Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa
File:                     a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa (raw, json)
Hash identifier:          90mGHb7PKIBgyThzOyi2IrjLyDDWF1dglSMPK8KmDmM=
Subject key identifier:   85:5F:C8:70:BB:7F:04:8D:2C:D9:1F:67:25:95:22:31:B8:66:BE:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB39FF5717AC79D74CED00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.243.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:39:ff:57:17:ac:79:d7:4c:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a3b888b5-597b-478f-be00-62016ee68e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:29:57:e2:66:14:da:da:ba:07:56:6b:97:
                    50:01:52:df:8b:8a:ac:27:3a:a5:15:e4:40:62:20:
                    c2:a6:b4:8e:57:0b:43:3e:2d:b3:45:97:43:ec:6a:
                    77:ff:d1:64:a6:36:62:ef:ce:19:b3:28:47:11:b5:
                    82:29:40:ec:17:79:3d:34:56:c6:dd:4e:24:13:64:
                    49:12:4a:8a:ef:44:b8:06:70:58:ec:c6:04:f8:20:
                    69:70:22:1c:5f:8a:c7:3c:53:1a:fa:16:bb:ea:75:
                    d6:dc:ba:6f:8b:fe:83:84:82:93:82:ce:ef:b4:54:
                    3b:18:26:8c:0e:57:1f:71:7d:f9:b3:cc:f4:dd:6f:
                    12:80:48:73:c3:9a:24:56:52:dd:b2:bd:a3:ae:11:
                    33:b9:af:17:74:71:ae:89:9d:98:af:11:ed:d4:5e:
                    92:db:81:b6:68:c0:5e:1e:da:7a:be:d8:6e:76:90:
                    d2:a9:9d:b0:83:42:ee:01:7f:16:f6:3c:dd:15:21:
                    5e:60:34:ae:e7:52:ee:78:6c:41:d0:03:4a:72:b8:
                    11:77:60:81:75:cf:9c:7d:c1:07:de:aa:42:06:d2:
                    be:50:0b:aa:11:28:5f:f1:3a:54:8c:26:1b:4f:4d:
                    44:5f:96:74:ee:75:58:a6:a9:7a:09:1e:dd:f2:b8:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5F:C8:70:BB:7F:04:8D:2C:D9:1F:67:25:95:22:31:B8:66:BE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:50:d4:6d:99:85:af:d5:10:8b:50:ac:f6:6a:c1:55:80:
         c7:4c:22:e4:8f:d8:f1:a2:78:2f:a3:78:e1:89:f0:35:f4:cb:
         b8:32:2f:2e:b9:bb:cf:74:1f:9f:ea:9a:7c:89:e6:03:ed:2f:
         7c:77:31:be:22:e6:5e:ab:f2:1f:00:0d:e6:a3:d5:6d:c0:74:
         57:09:18:80:78:28:64:cf:bf:10:a4:d6:c3:1f:99:7c:4f:dd:
         8a:b7:30:66:ab:1a:c1:5c:31:40:12:83:5c:2c:20:57:76:71:
         b1:68:cf:2b:55:58:57:5a:91:5c:5b:f5:1f:ff:0b:ee:a6:23:
         b0:f4:42:e6:21:f7:41:2d:72:97:3f:27:66:9e:11:a5:23:bf:
         87:8b:8b:39:66:28:51:da:8c:8c:e6:d3:c2:6a:2f:81:ff:b4:
         b2:02:54:ae:e7:0b:d5:fa:12:36:af:e6:fd:cd:c7:b9:6b:d1:
         32:6c:df:78:89:50:41:e9:06:34:27:5a:c3:42:a4:11:8c:ef:
         c8:33:ac:7e:a5:2f:a4:73:d6:ed:68:71:2e:70:da:ca:2d:47:
         9b:c9:71:93:18:b7:6d:83:c1:8d:91:6f:39:7c:f6:80:3c:b6:
         59:05:eb:cc:03:b5:fe:de:d9:bc:e4:80:a8:2e:b8:e8:05:b4:
         39:d4:95:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzn/VxeseddM7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YTNiODg4YjUtNTk3Yi00NzhmLWJlMDAtNjIwMTZlZTY4ZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL0pV+JmFNraugdWa5dQAVLfi4qsJzqlFeRA
YiDCprSOVwtDPi2zRZdD7Gp3/9FkpjZi784ZsyhHEbWCKUDsF3k9NFbG3U4kE2RJ
EkqK70S4BnBY7MYE+CBpcCIcX4rHPFMa+ha76nXW3Lpvi/6DhIKTgs7vtFQ7GCaM
DlcfcX35s8z03W8SgEhzw5okVlLdsr2jrhEzua8XdHGuiZ2YrxHt1F6S24G2aMBe
Htp6vthudpDSqZ2wg0LuAX8W9jzdFSFeYDSu51LueGxB0ANKcrgRd2CBdc+cfcEH
3qpCBtK+UAuqEShf8TpUjCYbT01EX5Z07nVYpql6CR7d8rgBEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVfyHC7fwSNLNkfZyWVIjG4Zr6EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTYxMzdhYzUtYmEwYS0z
YWU3LTliNGQtMWMxZWMzZWYzMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIu2UNRtmYWv1RCLUKz2asFVgMdMIuSP2PGieC+jeOGJ8DX0y7gyLy65
u890H5/qmnyJ5gPtL3x3Mb4i5l6r8h8ADeaj1W3AdFcJGIB4KGTPvxCk1sMfmXxP
3Yq3MGarGsFcMUASg1wsIFd2cbFozytVWFdakVxb9R//C+6mI7D0QuYh90Etcpc/
J2aeEaUjv4eLizlmKFHajIzm08JqL4H/tLICVK7nC9X6Ejav5v3Nx7lr0TJs33iJ
UEHpBjQnWsNCpBGM78gzrH6lL6Rz1u1ocS5w2sotR5vJcZMYt22DwY2Rbzl89oA8
tlkF68wDtf7e2bzkgKguuOgFtDnUlZ4=
-----END CERTIFICATE-----
Generated at Sat May 10 16:18:18 2025 by rpki-client