Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
File:                     25289940-5314-3e04-a710-ae91cf64f9b9.roa (raw, json)
Hash identifier:          ZT4SVhBTsFvJeS/okNMSfCrS2FdSDCMsJaOpqrlBsdI=
Subject key identifier:   90:73:72:EF:36:61:A5:08:26:C0:22:E6:60:6E:9F:D9:D7:6B:0D:A5
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858490CB16A93BBADA8A104EF3900
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     13649
IP address blocks:        72.250.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6a:93:bb:ad:a8:a1:04:ef:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=ab97f4c5-0c8c-42b6-b0ae-a23771437350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:12:d5:fb:92:00:19:98:5a:dd:40:72:43:
                    b1:09:81:88:1e:d1:07:ff:a5:19:19:1d:37:ef:94:
                    2d:e5:f4:27:93:48:1c:82:4e:e7:3f:57:2a:bc:ca:
                    2f:37:52:65:58:b2:74:18:91:47:dc:6c:18:38:05:
                    83:f9:3b:e2:78:b7:b2:86:08:fd:46:70:65:b6:d3:
                    01:a3:4e:dc:fe:56:4b:39:6f:d4:e8:92:82:87:8d:
                    52:a4:48:7a:8a:99:ca:8c:d1:1e:36:d7:90:1e:85:
                    82:eb:26:67:d9:69:12:7e:f6:f2:11:9a:33:78:5b:
                    83:fd:61:d9:30:1b:0c:74:ea:db:a8:2b:34:7b:ac:
                    32:1c:9e:14:85:bc:a7:19:82:22:60:fd:ac:b0:b1:
                    88:53:9b:1d:6e:14:7d:c6:91:ec:82:11:22:e4:e1:
                    26:d6:31:cb:02:b7:a5:e8:76:10:40:8b:16:97:9a:
                    a8:4a:35:70:ea:c8:a8:77:f4:f9:c7:46:87:10:5e:
                    71:4b:3e:fd:13:39:6a:b8:bb:ac:2b:12:ee:4d:60:
                    7e:a2:77:a4:ed:a4:2b:11:6a:5b:4d:88:3e:fe:67:
                    bc:fd:d0:cd:65:29:29:14:23:01:ad:66:2c:46:8a:
                    3a:f7:a6:82:33:dd:59:41:67:bf:69:53:af:d4:2c:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:72:EF:36:61:A5:08:26:C0:22:E6:60:6E:9F:D9:D7:6B:0D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/25289940-5314-3e04-a710-ae91cf64f9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:50:60:cc:96:f1:45:e4:73:e8:40:57:2d:94:0d:e9:c0:
         a3:b2:05:25:90:e9:cc:c8:3f:71:31:8c:0d:62:58:13:8e:9d:
         fc:a5:2f:7a:52:0f:ac:aa:aa:0b:e7:9c:83:99:02:70:1f:9b:
         22:b7:93:45:96:30:18:fd:01:88:ad:96:90:33:4d:db:fe:c6:
         49:1c:47:cb:a9:1c:93:36:52:c7:21:3a:87:ba:d4:e0:87:7b:
         02:f8:fe:70:ff:63:2a:0f:eb:0b:5e:2a:1d:b8:b7:8f:8e:c3:
         a8:ef:f6:47:64:89:f6:54:20:f8:ea:54:8c:c9:b5:ad:c6:aa:
         8e:ad:df:ed:4f:ab:7a:57:d5:9e:af:49:74:a5:15:a6:80:1e:
         da:54:ef:09:6c:0b:0e:64:ff:f6:ae:bd:9d:a3:48:be:cd:ae:
         0d:07:e8:d1:61:94:3a:93:e9:db:bf:75:e6:65:99:fb:7d:77:
         58:aa:6e:0f:50:95:7a:b7:0f:10:be:6c:49:37:12:e5:fa:c8:
         b7:df:87:d5:c5:76:89:3c:ab:a9:d6:dd:b6:c7:49:81:81:1b:
         8e:28:00:7d:17:d8:ba:76:b7:2f:20:1a:f9:36:d3:7f:50:e0:
         9f:c5:92:0e:21:f7:67:26:bb:ad:8e:b2:58:ae:f3:f7:01:ab:
         7f:6f:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:18 2025 by rpki-client