Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/912be08e-f017-32ba-9ba9-296d043b1189.roa
File:                     912be08e-f017-32ba-9ba9-296d043b1189.roa (raw, json)
Hash identifier:          mVCh0M+EEiVFSkFnH93vT1tT7usSMJ+Lh1A0nz7cOvQ=
Subject key identifier:   51:CC:1F:C8:7E:00:75:AB:29:D9:46:4E:60:2A:B2:08:7C:F2:2F:A8
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F4328584902EC0824FBA215022A79FB80
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/912be08e-f017-32ba-9ba9-296d043b1189.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     36100
IP address blocks:        72.10.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:08:24:fb:a2:15:02:2a:79:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=1a90c3c9-8234-4799-aa9c-f2a6f4c74dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:a0:5a:a1:42:e8:20:56:9d:86:bb:54:13:
                    f1:63:b1:bb:2a:52:65:b4:37:f5:0c:58:a6:65:84:
                    cb:a1:c9:09:ee:3f:b2:2d:ac:aa:a7:e1:5f:21:22:
                    f0:8d:57:e7:f8:f3:68:41:0b:bc:94:6b:2a:f8:aa:
                    f5:bd:da:2f:6e:f3:2a:1d:37:ad:3f:5e:13:d2:86:
                    62:19:2f:f8:e1:70:8d:f0:54:bf:0c:da:2a:8f:5a:
                    2a:a0:03:58:3e:fb:8d:c5:28:7a:11:b2:96:7c:4c:
                    db:7e:fa:85:d3:cd:c2:ed:e3:28:51:65:9b:ce:80:
                    05:38:ff:ed:83:ef:0c:8e:7a:4f:39:14:07:f6:b3:
                    23:30:c7:4a:64:b5:f2:48:59:a9:d1:37:4b:17:63:
                    e0:13:0b:9f:62:6c:af:f9:9d:7b:55:9a:21:bc:ae:
                    01:8d:e8:3b:c6:f9:c4:4e:54:4c:98:94:1e:b9:28:
                    2a:b3:ed:25:2d:99:2b:ef:44:ea:8b:b0:40:09:77:
                    26:92:89:69:a9:a9:c2:5d:ca:8a:04:50:d0:11:4f:
                    cb:05:0b:0e:ff:18:59:6f:ae:e5:57:66:bd:e9:ea:
                    d9:bf:45:73:9c:f1:e5:34:e5:24:17:12:5d:28:b3:
                    a2:d6:5d:42:cb:42:e6:8c:6d:f4:b6:1d:7d:e6:08:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:1F:C8:7E:00:75:AB:29:D9:46:4E:60:2A:B2:08:7C:F2:2F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/912be08e-f017-32ba-9ba9-296d043b1189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:09:5f:59:7c:82:9f:f0:d5:ec:e9:d8:12:cc:f4:38:eb:
         48:aa:f6:5e:03:dd:82:1f:69:d1:db:0c:d6:60:3a:1c:81:81:
         85:bd:a3:f3:ca:ec:78:15:c2:3f:ea:56:34:17:28:43:d1:ec:
         4a:01:f2:19:26:2b:83:9e:28:ca:f8:6a:2c:1c:d6:34:bb:0b:
         4b:a8:e6:d8:ee:29:c1:5f:d3:5e:61:47:a9:e5:75:f4:1a:2e:
         f9:83:e8:39:00:2b:60:4e:48:83:7b:f6:fb:d0:89:77:c9:52:
         2a:06:f5:9c:de:77:86:2f:86:23:ee:36:d9:a2:8c:ec:2d:85:
         fa:77:fa:94:ee:62:49:97:5b:bc:43:ff:0b:ba:86:a8:19:ca:
         13:c9:dd:84:bc:66:44:65:72:52:a0:f9:d9:5b:c1:45:77:df:
         fe:6f:2e:38:e9:75:0e:81:ae:ad:59:5c:76:c2:dd:ba:49:31:
         4c:90:d4:a4:8f:94:c9:66:76:a2:d3:1b:b7:be:a6:c7:ba:c9:
         fb:7b:1d:9a:86:57:0c:59:5c:43:61:d8:f7:40:ce:7b:b5:26:
         03:3c:6e:ec:e6:22:83:07:b2:68:20:23:5a:b8:2a:51:02:5a:
         88:75:70:b7:53:bc:59:b3:a6:c4:6b:a2:e0:d6:cf:d5:d9:35:
         06:bc:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:07:26 2025 by rpki-client