Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa
File:                     dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa (raw, json)
Hash identifier:          SCQJUK/264LU/m3+6o0/D4maI0TsSgh1GHy4adj94tw=
Subject key identifier:   BF:8A:A7:0A:0C:91:8C:12:3C:39:BA:46:0E:00:70:B3:52:0B:F4:09
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411B73D57243928012C1E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:b7:3d:57:24:39:28:01:2c:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=42efd1f2-5449-417c-8719-54b4856f705f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:01:d3:1f:b9:4e:af:47:cb:d2:1b:7e:b4:
                    7a:30:7f:25:ee:d5:75:12:28:e4:95:5e:93:25:df:
                    5c:00:60:58:d0:a8:6b:c0:c7:f3:5b:1c:e3:c2:da:
                    03:bb:5c:75:92:c8:47:fa:a3:89:fb:29:18:b6:23:
                    93:ce:49:2a:ac:f7:ec:5f:11:22:96:70:c7:61:8a:
                    6d:f0:ec:d1:8a:49:d9:9a:0e:50:90:3c:b6:ac:ef:
                    e1:ff:87:4a:8d:f3:13:69:53:17:a6:78:c8:6c:e2:
                    d8:aa:bb:00:48:3d:bb:2c:30:ec:ac:57:b9:86:2f:
                    85:14:ab:68:b0:f2:9e:0f:d4:84:98:9c:13:f7:ee:
                    b8:16:a7:8c:fc:f5:b2:0b:68:64:6f:1e:14:2f:56:
                    88:17:16:95:4b:42:fb:63:c4:02:39:15:70:55:59:
                    07:89:24:65:e3:79:03:d6:91:23:86:b4:22:ca:37:
                    33:d8:de:6a:1d:6d:81:32:c8:5f:48:0a:bd:4b:5e:
                    aa:d5:ed:ab:89:74:0d:1f:98:97:38:91:5f:f9:b5:
                    c9:ef:76:24:28:2d:fb:f5:08:b9:b8:77:57:66:d0:
                    df:1c:ff:2b:72:69:43:fd:cd:34:fe:ee:42:06:1a:
                    89:99:43:91:b8:f8:56:7d:5a:ab:36:f9:dd:d9:38:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:A7:0A:0C:91:8C:12:3C:39:BA:46:0E:00:70:B3:52:0B:F4:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:8e:3a:c6:9a:de:67:d8:8c:ba:e0:9a:15:a7:b6:f1:25:
         ff:76:95:6a:7d:25:4d:c4:4e:e2:27:61:26:6d:c5:ac:65:d3:
         0f:c4:6e:a1:f2:e0:4d:c3:17:51:2f:cb:4d:1b:6e:1f:08:20:
         5c:ea:c6:d3:7c:57:e5:6e:fa:27:5e:ac:b6:de:b7:30:43:ab:
         09:15:b4:65:d4:3b:f9:19:23:75:32:08:69:ac:83:e3:35:af:
         ca:92:fa:ef:26:e0:71:62:9d:7e:a7:7b:d4:6b:5f:2b:f2:cc:
         ff:b7:10:3e:c9:42:78:1f:f7:92:0e:da:8b:09:77:8a:07:01:
         ae:e6:38:03:91:3d:22:64:be:22:5d:9c:2f:1d:89:92:a1:0a:
         34:dd:2c:a3:88:c9:04:25:7b:01:94:e8:e1:ee:26:a2:7e:65:
         0b:e5:24:19:ab:98:9b:e1:f3:a9:50:73:8b:f6:da:8f:3e:4f:
         8e:e0:94:cc:5e:13:72:04:ea:82:68:06:8c:e2:cf:30:b6:2e:
         72:c8:03:16:48:0d:d7:99:71:ce:07:5e:48:58:37:fa:c0:ad:
         0c:db:b4:01:f7:a0:b8:ba:01:be:99:6e:0c:89:9c:92:ec:aa:
         96:43:df:5e:b4:c4:6f:4c:09:e9:2b:71:d8:b0:62:1f:86:cb:
         69:e1:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:21 2025 by rpki-client