Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa
File:                     e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa (raw, json)
Hash identifier:          jJv2tnNKZbZ9tcn6gPl05lqzcbk0gftiPMY45iszVYE=
Subject key identifier:   B3:48:3E:B7:09:B7:62:F3:1B:2E:D3:F9:D6:50:35:AE:3C:23:C1:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841140776EC7C67EE08DB500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        162.72.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:40:77:6e:c7:c6:7e:e0:8d:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8dd2e136-1fee-41b7-a2a9-d2dc7165f6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:ff:0e:45:df:cb:79:cd:4f:56:0c:0d:64:
                    60:bb:c1:8e:51:86:f3:f4:e6:2d:81:dc:37:a8:a9:
                    40:09:df:dc:38:e2:82:46:66:ca:e8:8a:10:50:fb:
                    97:98:46:1d:2e:ee:26:f0:9c:fe:c8:d6:de:10:21:
                    63:fe:9a:11:03:9a:eb:c3:62:7b:8d:e2:11:3d:38:
                    c0:3e:42:06:af:b9:70:cf:82:ab:53:47:b4:fe:d7:
                    47:78:78:61:db:21:fb:bf:06:7a:95:b2:ab:c4:a3:
                    50:ca:56:c7:75:6c:68:c9:40:44:cc:7f:97:c2:51:
                    8c:aa:19:09:0b:6d:63:d9:e6:f7:22:94:43:6a:8d:
                    fc:76:c0:ce:a3:ba:af:de:40:3c:f4:60:b6:68:6c:
                    bb:5b:fb:4c:bd:8e:b9:3f:3b:c6:b1:21:ae:29:47:
                    11:7e:fc:27:f9:97:2e:23:0e:1f:db:b1:53:99:86:
                    cf:a3:04:a0:0f:81:d1:a9:b5:a5:3c:b8:8e:ef:e4:
                    38:1a:9a:30:d7:17:8a:df:f1:3e:b6:49:b7:f0:2e:
                    95:e7:da:44:ff:e4:0e:d0:a2:6f:98:b6:7d:3a:56:
                    65:4d:00:43:8e:b5:8d:72:af:dc:6b:01:c1:e6:6c:
                    08:fa:db:ce:c5:d1:16:51:bb:6b:40:8b:46:7e:22:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:48:3E:B7:09:B7:62:F3:1B:2E:D3:F9:D6:50:35:AE:3C:23:C1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e735d5c5-6970-3d7e-ae12-beb5a4d89397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:bd:02:f2:19:70:aa:6d:4a:9d:16:86:65:f6:12:1f:49:
         ad:28:13:c6:12:92:b9:61:06:39:b2:69:a2:33:80:c1:4f:26:
         a9:4b:86:17:e8:fa:7b:b7:b4:2b:02:77:e5:29:b3:c0:72:13:
         a6:8d:f8:22:36:0b:20:62:de:45:43:fb:c5:53:f1:65:52:1c:
         6f:8e:de:45:3f:8c:2f:bb:c5:be:0f:2a:42:6a:8a:eb:2d:02:
         d2:13:de:4c:41:ac:6f:c1:b4:b4:d9:74:40:a6:91:2e:ab:c9:
         e4:cf:24:40:a8:04:2a:87:9a:c0:be:ef:56:a6:0f:21:15:0c:
         9b:25:98:f0:b5:33:b7:a2:d1:40:ab:d8:f6:16:eb:09:e5:16:
         ce:41:e4:1f:ba:68:4e:05:2c:d3:db:66:c2:50:80:87:f8:f1:
         61:30:9c:d8:0d:3d:0e:06:62:75:58:b4:c1:3c:a1:21:08:1f:
         7a:1c:04:4c:b2:30:01:1b:2c:42:bf:92:4d:14:e5:30:1b:1b:
         90:fa:bb:e9:fb:98:5f:2f:4b:0b:e2:bb:4e:d6:1c:c8:c2:63:
         5a:28:32:a9:c7:3f:47:71:2b:d1:f0:f2:c0:9d:dd:09:e0:43:
         87:e0:15:0b:ca:8f:43:53:5a:a6:35:62:b0:a4:6d:30:3b:93:
         01:d9:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:15:36 2025 by rpki-client