Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bffaa385-1026-3309-80ac-2d81b4dd1615.roa
File:                     bffaa385-1026-3309-80ac-2d81b4dd1615.roa (raw, json)
Hash identifier:          ijWoW61FvAlcbEIxbzbK8RBVQEafY2W7gw69EaVGuPU=
Subject key identifier:   14:6B:15:4F:5F:CA:9E:BF:38:6C:D6:44:24:D3:0E:C0:BA:C1:DC:45
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE7988F17A3FAA69BBC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bffaa385-1026-3309-80ac-2d81b4dd1615.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e7:98:8f:17:a3:fa:a6:9b:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5e12f1a5-618f-41f0-9392-391642b425f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:9c:23:30:37:57:29:c2:9c:da:29:5d:c2:
                    73:57:97:13:65:ab:96:57:07:13:5b:1e:f6:11:a4:
                    36:63:33:fb:8f:e5:23:5b:14:fc:84:33:b9:61:79:
                    2a:cc:4d:38:37:07:93:1e:25:31:ae:7d:b1:81:0c:
                    91:f3:b0:35:a4:27:f1:5a:a7:61:df:39:6a:12:86:
                    b8:0d:41:58:b1:9a:03:86:0d:4f:03:1c:17:34:0f:
                    30:8d:83:ee:bc:19:a3:99:46:3d:f0:ef:e1:39:e4:
                    dd:87:3a:81:56:63:7f:21:97:17:cb:df:5b:22:96:
                    88:df:35:a6:bd:22:04:f0:97:92:f6:2b:af:a7:95:
                    49:00:61:ac:5e:0b:fb:09:97:2c:fe:fe:f9:cb:46:
                    f9:bd:5c:38:11:de:0d:f1:88:8d:dd:44:ed:72:1f:
                    40:45:b0:24:e1:60:6b:c5:1e:35:f3:37:44:ea:80:
                    5c:51:42:f0:d6:14:9c:2d:e7:d8:77:88:06:bf:48:
                    ad:57:d2:9d:f0:93:f0:c1:b0:6b:89:e3:a8:16:f9:
                    fb:84:34:3c:12:ba:e1:9a:0d:cc:aa:64:17:a2:5f:
                    97:f6:17:69:11:de:35:8e:0d:d0:c4:2c:31:66:56:
                    77:03:bc:ca:eb:ab:94:94:b2:b1:ec:dd:ce:33:4e:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6B:15:4F:5F:CA:9E:BF:38:6C:D6:44:24:D3:0E:C0:BA:C1:DC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bffaa385-1026-3309-80ac-2d81b4dd1615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:cc:50:6d:24:f6:f6:d9:62:c9:8d:89:c9:a6:48:0d:df:62:
         62:07:a9:45:48:18:22:60:31:3b:6d:3e:f4:d2:61:b1:28:c7:
         84:09:26:21:75:3f:54:a5:ff:ad:97:7f:48:16:f1:84:58:2e:
         a9:e1:48:a3:a5:9f:e3:5a:6e:7b:4c:bc:62:25:f1:cd:aa:75:
         b7:c1:03:09:29:c5:ca:cf:7a:fc:07:25:2b:19:61:ff:47:e1:
         73:3d:56:42:ea:cf:40:fb:31:cd:4a:d4:55:b4:20:3f:26:fe:
         ff:0a:7a:9d:b1:ea:73:6d:7f:b0:79:7c:12:3c:e5:a3:bb:c4:
         e0:5a:49:32:ad:ce:19:53:73:d4:7a:aa:da:56:df:72:36:db:
         7d:c0:c3:23:e9:7f:9e:af:78:94:6d:5b:a6:db:44:29:5f:a6:
         8e:78:ab:57:10:d8:d7:b5:68:b3:31:8f:d7:ab:b5:b7:d8:f5:
         e2:46:27:c2:ed:db:89:e3:43:79:47:13:a7:b0:61:a4:92:ad:
         cf:d6:a3:ea:62:81:fe:ac:0b:66:ed:c2:9c:3b:b3:26:74:bc:
         1d:83:84:4a:13:44:10:56:d3:18:6c:d2:53:0e:c9:86:a0:cf:
         d6:1b:06:ef:b5:b0:b4:bb:57:93:7a:56:70:01:53:f0:53:ce:
         ff:16:27:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuueYjxej+qabvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NWUxMmYxYTUtNjE4Zi00MWYwLTkzOTItMzkxNjQyYjQyNWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqecIzA3VynCnNopXcJzV5cTZauWVwcTWx72
EaQ2YzP7j+UjWxT8hDO5YXkqzE04NweTHiUxrn2xgQyR87A1pCfxWqdh3zlqEoa4
DUFYsZoDhg1PAxwXNA8wjYPuvBmjmUY98O/hOeTdhzqBVmN/IZcXy99bIpaI3zWm
vSIE8JeS9iuvp5VJAGGsXgv7CZcs/v75y0b5vVw4Ed4N8YiN3UTtch9ARbAk4WBr
xR418zdE6oBcUULw1hScLefYd4gGv0itV9Kd8JPwwbBrieOoFvn7hDQ8Errhmg3M
qmQXol+X9hdpEd41jg3QxCwxZlZ3A7zK66uUlLKx7N3OM04GgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRrFU9fyp6/OGzWRCTTDsC6wdxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZmYWEzODUtMTAyNi0z
MzA5LTgwYWMtMmQ4MWI0ZGQxNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK03MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMrMUG0k9vbZYsmNicmmSA3fYmIHqUVIGCJgMTttPvTSYbEox4QJJiF1
P1Sl/62Xf0gW8YRYLqnhSKOln+NabntMvGIl8c2qdbfBAwkpxcrPevwHJSsZYf9H
4XM9VkLqz0D7Mc1K1FW0ID8m/v8Kep2x6nNtf7B5fBI85aO7xOBaSTKtzhlTc9R6
qtpW33I2233AwyPpf56veJRtW6bbRClfpo54q1cQ2Ne1aLMxj9ertbfY9eJGJ8Lt
24njQ3lHE6ewYaSSrc/Wo+pigf6sC2btwpw7syZ0vB2DhEoTRBBW0xhs0lMOyYag
z9YbBu+1sLS7V5N6VnABU/BTzv8WJ5w=
-----END CERTIFICATE-----
Generated at Sun May 11 14:53:30 2025 by rpki-client