Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
File:                     9e2a83e8-7988-39f2-8252-d37663c3e42f.roa (raw, json)
Hash identifier:          Fnksi71seitA9OkbwszjG8q2yG8FBLX0+4vfPaXWODY=
Subject key identifier:   3D:BE:A7:41:43:AC:C9:62:F7:42:B4:CB:BD:1A:00:5E:D8:4B:22:AC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5814BF3ACC5C0DE159D4240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.243.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:4b:f3:ac:c5:c0:de:15:9d:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6bf864f2-41b4-4cd5-be02-18c9db3b443a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:5a:71:46:a5:97:16:ea:a3:6d:23:6a:d8:
                    df:a0:18:26:15:ac:06:21:57:f0:da:a4:a7:47:90:
                    d2:fe:3f:d9:ab:f1:ec:11:f4:f9:49:d6:fc:d2:e1:
                    85:67:2f:35:9a:94:54:bf:b4:46:08:84:ce:57:cd:
                    a0:cc:00:fa:ee:cc:0f:8a:cb:cd:64:8f:97:91:b7:
                    a0:d0:56:61:39:c8:31:a5:e5:88:ba:2c:31:c3:6c:
                    97:80:d8:94:cd:46:77:8c:73:83:5a:e2:c0:b2:78:
                    97:bc:74:b2:f5:49:79:ba:aa:20:e0:4f:72:e8:f3:
                    9e:52:03:d3:3a:17:70:67:af:bc:5c:a8:91:de:1f:
                    42:ef:25:0d:34:ca:a6:2a:c8:16:40:55:fa:45:db:
                    f1:af:cf:03:18:f0:c1:64:68:db:98:e6:bb:65:8d:
                    ee:38:ae:0f:7e:a6:07:21:af:cb:03:72:44:a7:9f:
                    a9:56:3a:74:56:ab:10:e7:43:32:6a:69:74:3b:8f:
                    9a:29:ca:b4:44:cb:c8:9f:d9:25:fb:d3:68:82:83:
                    d7:f4:06:50:c2:ad:e0:3c:5e:ab:94:87:f6:b3:8c:
                    0f:23:af:34:5b:27:f8:a4:25:39:d2:ef:a7:df:ea:
                    13:af:c1:70:a3:2a:53:7b:9b:28:2f:b3:73:3a:45:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BE:A7:41:43:AC:C9:62:F7:42:B4:CB:BD:1A:00:5E:D8:4B:22:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e2a83e8-7988-39f2-8252-d37663c3e42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:a6:12:3f:11:2c:8f:6a:d8:4c:b8:5a:d9:97:66:03:e5:
         ab:84:09:c6:5f:32:c1:6c:07:aa:6d:fb:18:49:db:3e:27:ff:
         8b:e1:fc:d1:f1:24:5a:70:71:cc:ef:90:00:07:d6:95:8c:01:
         93:85:e0:3e:d6:bb:a5:c9:19:fe:81:c0:30:24:75:f5:bf:a5:
         b7:46:47:85:2e:c0:1f:49:0a:29:4e:5d:c4:18:47:d1:7d:2f:
         6d:7b:c6:ba:92:aa:d9:35:30:6c:01:31:d9:32:dd:b3:e9:c3:
         48:f9:b3:d8:e5:58:94:a3:c3:bf:15:cd:6b:86:4b:06:da:e6:
         c8:11:5f:fc:55:01:e1:d8:26:fa:1c:8d:de:a3:ea:c1:d4:66:
         db:f2:53:dd:c5:00:09:ab:ae:25:23:c3:aa:f7:2f:31:89:ba:
         87:55:75:a6:2d:df:f9:2b:dd:95:1f:5b:08:a5:9f:15:f7:03:
         51:c6:4a:56:b5:71:61:7d:1f:b9:ed:6f:4d:0c:f6:35:db:4b:
         91:82:41:db:2a:5d:bd:38:dc:41:33:08:1d:65:5d:31:73:ef:
         62:7e:d1:ef:2f:1e:32:69:7d:74:bb:be:9a:40:42:22:5d:ae:
         2f:97:58:6e:66:91:22:53:84:ce:12:bd:19:21:a8:0a:a1:8e:
         7e:0e:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:58 2025 by rpki-client