Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa
File:                     0d79ec36-8620-3067-986c-38e60dc2d208.roa (raw, json)
Hash identifier:          cKGkocg5kiecsWvaU0nzg5nEBQUBhdqsesDZ5ZeKSVI=
Subject key identifier:   28:36:08:C6:8E:1D:41:D2:C7:5A:43:F5:92:65:91:B9:94:59:DA:C5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581D4E32CC346FEC8050D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        162.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:d4:e3:2c:c3:46:fe:c8:05:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=59f0d565-b5bd-4f4a-8054-b019ccee87ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:df:d7:c4:22:dc:86:02:4b:a5:68:6e:ea:cf:
                    38:23:5f:36:f0:5f:bb:78:b6:e3:03:7d:81:bb:d3:
                    b6:09:fd:90:2d:8f:b4:ab:d0:96:2e:b0:c5:98:66:
                    18:43:41:c7:aa:15:f1:a6:7a:ed:92:dc:01:85:7d:
                    e1:91:b5:8b:5d:f2:d7:3e:28:30:03:43:c1:d1:31:
                    07:5c:87:c9:fb:d2:f8:59:e9:5c:db:f8:9b:fa:c1:
                    2b:53:e1:34:e8:39:bc:96:a4:0a:48:c4:8d:99:f8:
                    ff:12:d7:8b:48:c3:2b:98:7d:44:aa:f6:ac:3c:f2:
                    13:2f:31:3c:33:49:61:75:17:a4:7a:7f:64:a6:f3:
                    43:3a:e8:21:f2:e1:5f:60:8e:84:17:c0:34:4a:26:
                    f1:2d:bc:af:19:ca:5d:b8:63:5b:49:70:d6:01:01:
                    2a:94:82:ee:eb:ad:78:ea:5d:69:de:62:08:ba:03:
                    b0:92:46:c3:c1:af:b8:20:7d:53:be:00:ae:2b:1e:
                    38:b0:cc:75:ca:86:81:09:0d:00:b3:b7:77:9f:fe:
                    0a:f6:a5:74:4d:8b:c6:58:56:a1:da:be:fe:b8:d1:
                    8d:de:83:c4:f6:5f:1c:c5:c6:40:a8:b1:cc:9d:90:
                    79:10:8c:d6:19:88:4c:93:3d:df:36:91:a4:bc:82:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:08:C6:8E:1D:41:D2:C7:5A:43:F5:92:65:91:B9:94:59:DA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0d79ec36-8620-3067-986c-38e60dc2d208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:15:39:7e:38:98:d5:35:10:94:03:c3:a7:f5:c6:19:e0:59:
         07:e6:55:69:e9:09:67:b5:12:35:4b:df:3f:b6:17:97:09:c0:
         ca:93:37:e1:2c:1f:f7:38:ad:68:c8:7e:85:0e:b0:78:05:f2:
         22:fe:37:76:3c:81:eb:99:c2:e3:d6:d5:db:b9:67:18:ab:e7:
         a3:49:de:b9:c6:82:d7:83:12:73:03:4a:51:d7:f0:0e:a3:86:
         99:23:66:a9:78:68:cb:87:f5:70:e8:f1:b0:2e:4a:a3:d7:c0:
         e1:c3:ab:17:f1:0f:bf:86:72:c0:08:38:59:11:ec:7b:3a:fb:
         dd:57:db:e4:5d:11:78:4b:e2:d1:2d:0c:37:11:94:40:73:cb:
         1a:5b:70:6f:b2:00:28:46:99:8f:30:3e:69:32:4a:5c:4d:00:
         25:32:4c:e2:97:ff:73:cd:ba:3e:59:3b:03:b8:b8:42:c6:f4:
         db:76:ff:7c:3d:e7:5a:1e:11:ec:32:d2:97:29:1c:78:42:8e:
         2a:12:f0:d8:61:15:66:e6:73:a8:c9:d4:04:d2:d4:c8:e6:15:
         60:da:94:b8:15:bf:8f:94:ff:75:8c:20:1c:20:44:0d:61:70:
         8d:e1:83:78:4b:51:cd:05:0b:dc:9a:c3:90:fb:33:2e:c8:26:
         a5:3a:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:02 2025 by rpki-client