Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d87720c2-02fc-3d01-a438-e321adbb9481.roa
File:                     d87720c2-02fc-3d01-a438-e321adbb9481.roa (raw, json)
Hash identifier:          1BWIbzUYaA5O0PhKBBww7roXy12pOcA0sg4AXKSlGv8=
Subject key identifier:   C7:0F:DB:7F:1A:13:A3:05:54:82:1B:30:9C:F0:4E:82:4D:76:8E:62
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411404F458CA083976F9A78
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d87720c2-02fc-3d01-a438-e321adbb9481.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:40:4f:45:8c:a0:83:97:6f:9a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=32ea4238-06c8-403e-8130-cc4a62dd5881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:62:7e:ba:a7:84:1c:1e:de:b6:25:6b:4a:
                    5d:7c:99:18:2e:fd:b6:31:08:f8:4f:f9:e1:09:58:
                    b2:32:4b:ca:cc:94:86:d3:15:ae:ee:b4:60:98:fa:
                    4d:4e:96:c6:88:e7:5d:bd:1e:4a:6d:ef:3d:27:03:
                    b2:f2:99:7d:86:be:80:95:be:f0:0a:b4:8a:8d:83:
                    5b:c3:7b:8a:22:ac:3f:75:2c:72:b9:13:74:be:64:
                    cb:35:f0:8b:96:2b:80:15:f8:f8:e9:7e:23:5c:05:
                    cc:4f:0e:32:43:97:63:a2:8e:b7:2f:18:ca:ec:b8:
                    bb:c2:e5:c8:f0:46:82:23:05:ca:56:09:de:12:fb:
                    a3:bd:95:37:c8:8a:ae:51:72:c2:64:91:2d:a1:67:
                    df:ab:72:f0:b0:65:74:78:af:59:39:c6:11:3e:02:
                    d6:09:f3:f1:fd:64:df:e1:bf:0a:de:1e:3a:87:77:
                    77:56:8e:b4:d1:ec:4d:01:fc:9d:e2:8d:8c:0e:5a:
                    fe:9a:3c:c8:aa:c5:16:76:60:37:ab:3a:85:26:47:
                    71:d1:07:3d:75:87:dd:24:b1:d9:0d:62:a8:1c:e6:
                    8b:89:1b:2e:65:b9:a2:28:75:f3:bc:51:af:5c:c5:
                    f0:62:ec:d7:98:d3:0c:e2:f5:92:0e:e5:a9:82:5f:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:DB:7F:1A:13:A3:05:54:82:1B:30:9C:F0:4E:82:4D:76:8E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d87720c2-02fc-3d01-a438-e321adbb9481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:f8:78:83:e6:e1:28:f0:11:db:a2:a4:c4:93:61:c4:5d:
         e7:ff:19:9d:52:83:15:3d:dc:fe:69:4c:64:33:3c:b1:55:88:
         57:c7:be:28:0d:17:bf:87:6e:e9:64:ce:16:56:8a:e3:d0:e7:
         a7:67:c5:0c:ec:59:28:98:9b:00:5b:b5:90:55:d5:3e:26:c0:
         c3:02:9e:84:f1:c3:b7:dd:46:2b:40:f1:f1:74:7e:db:6f:1b:
         6a:81:d2:99:41:d0:37:18:21:4d:64:f7:80:20:d6:74:95:1f:
         16:f4:a1:29:0d:07:a5:f5:06:75:43:e9:4a:b4:80:10:e6:6c:
         e1:f8:8a:38:dd:a1:b0:7b:28:0c:f4:95:11:a2:45:c1:01:da:
         1c:e9:30:fb:ff:18:f8:47:bc:c6:2f:5e:14:cb:fc:d3:0b:e3:
         79:a7:0b:da:14:b5:2b:4e:1c:f1:d3:c7:02:82:46:f6:38:3d:
         da:0a:41:70:24:6c:e5:15:81:be:f4:e8:e0:73:26:82:d7:e1:
         05:d0:0e:16:23:09:7e:6e:e4:f0:2b:45:c4:99:28:b7:9b:75:
         6a:25:36:56:43:70:d0:d0:0b:05:45:d7:27:b4:89:23:b9:57:
         54:92:7b:c2:21:2d:76:3a:5a:ad:33:00:f0:5e:2b:54:93:e1:
         b8:20:6b:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUBPRYygg5dvmngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MzJlYTQyMzgtMDZjOC00MDNlLTgxMzAtY2M0YTYyZGQ1ODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleJifrqnhBwe3rYla0pdfJkYLv22MQj4T/nh
CViyMkvKzJSG0xWu7rRgmPpNTpbGiOddvR5Kbe89JwOy8pl9hr6Alb7wCrSKjYNb
w3uKIqw/dSxyuRN0vmTLNfCLliuAFfj46X4jXAXMTw4yQ5djoo63LxjK7Li7wuXI
8EaCIwXKVgneEvujvZU3yIquUXLCZJEtoWffq3LwsGV0eK9ZOcYRPgLWCfPx/WTf
4b8K3h46h3d3Vo600exNAfyd4o2MDlr+mjzIqsUWdmA3qzqFJkdx0Qc9dYfdJLHZ
DWKoHOaLiRsuZbmiKHXzvFGvXMXwYuzXmNMM4vWSDuWpgl8a1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcP238aE6MFVIIbMJzwToJNdo5iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDg3NzIwYzItMDJmYy0z
ZDAxLWE0MzgtZTMyMWFkYmI5NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+k+HiD5uEo8BHboqTEk2HEXef/GZ1SgxU93P5pTGQzPLFViFfHvigN
F7+HbulkzhZWiuPQ56dnxQzsWSiYmwBbtZBV1T4mwMMCnoTxw7fdRitA8fF0fttv
G2qB0plB0DcYIU1k94Ag1nSVHxb0oSkNB6X1BnVD6Uq0gBDmbOH4ijjdobB7KAz0
lRGiRcEB2hzpMPv/GPhHvMYvXhTL/NML43mnC9oUtStOHPHTxwKCRvY4PdoKQXAk
bOUVgb706OBzJoLX4QXQDhYjCX5u5PArRcSZKLebdWolNlZDcNDQCwVF1ye0iSO5
V1SSe8IhLXY6Wq0zAPBeK1ST4bgga3Y=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:04 2025 by rpki-client