Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03191581-3b7c-3ece-bd73-f005fdae36a5.roa
File:                     03191581-3b7c-3ece-bd73-f005fdae36a5.roa (raw, json)
Hash identifier:          X7AAHkGfsGE5eCY98uhy3RGjlNn/UDQnu/ym6lIIp8o=
Subject key identifier:   2E:7D:BB:E4:B3:97:80:47:9C:9F:F7:62:06:BC:11:EB:13:61:66:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58110F0EFFA45C002C59FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03191581-3b7c-3ece-bd73-f005fdae36a5.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:10:f0:ef:fa:45:c0:02:c5:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=446e5f15-c56f-41cb-8aaf-89970f840d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:9b:83:c6:26:6d:75:da:f3:8c:76:4b:7e:
                    88:fa:9c:ca:84:c7:a1:3a:c0:91:34:4a:63:e2:c8:
                    64:f1:0e:a3:7c:c7:f5:cc:22:ce:b0:82:8b:b2:ab:
                    7d:5b:c4:26:a0:18:59:88:02:65:45:ae:d9:d3:97:
                    9a:f5:cd:28:d8:24:25:fb:5e:15:79:7a:02:e4:ca:
                    15:31:f4:ff:07:29:21:4d:77:a8:5c:bb:e6:bf:7d:
                    87:99:03:23:b7:df:34:be:3f:fe:bd:cd:5c:69:70:
                    4b:78:54:90:40:f6:aa:bb:4c:4a:27:bb:4d:c8:b7:
                    43:a3:0a:05:b7:ac:f0:12:35:8e:27:33:b5:69:02:
                    a8:2e:88:50:2f:af:b9:ff:53:fa:3f:0f:93:70:98:
                    dc:40:2f:af:a4:07:9b:92:de:d6:6f:ac:df:88:e2:
                    9d:a8:dd:e8:9d:95:de:86:ff:67:64:e4:10:7d:f7:
                    6a:7a:0d:a7:d5:58:90:57:9e:57:ce:04:3e:89:82:
                    dd:75:ce:95:d1:69:72:80:55:7b:0e:0e:25:2e:d7:
                    65:01:fd:85:ae:3c:5e:f2:24:1e:ba:b0:5d:16:b2:
                    64:2d:87:53:4a:b8:51:ef:6e:43:9f:31:6c:e5:68:
                    71:f8:c5:a9:df:08:78:72:51:4a:62:bc:0c:35:ad:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7D:BB:E4:B3:97:80:47:9C:9F:F7:62:06:BC:11:EB:13:61:66:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03191581-3b7c-3ece-bd73-f005fdae36a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:88:41:bd:81:2c:aa:2c:2a:35:5f:62:0f:17:50:95:ad:aa:
         95:96:2e:15:a7:78:67:37:c4:9f:4e:3a:65:16:3b:89:02:09:
         09:46:04:35:58:d0:fa:1b:38:f3:cc:be:4c:54:c7:ff:62:33:
         aa:63:76:19:c0:87:32:c9:5b:fd:fc:7d:08:63:64:f9:be:4e:
         e5:a7:9a:8e:d8:f2:c5:49:a6:2f:c4:55:9c:66:24:80:aa:6a:
         f1:3f:7b:98:16:d1:76:c7:16:f3:f9:9a:39:d2:6d:4b:a9:eb:
         ea:38:b1:c6:53:97:08:12:fe:b9:2c:5c:02:d9:f3:fb:33:dd:
         5b:eb:ef:17:20:47:fb:cb:f7:a2:4e:32:42:8c:7b:b4:86:b1:
         8d:80:7c:75:9a:96:58:3f:43:01:56:f3:c6:14:d8:f7:13:3c:
         dd:73:ec:62:0e:38:17:cc:3d:5d:30:0b:70:41:c7:6b:6f:90:
         cf:36:17:4c:1c:57:33:10:ee:f0:7b:f3:40:09:9a:22:d0:04:
         c0:77:c7:ca:ac:54:51:39:14:b1:b6:96:3e:bd:7a:4c:25:28:
         85:0a:ac:9d:8a:72:f3:1d:1f:9a:a0:12:9d:97:26:32:85:8b:
         26:f9:86:f9:de:40:ee:8d:79:d4:95:aa:ce:04:d4:d0:52:b9:
         ed:a9:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:13:21 2025 by rpki-client