Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b645f12-4298-3607-9fae-f5488ad421ce.roa
File:                     9b645f12-4298-3607-9fae-f5488ad421ce.roa (raw, json)
Hash identifier:          6nEs72INpA9tFV0pCjxF+3fyEsHSfa184wBK+mne35w=
Subject key identifier:   EB:13:B7:03:E7:A7:1C:CF:3D:EA:01:9F:58:85:00:E7:26:09:94:78
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5813F83E9547FEB7908F700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b645f12-4298-3607-9fae-f5488ad421ce.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        162.72.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:3f:83:e9:54:7f:eb:79:08:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c2fd5f82-b6db-44db-bcd1-1c6ab7af8b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:54:b9:2e:a0:90:37:b3:cb:4c:38:82:ed:
                    4e:78:7e:29:93:8c:95:43:56:52:66:4f:29:de:ec:
                    27:e4:c3:d8:b2:fc:34:12:f4:39:66:a7:53:a4:a1:
                    fc:13:1e:cd:6d:46:d6:fc:2c:b2:5a:4e:7a:e9:b0:
                    e3:b4:fd:6f:06:d9:ef:bf:91:5f:4f:09:46:76:2d:
                    1f:4d:f2:a6:e4:86:37:00:ad:ab:72:d3:d6:bc:31:
                    3e:17:3b:ef:03:d6:1d:fb:fd:58:d8:ef:00:e9:fa:
                    98:7a:ad:5e:ab:ce:a0:ef:2d:04:f0:67:9d:b7:45:
                    6f:5a:77:d8:a3:66:aa:b3:b7:a5:bc:de:bf:9e:a7:
                    a1:9a:19:0a:1e:30:b9:80:6d:e6:04:51:8b:96:77:
                    35:f9:67:fc:a5:bc:2b:54:e1:d6:27:a6:ce:b7:2f:
                    f7:6f:31:b2:3b:e7:76:f8:51:2b:5f:f9:92:08:dc:
                    f7:98:21:23:ed:ed:52:a5:8b:3a:98:d9:cf:89:f0:
                    36:9d:6f:c0:89:b5:be:e7:2a:15:9d:46:f9:3d:12:
                    54:0c:a5:e6:cf:ba:b8:1f:e9:94:b1:57:50:62:c9:
                    27:4f:47:19:00:1e:3c:f2:2a:d9:5a:72:c7:2e:94:
                    a0:7b:7e:a2:a5:da:bb:a9:7e:53:46:4c:98:1f:cd:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:B7:03:E7:A7:1C:CF:3D:EA:01:9F:58:85:00:E7:26:09:94:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b645f12-4298-3607-9fae-f5488ad421ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:28:2b:85:d7:fe:fb:45:57:c0:a4:44:26:e8:f7:72:de:
         85:a2:79:f3:56:10:fa:97:02:c8:4c:69:57:8c:15:04:ef:31:
         d1:f3:3f:39:b8:2d:24:b7:77:c6:3d:39:f8:bf:8e:83:e6:ce:
         b3:a1:85:49:fc:fd:e0:94:6e:d8:3a:bd:dc:0f:f6:5a:01:cf:
         7a:dd:e2:ac:59:f6:0f:a7:e5:90:41:11:58:5d:02:78:e7:3a:
         d9:10:8c:ae:45:e7:06:a5:d9:6d:bc:9d:41:ee:6c:3c:a1:d6:
         38:a4:93:00:fe:95:f8:b0:69:ee:a9:54:34:96:32:f1:80:b4:
         20:7b:30:22:71:b9:bf:6b:24:3f:e8:c6:ab:92:dd:16:e0:6c:
         81:c6:60:79:19:70:16:72:93:96:2c:78:18:32:94:c9:9f:7e:
         d1:10:0c:97:1f:a2:1d:da:3b:9d:d6:48:32:55:7d:d1:3c:45:
         af:e0:1a:63:85:a8:e9:a3:92:f2:fe:48:0c:a1:e8:64:fd:d7:
         29:cd:51:23:ec:5d:ee:7c:b4:c8:a0:dc:38:7a:f9:af:14:65:
         0e:13:13:d0:00:39:54:80:f9:fb:fd:e4:d5:de:82:d5:ca:d4:
         14:7f:19:04:99:d9:4e:88:87:a9:27:f3:24:3d:af:d0:5d:16:
         90:88:93:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgT+D6VR/63kI9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzJmZDVmODItYjZkYi00NGRiLWJjZDEtMWM2YWI3YWY4YjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha5UuS6gkDezy0w4gu1OeH4pk4yVQ1ZSZk8p
3uwn5MPYsvw0EvQ5ZqdTpKH8Ex7NbUbW/CyyWk566bDjtP1vBtnvv5FfTwlGdi0f
TfKm5IY3AK2rctPWvDE+FzvvA9Yd+/1Y2O8A6fqYeq1eq86g7y0E8Gedt0VvWnfY
o2aqs7elvN6/nqehmhkKHjC5gG3mBFGLlnc1+Wf8pbwrVOHWJ6bOty/3bzGyO+d2
+FErX/mSCNz3mCEj7e1SpYs6mNnPifA2nW/AibW+5yoVnUb5PRJUDKXmz7q4H+mU
sVdQYsknT0cZAB488irZWnLHLpSge36ipdq7qX5TRkyYH82U3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsTtwPnpxzPPeoBn1iFAOcmCZR4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWI2NDVmMTItNDI5OC0z
NjA3LTlmYWUtZjU0ODhhZDQyMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBkKCuF1/77RVfApEQm6Pdy3oWiefNWEPqXAshMaVeMFQTvMdHzPzm4
LSS3d8Y9Ofi/joPmzrOhhUn8/eCUbtg6vdwP9loBz3rd4qxZ9g+n5ZBBEVhdAnjn
OtkQjK5F5wal2W28nUHubDyh1jikkwD+lfiwae6pVDSWMvGAtCB7MCJxub9rJD/o
xquS3RbgbIHGYHkZcBZyk5YseBgylMmfftEQDJcfoh3aO53WSDJVfdE8Ra/gGmOF
qOmjkvL+SAyh6GT91ynNUSPsXe58tMig3Dh6+a8UZQ4TE9AAOVSA+fv95NXegtXK
1BR/GQSZ2U6Ih6kn8yQ9r9BdFpCIkww=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:37 2025 by rpki-client