Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa
File:                     d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa (raw, json)
Hash identifier:          f2JUjuhdHKFZRjUMY2whD0gR61pZe/aNVuCDArbF2pw=
Subject key identifier:   BE:5F:EE:86:1A:C1:E6:25:0A:A0:03:D0:C0:96:78:5B:14:0E:0B:F1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841107C90346FBD9D59A0E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:07:c9:03:46:fb:d9:d5:9a:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=00760c80-3736-4593-b0aa-a566205fa8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:04:d1:67:dc:16:99:28:a0:fd:76:e4:1e:
                    05:bd:9f:15:85:e9:11:8c:76:be:6a:87:b7:6d:18:
                    23:ed:81:fe:7e:d3:24:39:be:1b:7e:e7:2f:6b:61:
                    02:07:a2:2e:ce:04:9a:2a:e7:8a:d6:e6:77:3f:61:
                    80:80:d8:8c:b0:b1:c5:0d:2e:1a:95:a6:a1:86:ff:
                    99:6b:c7:68:22:1c:bf:c9:c4:bf:68:48:ba:b4:c6:
                    95:4f:85:3f:34:55:95:c9:3f:d6:33:85:bb:c4:83:
                    bf:3f:61:f1:49:12:0b:be:e3:b4:77:4b:c5:fb:f0:
                    0b:f0:aa:17:8a:3d:59:aa:dd:15:13:e5:18:b4:1b:
                    81:15:52:da:3b:dc:ca:54:20:fd:f8:53:b7:ff:fb:
                    36:95:45:11:a5:6d:19:40:19:87:f4:96:d6:3d:71:
                    8d:3e:35:27:b4:94:38:cd:75:19:57:5d:a4:4d:b3:
                    45:b4:96:9f:28:34:6a:20:7f:92:30:d4:43:b9:30:
                    c9:37:4d:2c:27:7e:b1:ff:d4:32:59:25:63:77:e9:
                    9e:59:58:7e:e9:4d:fc:95:09:d3:6c:a2:f0:d6:0c:
                    0e:77:ee:4b:69:00:d4:47:fc:e5:07:dd:f7:04:ba:
                    69:62:29:cb:de:b0:67:de:5c:3a:59:c7:42:eb:a9:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5F:EE:86:1A:C1:E6:25:0A:A0:03:D0:C0:96:78:5B:14:0E:0B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:b0:66:62:0c:cd:3c:6a:86:f7:07:24:1f:2f:0a:53:48:41:
         47:32:1b:75:91:4f:59:7d:96:ce:98:74:27:0f:36:5d:5e:f4:
         3d:93:78:4f:0a:78:20:e4:97:55:7c:c2:97:35:11:bc:6f:8f:
         17:4a:d8:9f:c2:83:aa:e8:44:e7:b5:b5:3e:e3:5e:ee:a8:c7:
         b8:d5:f1:0f:fc:59:13:e8:e3:b4:4b:47:d4:a6:99:bf:ac:db:
         d8:a8:f3:fa:e9:f4:09:f9:76:6e:d3:4e:40:93:2a:75:cc:d3:
         bc:52:4e:3b:af:03:0d:ad:e3:0f:95:d0:d5:a9:d5:35:b8:48:
         42:eb:79:8f:64:ef:01:fd:8b:6e:bb:40:45:28:04:ce:4f:91:
         05:5b:bf:fa:bd:b3:a1:0a:3a:3c:0a:1d:cc:de:e4:17:d9:7f:
         6a:61:14:aa:5f:eb:d6:08:db:8c:b5:c9:43:7f:e4:e7:f7:c4:
         1e:a6:c1:2f:24:4a:57:50:4f:35:88:bd:a4:f5:5d:b1:fa:47:
         80:cb:af:58:a5:0d:02:dc:6e:4c:eb:23:f5:43:15:29:3a:b1:
         a4:bf:4b:8a:4a:a1:23:97:12:df:e2:19:5f:9b:b9:b1:44:62:
         e8:57:51:c1:cd:36:37:f8:65:4f:a6:be:2e:b3:9b:6c:3a:c8:
         0e:7c:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:36 2025 by rpki-client