Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa
File:                     ddb495f4-e786-35e8-a411-017aa3cd9084.roa (raw, json)
Hash identifier:          1YjgQ6UEvFcBGiIGgkgVZrBaV6ZybKc3AsyxHlbAnMA=
Subject key identifier:   F4:F9:6F:90:B1:74:9B:47:BA:2E:5E:F8:D2:74:5F:49:DA:D7:F8:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411B1ED32DB77850EF33700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:b1:ed:32:db:77:85:0e:f3:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=050b124a-4afb-4a31-9f00-8e283bcb9ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:71:18:3c:c9:3c:8f:d2:2d:05:c0:af:6f:
                    90:0d:25:5c:95:c8:5f:8b:85:bb:61:1d:42:b9:bd:
                    ff:63:e1:3f:4f:cf:7d:6b:39:b3:bf:76:dd:34:c0:
                    43:45:64:84:ab:8e:e8:8b:31:f6:0c:80:e2:fe:4a:
                    dc:6f:d0:b0:aa:0d:b9:1e:50:26:77:b7:77:3c:0d:
                    4c:3c:59:2b:db:70:05:7f:5b:70:2b:2e:35:b4:d7:
                    7a:3e:aa:89:89:b8:53:7a:d8:0c:dc:2e:6e:96:57:
                    e2:a8:44:78:3e:5a:c2:70:4c:a8:ad:c6:1e:13:2d:
                    64:26:67:e3:0d:18:8c:a8:5a:86:ff:f4:fc:17:d9:
                    02:94:8e:73:da:ba:a7:28:3a:77:2e:bf:4a:fe:01:
                    39:eb:78:23:37:45:74:8f:b9:db:26:34:1b:53:18:
                    bd:56:c0:31:77:51:95:01:af:18:11:72:89:0b:41:
                    e8:05:43:93:20:f4:95:2b:4a:8b:3b:a9:b0:4a:b4:
                    95:3e:be:8e:81:76:db:5b:8b:a7:30:e5:68:79:69:
                    a1:a2:3f:54:c6:14:26:37:4b:f0:f3:71:f4:4e:5e:
                    6d:e8:fc:c6:ad:8d:f7:12:9f:7b:06:3d:6a:7f:39:
                    35:3b:0a:b6:c2:c9:08:7e:a3:95:0e:56:50:5f:86:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:6F:90:B1:74:9B:47:BA:2E:5E:F8:D2:74:5F:49:DA:D7:F8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:72:0f:84:3a:da:34:81:3b:a1:d9:35:de:4b:c5:3c:1d:
         d0:ed:66:d9:90:3e:1f:b1:28:87:58:42:4f:4c:04:72:c1:e8:
         5b:87:2f:5d:41:e0:0e:e5:f0:ef:8a:7f:60:27:be:c7:5a:9e:
         8b:3d:bf:46:84:e9:c1:49:f9:29:ce:09:76:c9:1c:64:c4:70:
         57:e4:54:66:6f:fd:f9:98:31:a3:5e:c0:b0:2d:98:e5:19:26:
         11:46:b7:d6:a8:4d:4e:e8:2b:bf:d7:ad:df:98:a8:e3:18:b6:
         3d:ff:ee:e1:e5:7b:a6:d1:54:35:90:24:70:bc:1b:37:8d:e5:
         84:b4:ae:4b:86:4d:19:87:d3:1b:d3:19:d5:b1:66:e3:42:67:
         3a:6e:81:a1:ee:71:94:df:ec:9a:e0:09:50:6d:90:35:dd:64:
         a4:4b:a9:4d:f9:15:b2:e0:20:a5:29:bb:4a:01:ac:23:b1:62:
         8a:f2:d7:4e:ac:d8:f4:6e:82:04:41:fe:4d:6d:45:69:96:06:
         91:9d:58:75:8f:8e:47:7b:12:c7:47:80:78:14:f8:f8:28:5b:
         8d:a4:4c:96:96:94:69:c4:7e:18:71:11:44:9e:25:8e:08:15:
         04:d7:7d:c5:42:28:53:5d:e9:fa:2e:90:34:bd:a5:35:2a:06:
         86:05:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:11 2025 by rpki-client