Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d87720c2-02fc-3d01-a438-e321adbb9481.roa
File:                     d87720c2-02fc-3d01-a438-e321adbb9481.roa (raw, json)
Hash identifier:          sx23B0AmWEivSUjMiuDDE2Yb3sfg9IT27De6VTExa58=
Subject key identifier:   DB:12:EA:1F:C3:1F:36:A6:6A:3F:7A:D9:8C:6F:BD:E1:4F:A1:12:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58141C28776E3489E679460
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d87720c2-02fc-3d01-a438-e321adbb9481.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        162.72.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:41:c2:87:76:e3:48:9e:67:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f5dfbe63-778f-432e-aaf2-b608ae419460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:41:aa:7d:7f:bb:1a:c1:84:ce:c7:ab:36:
                    ea:77:63:36:b4:d2:8c:3a:ac:26:17:74:08:05:5b:
                    3f:06:2c:f7:2e:d2:e2:29:59:bf:9e:12:d5:60:22:
                    af:c8:b0:73:a7:ae:9b:96:41:a2:37:fd:ce:7d:85:
                    ff:6d:2b:32:da:88:bf:4d:1c:de:d6:66:0c:41:e6:
                    da:da:87:f6:9e:2b:b7:73:0d:a0:9f:f1:54:6d:da:
                    26:ca:d2:98:bb:eb:51:74:47:b3:44:74:3a:fb:40:
                    59:a9:dd:4c:bd:5c:56:7a:05:a3:fd:de:a3:a0:2a:
                    c1:1c:05:54:7c:8f:01:3d:74:6d:ef:e8:38:ea:d1:
                    31:4b:71:81:09:fe:a8:8c:5b:a4:2b:1b:47:3a:90:
                    f6:f0:f1:44:a5:b2:99:a4:b8:3a:bf:06:4f:71:10:
                    fc:af:fe:ee:fd:31:f3:d4:a4:a6:62:c1:e9:a9:de:
                    af:48:4e:2d:76:87:84:ba:33:1c:48:e4:19:34:5f:
                    4e:f3:fb:47:30:ed:4c:2c:e6:d8:c8:cb:ab:a2:80:
                    72:1d:fd:73:fa:b4:de:3d:0b:ab:09:46:35:84:88:
                    90:6a:ed:2e:1b:b3:46:d1:33:6f:75:ca:53:80:c9:
                    3c:79:1c:b7:58:b7:f5:ae:c3:61:8b:52:3c:7d:a1:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:12:EA:1F:C3:1F:36:A6:6A:3F:7A:D9:8C:6F:BD:E1:4F:A1:12:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d87720c2-02fc-3d01-a438-e321adbb9481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:0b:39:87:96:8f:dd:8a:59:69:29:38:92:da:22:0c:bb:
         7e:d1:d3:7f:4d:cd:1b:3f:9a:6d:d1:da:d8:ad:76:79:8a:1c:
         a5:07:22:12:ab:5e:d2:59:12:e1:26:79:ee:49:66:e5:ad:01:
         a4:26:89:54:37:77:8d:f8:ea:60:f6:35:4e:9d:c3:52:c6:dd:
         91:76:f2:bc:de:93:54:87:9b:ca:68:86:ad:41:9c:f9:0c:76:
         37:90:5b:e1:13:b7:2a:0e:d1:18:f4:cc:7e:3e:fc:52:3c:cf:
         a8:84:77:21:9f:4d:b8:b3:69:c1:9a:75:15:f2:30:e9:7f:24:
         cf:62:5b:16:0f:8b:35:4e:ee:72:9f:fd:ff:0e:1c:04:f3:c5:
         cd:35:78:19:3e:d6:8c:b5:1e:66:bc:b7:f0:6b:73:f7:10:59:
         4c:fd:85:ff:33:5b:2c:6d:bd:8c:17:0a:b9:ac:1e:a9:dc:bc:
         14:ed:c4:ae:b6:31:e4:c0:d6:5c:c2:ef:ff:20:ea:91:1b:0a:
         18:9e:44:0d:0a:ef:b6:1b:80:d8:7b:91:3b:8e:09:e0:78:b9:
         e0:8c:80:08:95:f2:87:3d:20:32:02:c2:57:df:14:65:11:f1:
         02:ca:df:0f:be:22:cb:81:f3:05:ef:74:c4:f1:8d:ca:5e:f7:
         ef:6a:4b:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUHCh3bjSJ5nlGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjVkZmJlNjMtNzc4Zi00MzJlLWFhZjItYjYwOGFlNDE5NDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHlBqn1/uxrBhM7Hqzbqd2M2tNKMOqwmF3QI
BVs/Biz3LtLiKVm/nhLVYCKvyLBzp66blkGiN/3OfYX/bSsy2oi/TRze1mYMQeba
2of2niu3cw2gn/FUbdomytKYu+tRdEezRHQ6+0BZqd1MvVxWegWj/d6joCrBHAVU
fI8BPXRt7+g46tExS3GBCf6ojFukKxtHOpD28PFEpbKZpLg6vwZPcRD8r/7u/THz
1KSmYsHpqd6vSE4tdoeEujMcSOQZNF9O8/tHMO1MLObYyMurooByHf1z+rTePQur
CUY1hIiQau0uG7NG0TNvdcpTgMk8eRy3WLf1rsNhi1I8faGAtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsS6h/DHzamaj962YxvveFPoRLcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDg3NzIwYzItMDJmYy0z
ZDAxLWE0MzgtZTMyMWFkYmI5NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfRCzmHlo/dillpKTiS2iIMu37R039NzRs/mm3R2titdnmKHKUHIhKr
XtJZEuEmee5JZuWtAaQmiVQ3d4346mD2NU6dw1LG3ZF28rzek1SHm8pohq1BnPkM
djeQW+ETtyoO0Rj0zH4+/FI8z6iEdyGfTbizacGadRXyMOl/JM9iWxYPizVO7nKf
/f8OHATzxc01eBk+1oy1Hma8t/Brc/cQWUz9hf8zWyxtvYwXCrmsHqncvBTtxK62
MeTA1lzC7/8g6pEbChieRA0K77YbgNh7kTuOCeB4ueCMgAiV8oc9IDICwlffFGUR
8QLK3w++IsuB8wXvdMTxjcpe9+9qSz0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:15 2025 by rpki-client