Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f10da2ad-48bf-316a-aa25-d5236150ce21.roa
File:                     f10da2ad-48bf-316a-aa25-d5236150ce21.roa (raw, json)
Hash identifier:          3O1wu1e92G5+SIAYdSOvu6/uqDQS9MRVaTdJPjz7mKo=
Subject key identifier:   B8:6F:93:95:A4:EF:6A:70:A0:1A:B3:9E:CF:B6:5D:FA:01:EF:A4:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581908D052870EB1B4E22C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f10da2ad-48bf-316a-aa25-d5236150ce21.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        72.173.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:90:8d:05:28:70:eb:1b:4e:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d8a287b8-ac86-43f5-b978-3f90c657bc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:04:dd:61:cb:28:2b:6d:60:9e:6d:e3:bd:
                    db:53:52:9d:c8:27:ed:96:9b:d9:56:da:5d:32:d5:
                    00:0c:59:3b:63:58:2a:bf:0d:3e:53:02:86:88:c8:
                    14:ed:54:71:c2:19:74:f7:71:8f:35:ec:7a:1d:ea:
                    1b:b4:d4:2a:41:3e:9b:25:f3:df:d9:f4:19:be:d6:
                    db:18:da:d8:fc:9d:39:04:76:93:56:6d:87:40:03:
                    b8:f7:33:01:a8:1e:a4:3c:2a:4b:23:38:5a:18:64:
                    33:74:5c:f6:25:4e:4d:4a:e6:bc:e7:54:d9:e4:91:
                    f0:10:df:5f:27:d3:42:2f:45:71:89:fd:d3:da:74:
                    b5:84:d7:3d:cf:ac:2b:f1:92:b0:3f:3a:0a:8d:97:
                    e1:50:c4:f0:39:4e:19:ea:37:39:9a:54:cb:86:0e:
                    24:ec:03:8d:09:df:ae:53:94:a1:a6:93:58:98:5a:
                    3e:54:4d:66:e2:cb:23:8f:69:26:73:d1:10:6a:47:
                    fc:be:fc:3d:3d:6c:f4:4e:c5:95:08:be:9b:ad:e3:
                    91:e2:91:5c:6f:b2:5c:f2:d8:73:17:a4:ea:06:a2:
                    65:16:fb:69:0e:b0:63:88:64:d7:94:59:dc:76:a4:
                    ba:87:7a:08:12:45:d3:46:ee:ca:df:70:d4:67:d5:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:93:95:A4:EF:6A:70:A0:1A:B3:9E:CF:B6:5D:FA:01:EF:A4:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f10da2ad-48bf-316a-aa25-d5236150ce21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f3:40:e5:0b:da:53:bc:65:b3:53:f5:0e:a2:d0:b0:ea:ed:
         e1:07:1f:ce:36:ba:6d:71:84:66:b8:33:be:cb:4d:b3:e4:22:
         bf:20:2e:da:d0:fc:7c:61:82:6a:c9:4d:ea:e2:72:1e:ed:e9:
         6a:ee:b7:62:2e:87:27:fc:1c:6b:4a:42:5a:12:34:5f:58:bd:
         ec:d4:01:e3:78:3f:4f:18:e8:67:96:5b:51:8f:c3:4d:d3:09:
         1d:2d:87:46:20:84:e5:43:22:6a:4f:5c:72:60:3f:2b:5e:07:
         dc:5e:98:11:43:5b:75:83:22:cc:2e:82:a9:0c:e9:d1:31:e6:
         8d:33:ee:2e:74:0c:26:94:47:d4:88:ae:de:0b:28:d1:27:68:
         ef:5d:c2:c9:b5:83:b2:15:bf:5c:6a:22:5c:f1:d8:36:71:fe:
         f9:0e:16:c0:a1:f0:fe:66:62:5f:c9:ee:41:d5:df:0c:83:69:
         98:cb:1d:a2:3a:93:68:87:49:0c:6c:fb:f7:89:ec:3a:37:22:
         a1:35:a2:3e:41:37:d8:e8:d0:ea:34:05:b0:f6:16:c5:4e:62:
         35:94:b9:19:58:59:07:48:cb:b2:59:b5:14:13:da:b4:29:d0:
         d3:37:64:c3:07:8a:68:76:69:fe:f2:f9:62:0b:42:e1:e3:e2:
         4a:0e:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:20 2025 by rpki-client