Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc79c3c0-12c2-3f17-a5ab-f7a17d2c1f38.roa
File:                     dc79c3c0-12c2-3f17-a5ab-f7a17d2c1f38.roa (raw, json)
Hash identifier:          mox/t5pR4rCmVHF366IQAeahfy+64eU9y9PsPxDIcS0=
Subject key identifier:   CC:F8:2F:22:24:4B:E2:BD:94:AB:82:3B:E5:6E:03:18:8C:2C:6E:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB2D2F0D57A13BA29A5440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc79c3c0-12c2-3f17-a5ab-f7a17d2c1f38.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        162.72.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:2d:2f:0d:57:a1:3b:a2:9a:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=dc3bf73e-89b3-42a8-b1a5-d276fbc47894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6f:a2:10:53:ed:6d:61:59:b5:f3:08:d7:8c:
                    cc:66:bd:41:ed:6d:dc:0a:e8:31:3b:89:e0:0a:3d:
                    0d:d8:88:0b:a3:bc:93:ce:8c:5d:5f:f1:16:2f:0b:
                    dd:42:8b:55:d1:6c:47:f0:fa:f4:e1:72:b3:a6:a6:
                    26:cb:6a:0c:02:f4:5f:39:db:59:2a:fc:27:f6:03:
                    4b:3d:00:b9:27:c4:44:10:50:54:9d:59:00:cf:d5:
                    b4:9d:cb:83:1e:f8:ae:43:e1:22:bf:ca:d1:cc:f4:
                    a5:97:62:97:a5:6c:12:ab:76:ab:73:15:a9:1a:62:
                    09:af:3d:a1:cf:c6:f4:e7:54:80:14:53:8a:c8:fd:
                    73:97:d1:5d:56:da:a3:17:1d:3a:48:9d:e1:d7:17:
                    ea:0d:c6:02:12:ba:e7:97:3c:dd:37:2c:c7:bf:f8:
                    a3:c1:1b:92:06:17:5c:1b:4a:09:39:3c:9b:09:93:
                    4c:23:21:33:5f:92:f3:1b:32:7a:ed:2e:8f:c2:a2:
                    9d:13:09:99:bd:be:ed:5a:7a:1d:79:c8:31:d4:27:
                    a0:12:6c:94:3f:2b:f3:31:ba:18:37:ee:88:6d:48:
                    ea:12:3b:72:99:25:69:23:13:27:57:fc:19:c3:99:
                    b3:dd:6c:a8:7c:a9:eb:3b:ab:87:a7:d8:f6:7c:26:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:2F:22:24:4B:E2:BD:94:AB:82:3B:E5:6E:03:18:8C:2C:6E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc79c3c0-12c2-3f17-a5ab-f7a17d2c1f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:99:14:ba:0b:26:d7:7b:dc:89:fc:f6:6a:74:d3:9f:99:
         05:6d:db:78:3b:fe:6e:37:92:10:ed:c2:67:07:8f:d6:e1:6a:
         a8:6a:dd:98:e0:a2:37:51:ad:cf:5f:81:0f:63:2b:47:34:6b:
         f0:91:28:41:e3:fe:b3:47:e6:8a:e1:3d:4e:cc:b4:76:3b:6f:
         e8:a6:8f:79:5d:b2:87:76:a1:53:d7:f0:00:1a:9a:bb:4d:44:
         4b:86:39:eb:32:a0:1e:e9:44:ee:ef:25:9a:91:09:30:7c:37:
         ed:ab:5e:27:ae:20:64:04:37:18:4d:e3:18:7a:1e:13:ff:e2:
         3f:1c:24:79:fa:bf:95:e2:fc:66:a7:64:88:47:99:39:0a:71:
         6d:46:93:24:17:ab:be:03:0f:a2:5b:03:4a:b0:4e:89:5e:4d:
         16:91:f6:e3:9a:de:a2:7d:46:44:b6:f7:27:5c:cb:57:31:14:
         ed:8e:2b:9a:67:16:05:e8:2c:2d:49:e3:71:92:ed:8c:42:33:
         08:0a:90:cd:a3:15:b1:31:84:b0:2f:42:ea:7f:8a:5c:d8:08:
         2b:a9:6b:d0:a6:d2:51:56:21:40:01:dd:0f:45:08:84:92:16:
         f2:68:55:e2:06:52:47:b1:44:ce:ff:eb:14:f8:a1:d9:16:b2:
         a3:a0:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:27:14 2025 by rpki-client