Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa
File:                     e3a9b647-f41b-35d3-8c81-fa036a52454b.roa (raw, json)
Hash identifier:          /2Fe44IeavemSbTrfP0FhCtbxFeAaEaeOX2wZLq/X+o=
Subject key identifier:   45:D4:5D:1C:51:F6:36:1E:72:E2:05:10:65:BC:1D:B2:7B:D9:41:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110CD782E6CC09F6CA0E60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        72.173.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:0c:d7:82:e6:cc:09:f6:ca:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0539a774-3656-4322-9d52-b811a90e9dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:c5:ee:26:c6:56:57:20:18:92:0c:ac:37:
                    92:c3:4d:6d:1f:18:f2:cd:86:d8:6f:0f:07:b8:a0:
                    86:32:fe:a4:9c:83:77:df:3b:42:88:60:aa:75:84:
                    f6:a1:d1:bc:6e:9e:d2:98:66:99:69:f3:cb:72:e1:
                    51:11:3f:bb:44:ab:d6:df:e2:14:9d:f1:76:52:05:
                    78:21:5c:70:3b:9a:62:96:bb:94:22:dc:5d:d8:64:
                    42:1c:31:62:66:fc:f7:0f:f9:ab:ff:bf:01:5a:cf:
                    76:20:c6:01:eb:b6:50:dd:65:7e:f4:ec:c9:61:93:
                    97:6c:80:80:21:f1:d9:b1:0a:3f:b1:98:f5:12:ae:
                    70:ba:55:ac:7f:c9:ab:2b:47:d8:00:02:9c:b9:0b:
                    af:40:19:3a:bd:a1:43:6a:dc:bd:5b:fd:a0:1d:d9:
                    51:28:81:9a:bb:d6:38:57:81:c1:d2:3f:5d:68:e4:
                    d0:40:b5:2b:04:aa:ee:6b:6c:89:08:80:18:08:83:
                    02:17:dc:b5:49:b0:71:56:8d:8d:f9:b8:9f:52:f2:
                    7d:70:f0:7e:c0:56:aa:4e:e7:9a:45:18:d1:44:92:
                    1b:24:c0:bf:93:69:b5:09:e1:cb:94:74:be:aa:8c:
                    57:55:ca:7b:63:db:61:0b:2c:fd:2a:ad:51:5b:f3:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:5D:1C:51:F6:36:1E:72:E2:05:10:65:BC:1D:B2:7B:D9:41:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:c1:b3:22:ce:10:85:b8:e9:b4:31:75:1a:22:1c:50:ab:
         29:74:69:11:c2:b2:54:10:66:4a:d3:f4:09:e5:21:b2:6d:a3:
         43:49:67:6d:e6:63:5e:4d:13:8f:ef:ee:b0:9d:b4:0d:5e:11:
         ec:f9:60:94:0a:ba:cd:7b:41:35:0c:4c:c3:28:82:7b:6b:61:
         c6:f8:b4:ac:ca:46:48:fd:6b:ad:16:27:95:c5:6d:f0:a7:33:
         1d:c7:5b:d3:96:60:96:ad:5b:ce:0f:a3:93:fd:e3:0d:83:23:
         60:1a:7c:66:cb:6e:ce:85:87:2c:d4:33:91:ac:d8:70:18:fb:
         9d:45:7d:ea:37:c5:17:8d:39:78:75:d7:be:56:8a:6c:a5:98:
         7e:31:68:74:b4:39:14:f4:30:c2:52:28:9c:d9:61:1d:5b:67:
         7f:dc:64:a4:31:1f:07:2d:4a:a1:5d:76:5e:05:17:3f:83:db:
         9e:46:a9:76:98:a1:e4:e4:a5:f2:12:aa:04:1a:c0:73:89:ff:
         aa:22:9b:bf:1e:ec:15:28:08:c1:47:e5:81:b2:f7:0d:ad:51:
         54:62:f9:d3:0f:e3:a1:8c:a3:46:0e:bf:fb:21:22:0a:1b:07:
         9e:16:86:87:3d:f1:a4:1d:8f:22:e0:63:f4:d8:90:97:06:fc:
         2b:0f:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:46 2025 by rpki-client