Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/437abdd8-15dd-32de-8926-1187388752de.roa
File:                     437abdd8-15dd-32de-8926-1187388752de.roa (raw, json)
Hash identifier:          nbBs7GdGqlpIAaZ4Yel7HnmEHyZlobb7QbzdBmAww3U=
Subject key identifier:   D7:A9:40:B4:72:7D:48:2D:B3:D1:6E:03:CF:A8:36:7A:7C:EF:28:CB
Certificate issuer:       /CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a
Certificate serial:       010D0C9F432858485F9AE4D3EC614DCEBE60FE80
Authority key identifier: 1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/437abdd8-15dd-32de-8926-1187388752de.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     174
IP address blocks:        72.46.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e4:d3:ec:61:4d:ce:be:60:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=2f817b0b-1bcf-459b-9179-1e085e07a13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:fa:93:25:af:30:71:2a:02:d2:5f:b1:94:
                    5a:07:f3:bd:da:44:bc:9b:db:e9:bf:09:81:0e:19:
                    8f:40:5c:6b:55:f3:f0:f2:10:5d:e3:21:b8:81:25:
                    2c:4c:ba:47:60:bc:4e:db:60:9d:26:31:8f:f9:c1:
                    f7:88:a6:2c:04:8d:d1:e7:fd:db:2e:dc:45:24:21:
                    91:b4:5a:1c:bf:bc:d3:77:98:18:63:fc:13:fb:d3:
                    ce:b1:c6:cc:4b:43:a7:ec:65:a7:7a:9f:8e:69:ea:
                    c3:9e:04:79:09:4d:fc:94:79:dd:f4:e5:4f:61:72:
                    05:4c:d0:fb:f0:34:9b:00:4d:45:6b:6b:a2:ff:41:
                    59:a9:87:1d:70:da:7f:7c:a3:af:ad:29:af:36:1f:
                    a1:41:c8:a1:72:12:80:5d:9f:9c:33:d3:18:f0:2f:
                    0a:d7:e9:94:ee:4a:9a:6e:f8:da:4b:ad:74:2a:9d:
                    80:47:93:87:8a:aa:47:be:18:3e:b9:7d:f0:08:c5:
                    88:79:11:31:cb:94:8e:f3:c6:c7:0b:c4:76:44:b0:
                    37:30:49:6a:c1:a6:e5:13:ca:20:e0:51:f7:bc:72:
                    cb:8e:ca:34:cf:ee:4c:01:d6:b0:f4:00:52:f2:60:
                    a6:b4:e4:0d:bb:8e:d6:36:86:32:bf:1d:a4:da:01:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A9:40:B4:72:7D:48:2D:B3:D1:6E:03:CF:A8:36:7A:7C:EF:28:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/437abdd8-15dd-32de-8926-1187388752de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:b8:64:09:6f:48:dd:6f:1d:70:79:d3:83:d3:d6:51:76:
         86:8d:03:7f:c4:46:61:cd:7f:a2:80:43:37:b5:dc:73:c7:c4:
         85:8d:d8:f0:bf:40:85:af:fe:a9:db:68:b6:fe:2b:de:52:4c:
         9b:a0:c3:d9:5f:89:f2:4c:f8:1f:4d:c9:af:45:8a:70:87:02:
         7e:21:75:b2:26:e3:76:f2:c5:ec:ac:12:1b:8f:de:42:f0:e1:
         22:20:30:6d:fd:73:99:a2:0a:52:9b:98:60:b5:3b:bd:36:50:
         ad:e3:35:26:25:a7:7a:5a:4f:09:1a:b4:4f:89:02:3e:22:b5:
         82:fd:e5:47:8c:68:71:d2:f4:0f:f5:f8:7a:c4:b3:ff:8c:fa:
         1a:79:8d:85:56:d4:74:12:51:de:55:81:69:57:22:9d:c3:a2:
         a4:8b:ca:5d:9a:df:ae:31:d7:52:25:85:17:4c:79:1c:a4:ed:
         b7:ba:5b:7c:53:cc:f4:22:e4:33:9f:22:31:be:e6:44:de:6d:
         08:88:f7:3e:de:14:ba:32:0d:96:9d:8a:e2:a0:a2:48:4e:c7:
         b6:d0:c0:31:7a:59:22:e2:d0:b3:39:b3:4e:2c:59:32:3f:58:
         f5:b7:c1:92:bd:74:af:3a:99:f9:f1:ac:3d:02:20:3e:26:dd:
         2f:34:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:54 2025 by rpki-client