Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afb302ad-952c-3848-bc57-c3d8561ecb8c.roa
File:                     afb302ad-952c-3848-bc57-c3d8561ecb8c.roa (raw, json)
Hash identifier:          TsQokaB8j0j1FZXwvFKiHyJxbbGsiP+GjX4drqaNo3k=
Subject key identifier:   88:A6:B0:01:2F:C9:34:EF:78:C1:B8:F7:B8:CB:6E:60:09:F8:50:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581CE862F4192CE58100580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afb302ad-952c-3848-bc57-c3d8561ecb8c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        162.72.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ce:86:2f:41:92:ce:58:10:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d148bd44-0b59-45dd-963f-54abc5765f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:a9:d2:83:92:28:fd:79:17:a0:14:5d:1a:
                    6d:0d:17:84:a3:62:68:da:fb:e9:87:13:63:f3:bf:
                    be:d8:ef:6c:f4:bf:a5:97:cf:f6:12:ca:42:82:e4:
                    5f:82:0b:3d:6b:e6:65:93:16:26:b7:65:a1:21:a7:
                    91:56:c9:a1:fc:6f:66:a0:55:ec:18:21:d0:c4:a1:
                    cd:46:6d:aa:84:75:9d:d9:13:f5:47:d1:e0:ed:cc:
                    e6:b9:ae:02:8c:01:4c:e3:e2:99:8a:cc:1a:fe:3f:
                    44:bf:13:f9:da:c4:be:29:cc:ad:c1:99:46:40:d2:
                    44:d4:69:c2:66:8f:80:07:f9:92:2b:be:ed:b5:bd:
                    09:84:8c:04:a0:4f:32:d7:95:f0:0c:ae:16:a4:97:
                    81:5c:88:27:1d:ec:ae:23:fc:d3:a2:3d:24:f3:82:
                    0b:29:ce:14:5a:cf:95:3c:c0:2e:7e:98:91:d3:75:
                    32:1d:89:29:8f:6a:82:a2:cd:ee:c8:79:1b:4d:01:
                    e2:41:9b:63:0b:c5:df:1a:b7:69:3f:b0:46:96:91:
                    71:70:5f:a7:d4:9b:e3:aa:7c:76:4c:34:de:3d:4e:
                    47:f2:e2:5a:a1:56:fd:0d:03:54:4c:65:98:ef:7c:
                    9a:ab:2e:b7:57:c8:24:f0:64:ec:a9:d2:05:05:57:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:B0:01:2F:C9:34:EF:78:C1:B8:F7:B8:CB:6E:60:09:F8:50:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afb302ad-952c-3848-bc57-c3d8561ecb8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:d6:24:3b:56:68:34:93:b7:bd:e0:ec:34:c4:b1:8c:fd:
         00:f9:60:56:85:84:77:1a:fc:8d:1a:66:7c:42:e2:c9:a2:a3:
         7d:bc:49:f2:87:72:3a:47:05:9c:dc:e0:7a:5c:e4:af:11:23:
         56:f7:fe:a2:77:37:2b:1a:fd:84:06:ad:0d:4f:db:56:1e:c1:
         5c:45:cb:01:44:ba:b8:4e:9c:09:32:a2:19:21:69:bf:7e:f4:
         0a:2f:0b:17:b1:90:92:e3:5e:e7:d2:21:96:3b:07:be:62:7f:
         b8:f8:96:94:09:6a:19:17:de:4e:2e:7f:51:59:6b:ea:bb:4a:
         39:27:b9:47:00:11:67:76:b6:b3:c3:06:19:84:69:d9:25:b1:
         4b:51:5b:86:ed:ae:c8:e2:25:5e:4f:60:ee:d8:6a:e8:2c:01:
         8c:b2:36:01:5c:53:1f:72:f3:f0:d5:39:9f:0a:b0:34:1e:73:
         6d:a1:0e:f0:28:7c:a2:23:0d:04:cc:81:45:8c:84:a3:79:d5:
         2f:63:45:97:6d:8e:28:0c:94:6d:b3:ee:2a:13:5d:ff:f3:41:
         51:2c:97:97:49:45:72:a3:97:cc:d7:7b:8b:06:b7:cb:9c:31:
         c3:88:f5:ce:f3:6b:87:a2:4e:69:d5:c0:b3:0d:4f:fe:13:1f:
         2c:71:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:06:49 2025 by rpki-client