Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72af559c-7d02-3bde-bb6c-9036943b598b.roa
File:                     72af559c-7d02-3bde-bb6c-9036943b598b.roa (raw, json)
Hash identifier:          mnwy4+HAzZWXuBTQWxejC5WPnFAvQCERXur7c0zMw3o=
Subject key identifier:   2D:52:97:35:93:2C:58:32:DA:CE:FC:CD:BC:8F:CC:14:FB:A6:92:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819C61C3657710C0C941C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72af559c-7d02-3bde-bb6c-9036943b598b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:9c:61:c3:65:77:10:c0:c9:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=65909ffd-fe9c-4af9-a14f-c1c445294acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:ab:ba:d8:ea:8c:07:ff:e2:06:e5:1a:ad:
                    da:b0:60:01:09:de:26:23:33:64:ae:32:74:b5:c7:
                    83:f7:ef:5f:2a:7c:ce:a1:0e:8c:b2:77:80:cf:31:
                    ee:01:1f:3b:da:88:f7:d6:c8:47:3d:91:31:c4:ab:
                    35:56:16:3f:e5:07:03:1f:c2:e3:2a:90:5f:08:c5:
                    56:7e:90:a5:4f:fc:a3:56:c6:a8:9c:ce:26:87:5e:
                    01:0d:8b:a0:a2:5a:73:77:0d:b9:3e:9d:ba:4c:e3:
                    d3:3e:52:fe:a7:fc:9f:0c:f1:de:89:4d:b9:9a:ce:
                    24:03:76:26:b5:79:6a:7d:ae:25:3f:ec:6b:f5:93:
                    f8:5b:55:2a:78:8a:7d:13:b2:00:f3:bc:00:2f:ad:
                    2a:20:c6:f0:21:53:4c:b6:2f:26:c8:9e:a7:8c:00:
                    3d:13:5a:dd:31:2d:d6:d8:c6:f7:c5:d5:a5:57:5e:
                    02:ef:e2:49:cf:3b:00:f4:f6:1e:c9:8f:43:46:70:
                    d3:e6:17:bf:0c:77:1c:d2:51:23:ac:ff:f2:7f:67:
                    9d:13:d9:da:c8:76:12:3b:2b:eb:fa:a5:52:8f:61:
                    69:4d:03:07:1e:5f:b4:49:d8:23:ed:f7:11:4a:5d:
                    63:0b:d0:8c:69:a1:b4:5b:48:91:b6:d7:a7:93:90:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:97:35:93:2C:58:32:DA:CE:FC:CD:BC:8F:CC:14:FB:A6:92:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72af559c-7d02-3bde-bb6c-9036943b598b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:20:0c:92:e5:07:ee:ee:0d:c1:04:90:e9:42:c9:66:93:77:
         35:bd:7f:21:56:24:51:02:ed:c8:4b:e2:32:99:dd:6f:ab:46:
         5e:99:bd:bb:eb:0a:4a:82:4a:3f:43:7a:5c:7d:31:a2:2d:c8:
         24:5f:ae:7f:80:5c:24:d0:83:38:43:94:c4:5c:85:fe:86:71:
         f5:33:e3:3a:ea:58:01:5f:22:c6:0b:40:2f:bd:e8:a8:b7:1c:
         c5:d8:b7:69:f0:e1:1c:25:2a:89:55:84:8c:5a:ac:c8:de:e6:
         87:0b:4f:40:94:7a:9a:19:51:88:17:16:8f:93:8f:9a:25:7b:
         3f:35:17:8e:77:bf:cb:01:8e:8a:db:d2:7d:9f:38:1d:b8:2a:
         9a:4a:82:a6:e2:9f:59:6c:cc:68:cc:91:3f:38:b6:01:d7:c5:
         02:64:da:25:61:de:f2:b7:1a:4d:51:ca:61:38:b3:d5:a3:d8:
         4b:72:51:a2:60:da:43:1a:86:5d:e3:7f:67:19:87:bd:e9:9d:
         ee:56:13:ae:1d:c9:bc:2c:a7:f1:79:32:1f:bd:58:83:f5:21:
         c8:d1:05:c6:0e:ac:dd:00:8c:7b:b9:30:24:8f:e1:d8:d8:1b:
         c8:7b:b3:9d:b3:56:69:22:d6:14:f4:ed:92:fa:de:51:ec:b1:
         02:b4:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:28 2025 by rpki-client