Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa
File:                     a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa (raw, json)
Hash identifier:          UTCF2mWaNBIrTvTUogn+Zu+DqnhB4vFh5xrJW8kX+98=
Subject key identifier:   3E:EB:D5:57:A1:4E:AF:0A:07:74:33:CA:AF:E7:52:3A:E7:7C:30:89
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285848F24E7F9120CB123D77AEAF00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa
Signing time:             Thu 20 Feb 2025 15:10:40 +0000
ROA not before:           Thu 20 Feb 2025 15:10:40 +0000
ROA not after:            Wed 21 May 2025 14:10:40 +0000
asID:                     401558
IP address blocks:        72.9.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:4e:7f:91:20:cb:12:3d:77:ae:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Feb 20 15:10:40 2025 GMT
            Not After : May 21 14:10:40 2025 GMT
        Subject: CN=a2251d95-2e3d-48ab-b422-e496e0ef93c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:8b:cc:b3:ba:2a:8a:13:82:5e:4b:98:cb:
                    74:08:d0:b6:46:3d:18:a8:7a:30:d7:0c:af:68:cf:
                    ea:8c:1e:94:92:97:73:e9:d9:81:f5:d6:96:09:f4:
                    72:b6:b1:7a:19:b5:62:a1:de:c8:d0:20:06:b8:0f:
                    f8:45:91:eb:ae:85:c5:cb:6c:76:bf:2d:26:85:94:
                    1f:42:1b:b7:87:a0:c8:c3:99:c8:5c:7e:73:b0:2b:
                    52:36:05:13:47:1a:d3:8f:2d:2d:d8:8d:80:4f:31:
                    3f:68:53:9b:91:82:ba:22:cd:97:b6:5f:97:e2:18:
                    27:98:67:ef:e8:f0:63:c2:1d:42:fc:b3:d0:94:a6:
                    4f:37:25:dc:f0:a8:a4:67:c0:45:85:75:e4:48:25:
                    29:f4:8b:2f:06:18:b0:a9:e5:24:f0:c2:35:89:6c:
                    e1:10:22:6a:d3:e1:b0:cd:22:f5:0f:8a:81:8c:85:
                    56:8d:1b:23:56:8b:93:67:63:e9:3a:56:05:81:d1:
                    d7:88:40:ce:54:a5:46:f1:0d:f9:73:2a:c4:ec:36:
                    4f:97:37:43:d9:bf:56:bd:a4:66:bd:b7:54:9e:6d:
                    e3:81:9d:87:24:2c:7e:34:dd:c6:80:3a:e5:82:dd:
                    c6:6c:b8:37:cc:2f:c5:09:4b:31:aa:ce:4b:71:cd:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:D5:57:A1:4E:AF:0A:07:74:33:CA:AF:E7:52:3A:E7:7C:30:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e90506-ecf0-30b9-83c2-34bd6f5317b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:81:c0:cc:91:c4:31:59:3c:86:05:92:1b:9e:03:a9:82:f0:
         f4:ee:b0:5b:12:f2:4c:6e:4c:62:8d:1f:97:6b:40:e2:60:fb:
         ca:58:55:80:37:ea:93:47:43:0c:ec:6f:d7:a1:a9:d4:1a:d4:
         40:aa:11:59:a9:b0:45:5d:31:3b:be:6a:5b:73:0c:95:d0:0b:
         11:24:3b:ec:cd:c7:1c:43:95:72:16:1c:67:36:db:b2:60:dc:
         8d:2f:95:a6:71:5f:9d:87:f3:16:e5:4e:c7:1f:cc:72:c3:96:
         3b:e5:e5:85:5d:79:18:35:7e:b6:8f:8f:e8:95:78:bf:dd:b0:
         81:56:56:11:fe:10:b1:cd:c2:37:50:19:f3:85:b6:74:48:ba:
         ab:ee:66:5d:68:36:a9:e2:1c:da:1f:ce:0a:8d:c7:aa:f4:15:
         4c:a1:b3:29:3f:8d:2a:5c:54:a6:6c:ee:a2:c2:c4:56:4d:f2:
         f4:00:ac:4f:39:1f:cb:fc:51:b7:9c:53:82:ce:7b:96:3b:05:
         22:6b:f4:f2:e5:94:fe:f9:64:c2:42:f2:a2:7b:1c:cf:58:48:
         1d:1b:40:85:fb:96:48:45:a3:61:ce:d5:cb:63:49:98:28:b9:
         bf:64:98:96:1f:53:68:ad:cf:4a:aa:47:52:32:a3:55:ca:13:
         ea:25:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 04:10:46 2025 by rpki-client