Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
File:                     ed98aa57-d32e-3a51-850b-fcb85c818c67.roa (raw, json)
Hash identifier:          zDYZ8kqQ8vxRJDHAgb/ULyGFR5IzmOwooSVZOprjURE=
Subject key identifier:   6D:F5:B1:53:85:30:B0:C7:8E:BA:F2:85:E4:1D:B5:E1:13:C6:F5:19
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285848DEA1343614E32A4B48AF1140
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     21928
IP address blocks:        72.250.0.0/17 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:34:36:14:e3:2a:4b:48:af:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=459df8a5-4565-4d0d-9084-b487e60d34fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:13:35:c1:9d:31:57:0f:5d:63:2b:34:04:
                    44:b1:fa:f5:63:be:0e:cc:44:22:da:dd:41:07:85:
                    3d:4a:c3:14:5d:71:e4:da:96:70:4c:bc:32:b7:d3:
                    32:96:17:00:26:25:35:66:4d:0c:d9:0c:ec:fd:07:
                    c3:5f:77:fc:33:95:d1:ce:c0:bd:d6:88:77:86:a7:
                    c8:ae:d3:93:0f:3d:90:fc:9c:8c:14:4d:87:9f:74:
                    65:9f:1d:6b:61:21:75:8d:2e:9b:bc:58:90:1d:c9:
                    a8:ed:ce:e4:96:c6:3b:ea:d0:8a:3a:e0:1f:02:0b:
                    71:11:55:8b:55:c1:dd:86:31:1f:24:05:45:6b:d5:
                    d9:c9:23:f8:e0:55:41:d0:bf:50:46:73:e8:0f:47:
                    f7:16:c1:af:0d:d9:c9:bf:33:80:c9:c5:43:5b:22:
                    9c:a6:dd:e9:75:20:95:27:52:d8:80:6f:16:2f:fc:
                    e0:2b:90:38:1b:58:98:6b:b5:81:4d:83:99:e7:70:
                    d1:89:6f:b7:0e:26:ff:53:8d:5e:bd:10:d6:cc:bb:
                    7a:d2:8a:17:da:09:e6:03:09:72:bb:c1:cd:6f:22:
                    81:f4:49:06:d9:19:4f:c4:b8:84:70:80:f8:bb:15:
                    5d:72:85:0c:dd:cd:8f:90:ac:4d:2b:8f:6c:8f:5c:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F5:B1:53:85:30:B0:C7:8E:BA:F2:85:E4:1D:B5:E1:13:C6:F5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:86:72:cb:3d:7d:38:3a:ac:28:ab:5a:ca:76:79:2d:a4:52:
         24:14:14:f0:d8:31:ca:51:11:ba:c6:1b:4c:ee:04:41:74:10:
         4f:07:9a:d7:ed:2e:1a:99:3c:f3:7f:17:ba:88:0f:7c:00:69:
         ef:27:73:b6:3b:66:31:a1:13:f9:32:58:70:1d:e2:39:c3:d8:
         85:f1:04:10:75:1e:43:ea:1a:f7:5f:f4:b8:ce:cb:9b:2c:b1:
         cd:7c:2f:ab:d3:fc:97:6b:c9:d8:8e:40:84:9f:7d:2a:cb:33:
         7b:b1:0c:50:d9:14:09:b2:06:e3:76:33:cf:87:02:34:fd:76:
         ae:fd:91:94:5d:87:cc:8e:d7:fb:17:a5:d7:8b:8f:b9:04:b2:
         b7:3f:ef:22:17:9f:41:f0:74:23:bc:db:5d:09:b8:f5:9d:ac:
         fe:4b:ac:95:47:f7:41:5e:4d:bb:61:d9:dd:41:65:a4:f4:e7:
         2b:b6:46:36:b2:7b:6c:89:e1:99:de:42:f0:7c:b9:97:42:b3:
         82:e8:c2:34:9b:eb:26:83:1d:8d:a8:f9:99:c3:3c:16:ec:c7:
         f4:a1:93:4b:29:47:7c:28:6d:89:03:7f:88:7c:06:2e:6e:24:
         c3:80:e4:98:af:03:30:92:d3:f1:09:d2:8b:52:39:54:21:14:
         46:7c:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:16 2025 by rpki-client