Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/490383ec-e1ec-33cd-bd55-67456c690237.roa
File:                     490383ec-e1ec-33cd-bd55-67456c690237.roa (raw, json)
Hash identifier:          B7OC1IZymdz7YFBXvROEASheDACNfGnEMcCR+3VHmHk=
Subject key identifier:   A9:88:94:86:65:69:9F:4F:14:58:83:18:7F:FB:47:6E:47:9A:B6:3D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581D2E2556345919364E5F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/490383ec-e1ec-33cd-bd55-67456c690237.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        162.72.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:d2:e2:55:63:45:91:93:64:e5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e7c5a283-f157-44dd-870a-410bcf715192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:f2:c9:56:86:34:6d:9b:65:0b:a7:58:65:
                    90:15:3e:be:5a:60:84:f2:a7:09:13:23:66:01:26:
                    2d:4e:b2:69:03:26:39:3c:ad:99:4d:80:b4:a3:b8:
                    66:d5:b3:8c:ed:26:c1:69:20:fb:f3:1b:2e:47:ab:
                    7d:40:bb:ce:33:d2:d9:8d:b2:d1:22:20:6c:f2:6c:
                    6d:cf:c1:14:5b:17:f8:57:97:bd:cc:aa:71:e4:0a:
                    b9:fe:6e:83:d3:73:00:82:95:1e:5a:e8:52:d6:fa:
                    b4:4b:89:89:77:ed:72:37:59:15:bf:51:ae:01:be:
                    9d:db:4d:24:23:0f:ca:ed:c8:ca:c2:db:44:dd:ab:
                    df:3e:ee:0d:f0:71:4d:f6:51:ed:b5:1c:9a:c9:ac:
                    d4:e1:f2:af:c3:49:e9:d0:62:53:9b:77:cf:1b:11:
                    7b:48:eb:3e:7c:6e:81:c9:d1:24:7f:df:31:d8:cb:
                    d9:05:30:45:93:d5:bf:92:83:92:f9:b0:62:26:14:
                    49:bc:e1:4c:d8:88:c2:56:7e:83:04:7b:58:0b:48:
                    ea:fe:fe:c5:21:f6:50:41:30:7a:df:cf:09:f3:fb:
                    1b:56:bd:00:c1:10:07:f4:b9:a0:80:cf:d1:b4:c2:
                    0c:e8:06:c2:88:b3:b7:f0:3a:ec:eb:79:5c:f8:11:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:94:86:65:69:9F:4F:14:58:83:18:7F:FB:47:6E:47:9A:B6:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/490383ec-e1ec-33cd-bd55-67456c690237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:a0:93:31:32:36:c3:30:8e:7b:d5:99:9a:2c:5f:3c:ba:
         2c:37:ba:c7:c2:6c:fe:64:91:ac:65:db:ad:e1:81:a8:9c:51:
         8e:b8:71:85:d4:f4:63:6e:f2:66:00:b6:a7:93:62:00:39:8d:
         80:03:42:9d:1c:fe:59:14:eb:dc:2d:c4:a7:cc:92:f8:e9:df:
         e4:a2:42:09:cd:ec:a0:77:17:ec:1f:f6:d2:f6:38:6b:49:e5:
         01:b4:d5:39:84:55:ca:0b:17:55:fc:b0:e3:d6:fc:7b:3e:fa:
         a6:73:c8:ea:2c:83:94:02:14:5e:b7:15:0e:13:ac:eb:a2:35:
         06:93:0d:67:d2:52:12:01:5c:15:c4:b1:2c:6c:1e:b0:de:19:
         a2:52:a9:de:c4:34:58:29:32:51:82:3e:e1:d3:a5:ea:7c:c1:
         ee:f9:2d:9c:ad:4e:0d:9f:05:2c:3e:d0:98:43:9b:55:84:3a:
         21:f9:55:9d:58:b6:e9:22:07:f8:98:d7:5a:72:4c:c2:01:83:
         2e:2d:41:5a:8b:2a:8d:08:7a:d2:99:7d:0b:ac:14:2e:e7:7b:
         09:be:dd:8f:65:8b:87:ab:2a:d3:93:63:04:a9:66:0a:94:f6:
         8d:36:6c:8f:be:4b:92:44:58:18:53:44:b7:dc:3e:1a:2f:a6:
         90:02:7e:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdLiVWNFkZNk5fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTdjNWEyODMtZjE1Ny00NGRkLTg3MGEtNDEwYmNmNzE1MTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQryyVaGNG2bZQunWGWQFT6+WmCE8qcJEyNm
ASYtTrJpAyY5PK2ZTYC0o7hm1bOM7SbBaSD78xsuR6t9QLvOM9LZjbLRIiBs8mxt
z8EUWxf4V5e9zKpx5Aq5/m6D03MAgpUeWuhS1vq0S4mJd+1yN1kVv1GuAb6d200k
Iw/K7cjKwttE3avfPu4N8HFN9lHttRyayazU4fKvw0np0GJTm3fPGxF7SOs+fG6B
ydEkf98x2MvZBTBFk9W/koOS+bBiJhRJvOFM2IjCVn6DBHtYC0jq/v7FIfZQQTB6
388J8/sbVr0AwRAH9LmggM/RtMIM6AbCiLO38Drs63lc+BH38wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKmIlIZlaZ9PFFiDGH/7R25HmrY9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDkwMzgzZWMtZTFlYy0z
M2NkLWJkNTUtNjc0NTZjNjkwMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokitMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNeoJMxMjbDMI571ZmaLF88uiw3usfCbP5kkaxl263hgaicUY64cYXU
9GNu8mYAtqeTYgA5jYADQp0c/lkU69wtxKfMkvjp3+SiQgnN7KB3F+wf9tL2OGtJ
5QG01TmEVcoLF1X8sOPW/Hs++qZzyOosg5QCFF63FQ4TrOuiNQaTDWfSUhIBXBXE
sSxsHrDeGaJSqd7ENFgpMlGCPuHTpep8we75LZytTg2fBSw+0JhDm1WEOiH5VZ1Y
tukiB/iY11pyTMIBgy4tQVqLKo0IetKZfQusFC7newm+3Y9li4erKtOTYwSpZgqU
9o02bI++S5JEWBhTRLfcPhovppACfgM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:19 2025 by rpki-client