Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa
File:                     b962e112-6342-31ad-aa41-e9b4c605e6c3.roa (raw, json)
Hash identifier:          bnQiNRbD4M1KzF30/MwudKJvDo8vLUteG+nZAlBVGVk=
Subject key identifier:   7D:1B:0E:99:0E:50:46:A4:1F:B3:80:00:CF:A9:18:A4:AD:C2:00:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5810FFD013F418BFEEF2840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:0f:fd:01:3f:41:8b:fe:ef:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e40fcab3-a64e-4bae-968c-dbe3b5ac5912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:8f:07:be:c3:b5:cd:7d:fd:06:88:9a:f9:
                    d9:f6:6d:cf:ce:27:1e:5d:02:5b:ff:df:1b:d0:d8:
                    44:c2:54:aa:ac:2d:d0:b6:63:cb:f1:75:05:47:ab:
                    2c:40:02:d4:7c:bc:fd:27:ea:3c:13:40:e4:d2:21:
                    ba:f0:5d:1d:e1:c9:e1:69:0f:d7:9f:a9:7d:60:29:
                    83:48:29:7e:bf:f6:7c:1e:0a:22:25:be:ab:f8:cd:
                    42:19:7a:2f:fa:51:be:c9:09:be:21:e1:bb:da:25:
                    3c:4e:52:46:f0:9a:21:f4:06:19:d1:75:77:04:bb:
                    15:f1:c8:e3:68:41:54:ba:9e:d8:f5:57:23:09:2d:
                    de:a0:32:18:7c:b2:23:23:eb:74:cc:b0:22:97:a7:
                    df:68:8b:00:e7:d5:ef:1d:fc:3a:d1:da:20:1e:3f:
                    3c:f8:52:f7:d2:c9:db:a2:ff:34:7d:d5:e5:59:3f:
                    8d:a3:6b:a6:07:6b:d4:10:24:26:61:43:1e:a4:cf:
                    93:4e:ba:84:b7:3a:8a:3c:50:a3:4f:1c:96:28:8c:
                    bb:58:e6:83:4d:41:02:de:b5:e1:fb:1d:c7:ea:78:
                    5f:8a:1e:e2:d5:a5:36:d4:d9:bf:a1:c6:ee:74:62:
                    1d:99:c2:ed:d9:d6:6a:11:61:ad:b0:61:fd:73:c2:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1B:0E:99:0E:50:46:A4:1F:B3:80:00:CF:A9:18:A4:AD:C2:00:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:a9:18:94:79:b6:47:f6:9b:a5:f7:6f:2c:d2:28:ad:17:
         bd:cd:00:7e:3d:f7:1f:d0:33:04:53:25:38:eb:c0:37:75:e2:
         66:98:c9:1f:f8:63:46:05:ca:b9:d3:97:fa:85:39:08:75:14:
         5e:dc:fb:b0:17:39:9a:d8:c8:15:c0:8e:bc:fe:7e:10:92:c4:
         83:15:cf:c9:d7:9b:95:d3:ec:1c:d3:84:1e:f1:6b:55:28:0e:
         04:36:f5:ff:3c:16:b1:c3:c9:84:2b:2b:9b:07:ce:7c:7a:10:
         53:6f:b0:44:dc:62:d2:75:7f:82:78:dd:74:3a:0f:00:c7:a1:
         3a:79:f3:8e:e1:0c:b3:22:63:84:43:5b:79:7d:45:9d:36:61:
         2b:6a:83:16:c8:f0:21:6a:05:f2:22:3c:75:6b:d7:88:be:e1:
         bc:2b:fa:f0:20:69:6f:37:d2:87:f3:ef:67:73:c5:59:dc:48:
         66:ac:5d:7e:37:8e:38:64:25:7f:14:96:a6:71:fe:7e:78:9d:
         cf:df:d7:4c:48:58:47:6e:0d:52:2d:3c:40:19:23:05:80:f1:
         0e:f8:d0:6a:73:9f:10:f0:d4:0c:21:f6:e2:69:8c:8c:cd:e4:
         3a:76:6d:1c:b8:a8:57:e4:c4:7b:75:e7:e3:e1:64:27:b2:25:
         bf:2b:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:09 2025 by rpki-client