Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa
File:                     e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa (raw, json)
Hash identifier:          cteBtfvHPbuxby8v3te6JqN0pkNONfF1mYAMM4VLZu8=
Subject key identifier:   3A:4D:B3:C4:3C:72:0C:B8:85:25:44:72:6A:33:91:10:D1:54:9F:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5810FEFFD3BFC96AE67BD80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:0f:ef:fd:3b:fc:96:ae:67:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=055a1e0f-6e3f-4d2b-85ec-643619b521dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:a2:bb:21:67:5e:a1:11:6d:5f:6d:70:5c:
                    eb:cc:78:a3:5f:12:11:8c:5f:35:10:8d:ab:5a:2f:
                    aa:54:88:ea:0f:c4:16:e9:4a:bb:2d:2a:ee:07:48:
                    8c:8e:e1:ae:83:4e:fe:92:98:dc:08:cb:49:27:c0:
                    4b:1f:ea:3e:60:53:d2:10:36:32:86:de:fb:9d:20:
                    82:d2:fb:96:93:87:c0:7a:62:f7:fd:1f:89:24:63:
                    08:7e:a0:64:24:78:70:27:95:95:54:70:67:a7:5f:
                    32:9f:a7:eb:a8:eb:6c:85:e9:97:94:e8:f9:36:31:
                    77:8c:3a:19:ad:89:6b:f5:ef:62:fc:35:64:39:d5:
                    70:d5:fd:06:be:8c:f8:12:76:d6:05:a5:f3:b7:7a:
                    65:6b:ab:8a:24:2e:43:6f:65:8d:99:b5:df:19:d7:
                    90:e5:65:10:5c:e6:ad:eb:4c:58:4b:11:46:54:0b:
                    c0:9e:d9:9b:3a:17:c9:a0:98:b6:f6:fd:59:7d:f1:
                    fa:2b:7e:c1:64:d9:ef:2f:68:db:ed:04:da:69:f7:
                    5f:55:21:09:e2:c3:13:9d:16:56:f9:0f:75:65:7d:
                    4b:e0:1a:fa:06:3e:5f:39:3d:90:3a:13:a6:9d:1c:
                    c3:2e:49:f9:95:3e:00:09:05:87:9b:d8:9d:b8:39:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4D:B3:C4:3C:72:0C:B8:85:25:44:72:6A:33:91:10:D1:54:9F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:d5:37:f7:a1:28:ed:5e:df:a8:6a:08:49:f8:2d:18:84:
         ed:17:c0:53:b3:83:1e:6f:78:df:3d:fb:93:2a:17:b5:02:15:
         d4:7b:b9:ce:a8:e0:72:d9:33:eb:b1:22:1d:cb:ee:00:bf:0b:
         f5:8b:c6:51:61:0d:9d:8e:71:d2:78:c4:47:db:3c:20:a1:85:
         e5:62:ae:80:2d:2a:b6:37:a2:a6:dd:f5:f0:19:b6:ed:33:0d:
         d1:e1:c7:82:19:57:93:2c:04:f3:26:ad:1d:c4:04:08:1c:40:
         9c:e1:15:79:3a:0a:b5:9d:69:f9:4b:27:ea:40:cf:aa:4b:6a:
         b8:ed:20:a9:45:ae:ee:4b:84:ce:f9:8b:58:99:9c:d8:f2:64:
         47:98:20:3a:e4:c1:d8:c0:dd:03:a5:8d:2f:1a:1b:77:7f:01:
         0e:01:3d:d8:46:cb:12:59:3c:b9:45:67:ac:65:8a:4d:99:a9:
         44:1a:7f:cc:a9:8c:d0:5a:77:db:bd:e4:b6:d9:88:30:53:9b:
         46:07:c9:94:63:48:7f:b7:05:f1:68:6e:b2:b4:fe:3b:fc:56:
         1f:58:24:15:6b:3d:3a:44:30:e7:90:52:d8:e9:59:ae:4a:97:
         be:85:37:00:6e:0d:b2:0e:f8:44:0d:f3:d7:51:fa:da:f4:37:
         d8:84:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:09 2025 by rpki-client