Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d631bacf-f167-3d32-95f7-ea899b955d67.roa
File:                     d631bacf-f167-3d32-95f7-ea899b955d67.roa (raw, json)
Hash identifier:          zjVXvw16tFj0KnT7OimJMQmTd8L9hMvUnQR7XVN/D38=
Subject key identifier:   93:D6:FA:FC:5C:0E:9E:BB:9E:D4:18:F0:4B:53:04:49:0A:05:B9:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581D8B63874EE61B01FFD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d631bacf-f167-3d32-95f7-ea899b955d67.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:d8:b6:38:74:ee:61:b0:1f:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a04415b0-6694-43c8-912e-fed95a17f330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:35:6c:77:84:2b:1e:37:68:24:01:79:30:
                    db:c2:a7:e7:f1:6f:1f:83:30:87:29:b3:d7:e3:d9:
                    38:75:0e:66:37:d2:a0:96:7e:64:7b:2c:13:af:c4:
                    12:c3:b4:68:ce:7f:f5:79:aa:68:61:b7:ac:d3:b6:
                    0b:d2:64:86:d7:5c:97:5a:18:f8:e9:74:e9:65:5b:
                    3c:3e:76:6f:55:a3:3f:54:30:b8:a6:91:79:2d:42:
                    c0:9a:6a:ea:ec:bd:96:d2:a4:e9:1a:d7:c8:76:1f:
                    7f:1d:89:90:00:51:6e:e8:88:a6:f0:2d:6e:29:fc:
                    6d:90:96:b5:72:0c:c2:0d:5d:e1:84:75:ee:67:85:
                    2c:c2:b3:f5:93:9b:47:92:0b:e7:d3:31:1b:af:84:
                    52:56:7b:77:1e:d0:91:6e:09:e2:88:5e:e4:35:cb:
                    50:af:31:63:4b:30:40:18:8e:81:ac:c2:a8:10:49:
                    57:c0:a1:0b:ed:1a:cf:93:ed:ff:e6:27:dd:4c:45:
                    c1:5b:39:43:66:94:35:ef:94:03:e5:ef:67:06:d7:
                    05:3a:6c:cd:98:7f:98:bc:c4:12:e0:2e:e8:96:4d:
                    dd:e2:d9:43:37:0d:fd:d8:ad:c9:84:6d:fd:ed:75:
                    94:b3:5d:ce:04:32:f9:64:a9:28:0c:60:c8:af:51:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D6:FA:FC:5C:0E:9E:BB:9E:D4:18:F0:4B:53:04:49:0A:05:B9:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d631bacf-f167-3d32-95f7-ea899b955d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:a2:03:42:9f:c2:ee:0f:46:4e:d3:13:6d:3e:cb:26:b2:
         95:68:2e:66:a4:06:ce:28:94:b7:27:d4:fd:f6:ba:c4:67:c3:
         b4:70:da:5d:fd:a1:81:e4:80:b7:e1:bf:93:fc:af:20:77:59:
         f7:b8:f6:c7:19:fb:de:c0:41:9a:ea:eb:64:9d:14:65:7d:31:
         46:cb:00:47:24:df:f9:81:e3:c8:f1:26:bd:6c:15:74:12:2f:
         9d:43:33:7a:11:e7:7f:db:00:fa:fa:b9:15:80:c0:8b:6a:56:
         08:44:bb:3f:29:d0:bb:2b:1f:92:0d:2b:7d:0d:33:a1:74:03:
         ca:43:29:74:9e:5b:7f:1c:ed:e2:90:54:5a:1c:a1:92:4d:b5:
         d9:39:c2:09:45:20:2a:4d:79:fb:1a:9b:ea:a4:ec:e2:ac:09:
         ea:01:48:d6:a7:6d:c2:99:c6:63:60:5d:7d:b4:17:1c:58:ee:
         ce:81:91:76:30:f3:f2:35:a5:9c:eb:0c:c0:a3:ee:ca:16:fd:
         50:e2:13:d5:bc:5f:58:53:55:0e:37:1f:de:ea:e0:39:9a:5b:
         af:28:6b:73:e8:9c:52:e8:0b:27:d1:20:6a:61:31:7e:ee:59:
         90:0d:b1:6a:f4:45:6c:62:1a:8c:66:ee:85:f4:61:63:75:a9:
         21:1d:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:44 2025 by rpki-client