Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d76183f-edfc-3108-b18d-5f19ea04fdea.roa
File:                     8d76183f-edfc-3108-b18d-5f19ea04fdea.roa (raw, json)
Hash identifier:          RE7eg21AzUrFkOdxotidwVqT5CHaoaQkClEnesXbKHU=
Subject key identifier:   F3:F2:98:73:D9:3A:EE:F8:80:23:EF:69:B4:A1:75:78:9E:3B:81:57
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FB2A80357BA3FB1C2470
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d76183f-edfc-3108-b18d-5f19ea04fdea.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        72.173.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:fb:2a:80:35:7b:a3:fb:1c:24:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d4d07c98-0b01-4a24-888e-9b81e98cb53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:6e:02:37:94:e4:7b:e7:a6:60:09:2a:34:
                    a1:ae:f9:a5:2c:ab:96:ff:e7:fb:57:69:c5:bc:86:
                    71:e7:72:45:56:3c:bf:b7:d6:79:1d:bd:ce:fd:3f:
                    1e:f7:cb:1e:75:3c:78:49:39:63:cd:b4:57:56:07:
                    16:44:e6:de:85:c6:17:e3:2c:9c:05:0d:ba:25:d1:
                    ed:d9:4b:6f:e5:62:79:3b:f8:a8:72:0c:47:56:8c:
                    5d:f3:af:62:b3:fa:aa:c0:f7:35:18:cf:e0:7c:4d:
                    8c:17:ef:d6:4e:3d:d3:b7:2a:63:75:85:32:17:3d:
                    c5:73:35:64:5e:03:7f:e3:ef:1c:30:7e:15:ed:8f:
                    6c:80:84:0f:af:17:1a:e9:f7:4c:db:ae:83:29:34:
                    8a:0e:5b:fe:aa:f8:9c:c1:92:49:a9:5f:76:dd:8b:
                    89:ae:f0:78:c6:62:91:45:76:cf:0b:5a:08:b8:be:
                    6a:0c:ce:33:93:a0:17:d7:b0:e2:1e:6f:e1:21:50:
                    f5:ee:fd:8c:b9:de:36:2b:a3:1f:14:68:2e:d6:57:
                    29:e1:d0:8b:6c:54:39:09:39:86:e8:25:cf:53:b7:
                    26:34:b1:16:7a:cf:45:64:79:8e:28:ee:34:93:72:
                    95:e0:12:bf:1c:63:c0:26:c7:ec:8a:69:3a:87:1c:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:98:73:D9:3A:EE:F8:80:23:EF:69:B4:A1:75:78:9E:3B:81:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d76183f-edfc-3108-b18d-5f19ea04fdea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:c6:cd:3e:31:61:2d:4c:22:0a:6c:2a:07:18:07:73:cd:
         26:94:2b:89:77:f0:f7:3f:09:8c:df:fd:58:e8:7d:e1:0d:ab:
         80:b5:ba:f0:d1:e2:c2:92:16:5c:15:54:48:1e:de:df:e0:7d:
         eb:89:d6:5d:9b:79:3d:f2:9f:a7:3f:70:21:75:60:83:ac:b3:
         cf:17:cb:de:15:8a:cd:48:d8:0d:67:9a:ec:45:96:7c:e3:1a:
         0d:30:68:0d:97:b9:c6:86:d8:84:5e:af:2b:74:9f:ed:90:c5:
         03:e5:80:1d:a6:33:6b:90:f2:72:ca:b4:72:eb:28:45:1f:5c:
         37:fb:47:0c:47:9a:0f:3a:bd:8e:30:d1:ca:26:3e:56:e6:ba:
         37:00:08:41:ad:5b:bb:8e:9f:6b:a8:50:01:f0:47:b5:af:3d:
         7f:0e:c0:a4:67:95:25:a3:49:bc:6f:ab:87:af:57:c6:b8:6c:
         cb:fc:bd:ae:8e:dc:36:fa:9c:e0:2d:00:51:f8:c2:76:42:47:
         9a:73:2f:91:ee:a8:1c:22:f1:1d:9c:bb:ff:d3:15:97:cd:f6:
         96:77:ca:d1:b0:3e:a9:35:f8:40:40:cb:76:6d:bd:ec:db:87:
         ee:c3:18:95:09:27:9b:8a:32:3a:31:55:ff:39:eb:68:24:8d:
         91:8e:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:05 2025 by rpki-client