Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dee5c789-14f1-3234-9d52-0b9b7446aa78.roa
File:                     dee5c789-14f1-3234-9d52-0b9b7446aa78.roa (raw, json)
Hash identifier:          AMecSk7Nna1brTSiyGzqRHbxJJck/fDYkh/CYmYFsXA=
Subject key identifier:   41:CC:FF:4D:8E:0F:3C:3F:B9:84:45:34:D0:63:60:9A:24:57:98:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A0C46DDB34E299EEC8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dee5c789-14f1-3234-9d52-0b9b7446aa78.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a0:c4:6d:db:34:e2:99:ee:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f5ca2492-7d95-4198-8f74-d6ef0a824264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:e2:df:34:d4:bd:60:54:0a:50:19:bc:18:
                    f4:6d:79:7a:d0:19:3b:7e:be:30:41:d7:02:44:1a:
                    9d:46:fa:83:ac:b0:aa:a3:4a:9f:a6:de:cb:dc:0c:
                    b7:96:b9:69:32:ed:05:b4:07:69:59:d4:65:c2:43:
                    aa:8b:0e:14:bc:05:76:08:e9:f1:b5:8c:64:7f:e9:
                    90:ab:84:44:63:2a:5c:d3:37:a1:32:83:fd:33:f9:
                    39:ae:a9:4b:98:94:fc:78:fc:7d:c4:bb:e8:9d:1a:
                    2b:36:24:4d:ed:b0:37:d5:fd:4d:f2:0f:c9:f6:a7:
                    d4:ed:d5:8d:31:af:7c:a2:1a:85:08:d7:9c:6f:02:
                    a5:2a:a9:a3:cb:6e:e9:4a:24:8a:54:25:23:09:a4:
                    96:3d:6b:f5:83:79:94:0c:97:9e:d7:fa:40:27:60:
                    90:e1:76:79:e2:5f:f7:d6:57:22:da:13:83:49:fd:
                    66:44:b2:a2:48:9c:60:67:1f:cf:52:ae:94:13:aa:
                    5b:a0:bf:0e:52:86:82:50:be:25:f7:cd:5b:16:6a:
                    cb:cf:e0:b1:2f:cb:b4:52:8f:de:7c:fe:a5:17:a4:
                    c6:c0:fe:6a:6e:e3:1f:80:c9:8e:4f:65:7d:bd:6b:
                    17:32:fe:f7:7a:d2:aa:16:eb:68:4e:ee:f3:e2:37:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:FF:4D:8E:0F:3C:3F:B9:84:45:34:D0:63:60:9A:24:57:98:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dee5c789-14f1-3234-9d52-0b9b7446aa78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:51:65:43:a7:db:6c:a1:29:5a:1b:1b:9d:7f:88:54:f5:90:
         33:37:23:ae:5e:5d:7a:dc:9d:b7:55:fa:0f:f1:b8:4b:a5:46:
         c5:09:ca:53:24:19:74:e2:d3:6b:b1:e3:f0:0b:2d:04:dd:89:
         f3:85:40:dd:22:ec:cf:e0:eb:f4:12:7b:00:68:5b:d1:3a:9c:
         df:95:70:4f:3f:4c:80:69:17:b6:47:b4:d6:4d:4a:e6:b5:2e:
         77:f2:43:0f:25:6c:42:30:f5:50:da:fa:29:07:8a:4f:02:81:
         23:14:39:ce:63:e3:04:11:0b:42:aa:cb:79:a8:05:79:69:d8:
         8a:50:76:6c:d8:ba:71:27:d9:89:fc:84:30:0f:80:44:54:a5:
         9c:44:b2:24:72:44:e6:56:4a:75:84:78:b6:47:56:73:97:2b:
         c6:c8:17:13:06:0e:60:0c:79:e5:51:e4:bc:29:3b:87:12:6c:
         f8:bd:68:68:c3:f6:e0:c3:dc:4d:37:c9:48:cc:14:10:3f:da:
         68:c1:49:32:fc:15:0b:2c:c6:70:6f:5b:64:20:34:d6:17:78:
         86:b1:12:8f:33:0b:99:e4:44:6d:94:e9:c9:d2:9a:b8:ac:5c:
         af:81:a4:00:eb:57:31:f8:fa:3f:e3:25:d3:56:7d:03:15:d0:
         96:33:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:05:40 2025 by rpki-client