Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/046a18a1-9517-36d9-a0b7-47a264a808a9.roa
File:                     046a18a1-9517-36d9-a0b7-47a264a808a9.roa (raw, json)
Hash identifier:          Wn9WaV/p5Q9n6H1Oe1PHeB3poKF3Xf5kDI8TssjL0ak=
Subject key identifier:   FE:27:02:37:E1:49:0C:4D:98:3E:B5:93:F7:BA:78:C6:26:BA:03:30
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00691737B37C1D417830280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/046a18a1-9517-36d9-a0b7-47a264a808a9.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.17.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:91:73:7b:37:c1:d4:17:83:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=24b2c97f-66b9-4fa7-9853-8db60b6bdc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:cb:73:d7:68:88:ff:4a:9b:ae:2e:fb:4a:
                    43:73:29:9e:3d:62:3e:c5:6a:18:79:15:64:94:95:
                    0a:5e:79:70:da:4d:31:a1:c6:c0:5e:c7:1f:f8:59:
                    96:82:01:74:30:f5:3c:dc:06:d2:53:c2:86:e8:34:
                    e9:72:3f:5b:5f:34:00:1d:08:d1:43:28:3e:4c:f8:
                    67:27:a1:27:8b:c1:50:1f:35:4a:7c:7f:58:99:9b:
                    49:b1:05:47:ad:62:e9:f4:f6:17:65:06:c1:37:3d:
                    62:4b:2b:fa:e1:ea:77:fc:32:e1:c1:7f:9d:2c:44:
                    e9:6b:20:6d:80:95:df:4d:35:eb:be:0f:05:88:09:
                    e4:2b:ea:11:d4:17:e6:6b:a5:ca:58:be:73:f8:70:
                    4e:26:56:ec:2b:77:9d:b4:45:8a:78:01:56:ac:2f:
                    93:b8:af:9a:c7:e1:07:81:69:c7:43:60:89:33:d3:
                    4c:86:fe:8c:e6:3e:23:3c:fd:19:3c:12:6d:1b:b1:
                    dc:17:4e:e1:7e:ec:34:18:ca:1c:28:e4:cb:8a:02:
                    af:c6:a0:ac:74:8d:5d:ea:d0:94:05:a7:cc:fc:24:
                    f0:95:5c:4b:0d:c9:9e:eb:8a:4e:3b:aa:fc:7b:0b:
                    55:e8:ac:8d:e1:d8:de:78:d6:cf:30:9e:39:6f:b9:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:27:02:37:E1:49:0C:4D:98:3E:B5:93:F7:BA:78:C6:26:BA:03:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/046a18a1-9517-36d9-a0b7-47a264a808a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.17.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:64:a8:72:dd:89:be:cc:25:07:88:d7:c8:3f:62:c7:c4:
         36:e6:63:4a:22:60:64:9e:5e:05:1c:3d:4f:06:8d:e6:19:a8:
         21:05:b4:18:37:79:ce:4e:8a:95:77:2f:6e:ae:9b:fc:33:d7:
         dc:ed:52:94:2b:0e:77:cd:5e:30:37:67:63:40:74:da:fb:0e:
         71:08:c1:5a:0f:50:60:f5:8d:7c:f2:18:d3:f5:0e:b8:6d:bf:
         e8:79:0e:08:55:b6:b2:fa:39:1c:27:e4:f7:41:1b:42:98:1a:
         9a:1d:23:1f:62:e6:7d:01:19:0b:19:8f:61:c8:51:3b:a4:fa:
         56:0b:f7:17:1c:59:82:48:20:f0:16:a7:ee:b2:06:48:43:ab:
         0d:15:3f:46:48:46:58:8d:cf:63:97:0a:3e:3d:49:94:ba:10:
         bc:3b:d2:94:13:01:56:a4:02:52:36:43:08:7d:e8:10:a1:3c:
         ab:c1:95:8a:a8:38:51:75:0a:5a:bb:b6:68:64:3e:93:db:89:
         3e:f9:cf:73:eb:c1:82:ef:53:18:43:af:aa:0c:ce:b5:94:35:
         69:47:af:51:85:a7:4f:05:d5:e3:17:d8:7c:37:cb:46:66:ab:
         a8:72:d3:df:1e:46:1b:38:49:f0:7c:28:de:c7:12:d6:d2:e3:
         85:a0:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:41 2025 by rpki-client