Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
File:                     ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa (raw, json)
Hash identifier:          /jL+f63EfeVN4sQLXRYmGY0NVLyQWO2HKRB7BUVHNZo=
Subject key identifier:   99:67:8B:26:24:4E:4F:03:5F:C3:F2:0F:3A:F3:59:3E:CD:4B:12:A9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411B8092CC9AFD975107480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:b8:09:2c:c9:af:d9:75:10:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5eb10315-e2c4-411f-8944-88011ca3ffb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:32:b0:e6:19:1d:79:a7:84:f0:3b:b1:8b:
                    3a:37:52:7b:b5:56:da:68:c7:98:94:22:30:26:70:
                    7a:c3:a5:76:41:7c:d6:52:e7:89:64:87:31:f7:7b:
                    8d:4d:55:8e:a4:3f:f2:46:f6:a6:d2:dc:54:59:a6:
                    72:d6:40:07:70:b3:7e:80:72:14:c5:31:db:36:c2:
                    8e:43:59:59:58:d7:48:7e:0e:ad:e4:6c:eb:9c:45:
                    85:29:bd:ff:f3:d9:e3:32:e5:e4:26:f2:d1:f0:2e:
                    8f:3f:72:f9:23:f2:ac:e1:1a:20:e7:11:18:06:ee:
                    0b:e4:cb:47:69:ab:28:6a:3e:4a:7f:1a:0d:e2:80:
                    0e:a3:6e:be:a0:88:73:eb:a1:56:32:44:94:c2:c3:
                    1f:e7:da:83:2f:f0:72:86:8f:56:fc:a0:a0:63:1b:
                    be:df:a9:df:d6:d9:94:de:b1:34:dc:c2:8c:ca:bf:
                    9c:55:b3:df:b3:6a:32:a8:f7:72:2d:4a:b6:5f:02:
                    31:a6:ea:ca:e0:12:e7:18:ef:3f:24:e9:fb:11:5a:
                    85:f6:e8:53:06:e7:77:2d:d1:fd:3a:3a:70:ed:bf:
                    2f:15:bc:2c:5d:dc:2d:d5:90:16:1c:d4:f0:8b:e9:
                    7c:bd:24:09:09:f0:e2:f3:11:14:db:32:1a:93:70:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:8B:26:24:4E:4F:03:5F:C3:F2:0F:3A:F3:59:3E:CD:4B:12:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:23:ac:75:bc:ea:0f:2a:15:96:76:20:fb:f7:62:e6:58:
         7e:29:c2:74:18:24:92:29:61:95:aa:19:d4:51:61:c7:22:d3:
         53:53:66:16:db:ae:ac:e3:2d:30:96:42:41:28:82:43:cf:c8:
         8c:8b:16:48:20:35:b7:97:e2:00:88:6c:a9:00:c6:96:84:36:
         78:51:59:76:c9:02:53:12:a4:6d:d6:d6:94:c4:c7:c9:ce:ac:
         60:69:09:52:fa:a9:f8:99:96:f8:a4:77:17:ba:37:f9:da:0c:
         93:ea:e8:a1:c7:2b:65:b9:80:65:5a:b2:6a:63:b0:d6:54:db:
         3c:81:04:49:b6:b4:46:3c:cd:70:df:40:8c:60:97:3e:e8:b0:
         7e:8c:ca:3c:19:2a:ec:12:58:aa:c9:2b:33:9b:1c:b0:a5:84:
         de:0e:f9:6d:f7:42:8a:83:eb:5f:d6:52:90:60:c0:48:d6:4d:
         88:fc:69:86:48:31:49:d4:09:ba:51:ad:a6:e9:cd:e1:5a:8c:
         fb:88:35:b8:96:94:f2:5d:1b:e4:2f:98:b7:32:6b:3a:2b:2a:
         af:aa:f9:79:91:77:c6:f7:f4:6a:0e:a1:ad:42:51:e5:e6:42:
         53:60:f1:54:cb:8c:8a:ae:9d:73:cb:f5:52:15:47:7e:58:4c:
         71:6f:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:52 2025 by rpki-client