Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2838071f-be29-3d0f-b3d7-90c6685eb9f2.roa
File:                     2838071f-be29-3d0f-b3d7-90c6685eb9f2.roa (raw, json)
Hash identifier:          zSnIBiEJKP+FSsekSy0iUUdMsr9L5cQGLaDksw33ad8=
Subject key identifier:   CD:85:D3:3D:FD:3F:42:E1:99:FF:E1:9E:CC:C6:CC:5F:A6:0D:EF:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58144938C6886BCC9E1B000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2838071f-be29-3d0f-b3d7-90c6685eb9f2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:44:93:8c:68:86:bc:c9:e1:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6072326d-05e9-4500-a7a8-1e28396b90a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:51:65:a0:86:5e:70:1e:11:72:0c:a0:c6:
                    be:5a:29:22:e3:75:a8:4d:d1:07:0d:60:e3:c0:72:
                    c4:30:37:14:ca:5e:23:ed:3e:7e:5f:0a:c0:11:7c:
                    92:0b:0c:e8:68:25:e0:be:d6:b5:6a:fc:84:51:9c:
                    3a:e7:32:ff:86:e2:9e:03:8c:ba:56:d0:9c:73:54:
                    a2:9e:42:a1:77:05:c6:83:84:1e:9f:7e:93:f5:67:
                    02:24:40:ad:c8:4a:5b:ac:c0:7a:76:17:27:8e:df:
                    da:85:cd:7e:07:8c:70:de:5d:5b:d2:56:08:3f:a6:
                    5b:3f:ad:30:d4:c3:6c:7f:03:5d:d1:06:ed:04:de:
                    64:20:5f:39:00:bc:b6:27:04:09:2b:a8:3c:79:bb:
                    0c:62:c2:b8:c9:b5:9a:b9:be:02:32:c8:35:a8:dc:
                    53:aa:92:22:1b:11:bb:87:88:d3:19:e8:27:51:0b:
                    dd:18:3b:e0:6d:5c:a7:4d:54:cc:56:cc:bd:53:57:
                    38:4f:85:37:63:73:37:e3:8b:1f:62:66:c2:41:69:
                    02:c7:f3:b1:18:c9:9b:9c:dd:21:00:24:7d:71:69:
                    d9:43:1d:85:34:16:2a:9b:b1:ee:0d:36:db:ca:d8:
                    01:d1:e7:a6:47:7b:ae:4d:50:26:43:57:cc:aa:e4:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:D3:3D:FD:3F:42:E1:99:FF:E1:9E:CC:C6:CC:5F:A6:0D:EF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2838071f-be29-3d0f-b3d7-90c6685eb9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:07:9f:c6:bd:e8:43:c9:75:a9:96:79:d9:ab:a3:ac:78:c0:
         9a:25:26:14:63:17:af:84:ef:c1:ca:2e:a8:c3:b9:5e:ef:56:
         ee:26:68:08:81:95:28:a7:a1:f8:0f:8e:52:80:92:7a:89:ff:
         ae:74:4f:17:a0:92:d5:ed:6b:8f:4e:16:c6:29:e8:ea:3f:33:
         bb:00:9c:d3:32:0b:48:c9:02:d7:a5:28:3c:14:d6:0a:1f:65:
         56:a4:dd:ac:49:67:f0:eb:30:6e:90:a8:2c:c6:86:82:d9:7f:
         59:c9:a4:31:b8:4e:76:34:05:59:55:ce:ae:7a:d4:9e:a6:1b:
         d2:8b:e7:07:8d:79:32:3e:9f:cf:9d:b3:03:54:d5:3b:d1:fe:
         9f:dd:32:86:31:28:41:49:01:f9:09:ca:12:f1:37:bd:f5:7c:
         c8:64:e5:bb:0c:23:f6:ed:55:8e:61:21:5f:f9:b9:68:e0:5a:
         62:14:64:66:a0:95:6f:23:16:dd:f2:68:01:ba:f7:d4:ef:a1:
         3c:17:c7:87:20:e6:b3:99:4e:a1:31:23:85:ac:a4:d6:25:b7:
         61:74:59:36:ef:84:de:43:59:4e:20:c2:9d:19:f7:90:bc:50:
         df:5c:cb:4d:22:3c:b8:76:13:e5:4c:0d:c3:66:fd:b7:a9:ff:
         8c:d8:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:04 2025 by rpki-client