90:58:67:
                    06:8a:50:7f:50:54:35:c3:84:ac:79:d6:47:2d:51:
                    63:cc:b4:6a:64:bc:7d:bf:3d:b5:08:30:ab:7d:0c:
                    cc:10:9c:99:30:7c:5a:6d:78:81:6b:a6:ac:96:16:
                    45:5c:18:b5:29:ad:af:45:32:3f:38:e2:48:5b:7a:
                    88:52:c2:54:79:76:bf:b3:64:ea:61:8d:3f:e8:e9:
                    ce:8b:82:e0:38:8f:6d:85:03:cf:6e:0b:eb:54:4b:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FE:4A:0C:7B:70:E1:06:24:62:67:52:87:B5:79:B0:91:B6:C1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c64bbcda-2420-3f84-99d1-ec13b5a57964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:6c:d0:bd:10:5f:95:59:9c:3e:38:3e:12:36:26:4e:54:d9:
         6a:04:5a:60:f2:65:17:52:34:88:8b:ae:f9:05:26:dd:44:30:
         55:9f:a6:c9:2f:9f:cb:86:72:64:04:ff:a9:8c:5a:d1:ec:3e:
         c3:57:da:7f:ca:93:5d:18:d4:0b:70:84:d6:92:d8:97:71:75:
         32:46:b1:7d:74:14:09:fc:45:2b:78:97:2b:83:a2:c3:aa:8e:
         fe:d7:e0:24:56:a4:aa:18:5b:f8:6a:fd:d2:2d:60:03:a0:71:
         80:df:46:d3:02:9d:59:ad:46:fa:d2:09:4a:3f:cf:8b:82:2a:
         69:55:6d:aa:30:64:15:20:62:39:52:7c:3e:31:2d:6d:c3:8c:
         13:90:71:a7:7a:74:11:84:bb:c5:6f:24:78:2c:a1:25:75:ee:
         06:ee:6f:4f:3e:c4:bc:09:e6:de:09:ee:0a:78:37:74:de:3d:
         69:0a:34:74:47:e7:50:a5:3d:d5:c4:09:e8:68:62:3c:72:93:
         f4:58:d0:76:96:b3:eb:e8:94:65:c5:b4:fa:a1:83:f6:2f:d9:
         d1:3f:88:14:0d:28:47:ed:bd:47:41:e2:2b:28:fe:32:73:55:
         f7:ea:03:07:e3:4c:5c:6b:73:b4:fe:5d:26:bf:30:a5:27:5b:
         d6:75:ae:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfQvguz30PuapYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZWEwMzYyYzgtMGY0MC00YmI0LWE2NjMtODlmZGZjNTk1ZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooHcyPgq+WSTbsCAM7lr2ywPoakpVikgOV0N
aVGefOYj6byTbldW1zMYAyf5n1mmimig3uXzX1IxRosgNcOOIWrPUYFvAFw28yJg
lVTo0x44zgJ5lVjgdeAoTH7QMuHrBAiCTXo5yCKf7tJZUMgrbTZkJ8z46ya/3oXv
50O8QVB8tx7X63/69TYoNIc+5BjpfaKXQZcYVMDDTRcr8QlLwiaQWGcGilB/UFQ1
w4SsedZHLVFjzLRqZLx9vz21CDCrfQzMEJyZMHxabXiBa6aslhZFXBi1Ka2vRTI/
OOJIW3qIUsJUeXa/s2TqYY0/6OnOi4LgOI9thQPPbgvrVEsJ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFED+Sgx7cOEGJGJnUoe1ebCRtsGmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY0YmJjZGEtMjQyMC0z
Zjg0LTk5ZDEtZWMxM2I1YTU3OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokg+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALts0L0QX5VZnD44PhI2Jk5U2WoEWmDyZRdSNIiLrvkFJt1EMFWfpskv
n8uGcmQE/6mMWtHsPsNX2n/Kk10Y1AtwhNaS2JdxdTJGsX10FAn8RSt4lyuDosOq
jv7X4CRWpKoYW/hq/dItYAOgcYDfRtMCnVmtRvrSCUo/z4uCKmlVbaowZBUgYjlS
fD4xLW3DjBOQcad6dBGEu8VvJHgsoSV17gbub08+xLwJ5t4J7gp4N3TePWkKNHRH
51ClPdXECehoYjxyk/RY0HaWs+volGXFtPqhg/Yv2dE/iBQNKEftvUdB4iso/jJz
VffqAwfjTFxrc7T+XSa/MKUnW9Z1rt0=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:42 2025 by rpki-client