Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3d20eae-b315-3266-9a9d-421ba4c28a52.roa
File:                     e3d20eae-b315-3266-9a9d-421ba4c28a52.roa (raw, json)
Hash identifier:          +sn30fBbobOXZ276GTWFI1z+4i3a6ky7Y4HMOJSDzLE=
Subject key identifier:   45:C5:FE:AB:69:08:C1:3B:3A:55:B5:11:8A:C4:79:55:E1:EB:14:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819CCDA4FCB8F6CDFC0680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3d20eae-b315-3266-9a9d-421ba4c28a52.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:9c:cd:a4:fc:b8:f6:cd:fc:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=55388433-e789-49ba-bb5c-9028db22a7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:2c:6e:65:e0:96:ce:57:4b:1a:63:a9:21:
                    42:7a:e1:49:97:58:3b:03:9c:ed:33:7d:18:2a:af:
                    3c:11:5f:e8:bd:22:db:e3:5a:d8:27:e8:2c:e2:c7:
                    4b:99:ad:29:89:53:2f:a5:3b:31:aa:51:ae:27:c4:
                    70:d6:a7:07:d1:c1:b2:07:f5:29:0a:53:b9:e7:33:
                    cd:0f:bb:86:f8:7c:17:a6:40:46:07:98:c7:0b:0f:
                    df:33:8d:c8:f5:ff:dc:54:9b:b2:1b:5b:be:bc:77:
                    15:7a:51:20:ab:77:a0:3a:2f:2f:2e:30:3c:83:f7:
                    7f:15:68:97:21:ee:47:15:9e:4a:26:7c:db:6f:65:
                    ed:a0:0c:c0:9d:d8:5e:13:fa:80:bf:4f:4d:af:b4:
                    45:85:2d:8d:67:e6:f6:df:e5:1f:dc:9c:0f:8b:09:
                    61:a7:e6:69:5b:d1:69:81:f2:ba:df:e4:03:44:2e:
                    9d:09:7d:40:05:74:65:4b:88:07:7a:13:b5:3c:f1:
                    9a:c2:4b:2e:12:41:31:99:91:b0:c9:92:8c:9a:3c:
                    6d:37:d9:d2:09:7d:5a:11:ee:84:48:13:ab:a7:fd:
                    9f:ce:c7:82:7a:f3:b8:d8:d4:68:81:4d:45:00:6b:
                    1e:cb:97:98:48:18:13:df:7b:8a:a5:ec:01:ba:d7:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C5:FE:AB:69:08:C1:3B:3A:55:B5:11:8A:C4:79:55:E1:EB:14:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3d20eae-b315-3266-9a9d-421ba4c28a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:dc:ca:16:42:97:01:c8:6f:41:d0:48:97:91:22:18:47:
         d6:71:38:17:f8:e4:a5:3b:e2:8c:d9:3b:aa:2a:54:2b:06:dc:
         37:97:ac:db:a7:4b:7f:1e:ce:c5:73:dc:f0:ba:56:9d:48:ef:
         7a:83:a3:e2:5a:6b:8d:6c:e0:9f:70:ed:4d:55:af:17:17:b7:
         fc:76:68:56:74:cf:af:ad:ee:7e:dd:5a:fb:04:33:2e:21:36:
         47:fd:7c:49:19:2b:c9:96:aa:09:93:ab:56:da:03:a5:89:a1:
         37:8e:f0:1a:24:15:1c:00:8d:5b:e0:a9:87:aa:d7:ca:2a:04:
         e9:5a:ca:11:db:81:43:80:35:29:52:87:4b:2b:39:f1:14:1c:
         80:e1:75:d0:46:ea:68:14:41:b3:9b:74:30:ae:14:39:7c:9e:
         69:8b:63:19:70:b7:85:91:e5:57:02:c4:41:14:c0:6e:0c:0e:
         f3:d9:18:a2:37:af:fd:35:02:30:a0:f8:4b:a6:27:14:9e:a3:
         9c:fa:28:e6:f7:7a:27:fd:24:36:15:f7:c3:e8:0d:83:b9:87:
         65:b1:88:28:24:1e:ab:8c:4e:76:40:11:62:c8:34:3e:51:ef:
         33:15:28:a9:3e:b9:54:8b:2b:60:67:3b:34:22:9b:69:7b:15:
         e7:8d:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:14 2025 by rpki-client