Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa
File:                     d981ed21-a25a-3b01-91c0-905497dccc91.roa (raw, json)
Hash identifier:          gXSBHEViPp9pUnocwHNAETaYjvz1YJ8FPzVS2EKbS0o=
Subject key identifier:   AC:E7:46:9E:D8:98:24:24:92:73:D7:79:C6:3A:23:EB:BE:77:9B:D1
Certificate issuer:       /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial:       010D0C9F43285848E9CBE0D3D8929A9AC615D400
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     29746
IP address blocks:        72.21.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e0:d3:d8:92:9a:9a:c6:15:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=7dcfdbb1-0635-4e8d-9e9d-81980bfd1a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:b4:b0:2a:30:c4:92:99:bc:d8:27:f1:70:
                    15:3e:3d:bc:a5:94:5f:82:fd:b1:d3:fb:fa:66:98:
                    32:35:89:5b:a9:c5:bf:0c:51:b8:05:dc:42:af:27:
                    91:1f:57:e1:fe:70:df:14:14:9f:37:d6:df:c8:ce:
                    11:8f:14:b4:f5:e0:d0:36:c7:9a:77:d1:46:f9:f2:
                    68:4a:3b:5e:34:33:9d:d3:29:d7:16:c5:79:f1:2f:
                    1d:43:1e:b6:72:9d:d3:af:ec:fc:ed:5a:8d:b9:a9:
                    97:eb:5d:c3:8b:ee:56:aa:dd:7e:a2:6c:9f:ef:5b:
                    be:eb:dd:fe:30:49:4d:3f:16:5f:33:72:9d:86:fd:
                    34:5d:c2:66:2d:e8:fb:e6:fd:7e:79:83:9c:b0:82:
                    3c:58:6b:00:ad:73:6e:6a:ea:80:b7:d1:bc:0b:6a:
                    8a:ce:be:e2:b5:59:c1:68:9d:e7:28:62:15:03:a3:
                    c7:30:60:19:74:6b:f9:f2:39:0f:dd:a3:dc:bd:a3:
                    cf:51:ce:07:f7:fb:40:14:69:71:09:ea:b2:0e:24:
                    c3:13:1a:99:d9:83:6a:6d:ca:30:fe:48:f1:f6:2e:
                    00:e6:55:60:3b:13:3a:86:f9:8a:76:d4:82:57:59:
                    3c:6c:2f:35:10:ea:d4:67:33:b1:8f:01:2f:c1:db:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E7:46:9E:D8:98:24:24:92:73:D7:79:C6:3A:23:EB:BE:77:9B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl

            X509v3 Authority Key Identifier:
                keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:ca:21:9f:09:b8:72:bf:00:41:fd:71:2b:07:c1:50:30:
         88:01:35:49:b0:c6:c6:38:c1:85:73:56:b1:3b:4d:12:ec:ec:
         d4:f0:90:0b:e0:f9:4a:a4:cd:e2:40:23:5c:e9:8d:ac:f2:1b:
         08:11:c4:be:3a:08:c6:b7:83:f1:55:cc:90:b7:f0:31:7e:e5:
         e7:fc:8d:3d:9e:cd:4e:85:14:cc:bc:10:1c:80:e1:c3:17:2f:
         99:77:e0:e0:17:06:d9:31:ca:94:ca:10:c6:b8:45:db:17:c2:
         96:91:ae:6c:be:9f:ee:e5:46:9b:64:1e:62:12:e6:3c:a4:6d:
         23:52:7f:8c:7a:18:c5:83:c0:a6:d2:65:c4:e7:61:42:d6:a7:
         48:a2:76:59:c9:3c:09:0c:3e:a5:eb:e1:81:dd:44:7d:69:a5:
         94:2e:56:9e:d3:fb:68:10:b2:2d:95:b0:4c:63:1a:c8:0a:41:
         dc:f8:c2:3f:fb:5d:e9:dc:3b:13:2c:43:12:3c:2f:2b:cd:f3:
         4f:6c:91:fa:72:80:80:bf:22:c4:74:31:33:9c:d8:c3:31:bb:
         4b:61:5b:d2:07:4c:79:68:67:b1:3a:9f:9b:7e:b0:a7:89:8b:
         e8:aa:fc:67:92:f5:b7:af:06:8d:56:44:ef:1d:11:fb:e7:f6:
         46:5c:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:47 2025 by rpki-client