Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e7079a2-3953-3862-b556-c623e337b272.roa
File:                     2e7079a2-3953-3862-b556-c623e337b272.roa (raw, json)
Hash identifier:          z7yjcEWU/Bti0TRcp+GqbTcKLNV1Ys00gu8fRjASalE=
Subject key identifier:   1D:CE:E9:1F:AD:61:C5:33:B8:F9:45:B5:42:18:06:D2:52:AF:FE:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858497F18259731163A25570DCA60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e7079a2-3953-3862-b556-c623e337b272.roa
Signing time:             Sat 12 Apr 2025 01:30:08 +0000
ROA not before:           Sat 12 Apr 2025 01:30:08 +0000
ROA not after:            Fri 11 Jul 2025 01:30:08 +0000
asID:                     63219
IP address blocks:        72.52.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:18:25:97:31:16:3a:25:57:0d:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 12 01:30:08 2025 GMT
            Not After : Jul 11 01:30:08 2025 GMT
        Subject: CN=41ac033f-0bc0-47dc-b8c2-7ad6c714ee71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:42:a4:fb:44:1e:c9:27:71:ad:4d:d2:2b:
                    b0:a2:27:75:30:80:74:37:02:8c:15:54:fa:c1:37:
                    83:81:df:84:db:0e:5d:14:75:ba:09:3e:f4:55:25:
                    91:b0:37:10:0d:36:32:44:63:9e:2d:87:61:99:e5:
                    c8:ad:2a:99:7a:69:e8:a8:23:20:ae:2f:b5:45:2c:
                    6c:bb:7e:77:fe:16:b5:e9:e1:e3:11:42:af:8c:99:
                    a1:b4:0e:f0:57:f6:ae:f7:96:a9:35:81:cc:ee:3e:
                    8e:0e:02:6b:8f:c3:6e:22:c6:70:c1:62:23:e7:20:
                    57:03:55:2f:46:11:ea:f1:2b:ac:72:13:76:70:33:
                    c8:81:43:c4:e1:30:02:e3:5f:d4:31:81:d8:f2:da:
                    eb:4a:f2:34:38:8f:93:1c:2c:f4:99:b6:49:c7:c0:
                    65:1f:59:b3:44:f4:9c:1a:de:c4:56:de:1e:ed:c6:
                    75:31:4c:6e:0e:39:5c:c3:f2:bd:93:f0:cb:48:51:
                    45:d5:5c:27:92:28:67:31:5b:d0:34:94:c0:90:00:
                    de:f6:4f:a2:89:a8:d5:57:16:ae:f1:15:62:38:05:
                    26:04:f0:e9:bc:44:63:6d:62:f6:08:d7:82:cd:7f:
                    b9:06:49:b9:be:a1:2e:b4:af:be:e6:d9:02:11:62:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:E9:1F:AD:61:C5:33:B8:F9:45:B5:42:18:06:D2:52:AF:FE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e7079a2-3953-3862-b556-c623e337b272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:04:26:08:e3:5c:eb:6c:a1:d0:32:4a:a7:4c:c9:bf:0c:
         37:fe:fc:d4:34:41:5f:83:ea:fd:0c:26:58:ac:67:1c:aa:f9:
         bf:62:82:d5:42:16:e1:a1:df:fe:b5:8c:f3:61:dd:0d:08:fc:
         9e:4e:64:4b:7e:ea:53:f1:f5:12:cb:4a:41:11:79:17:69:b3:
         e0:47:6f:89:e6:ab:be:a8:e5:0c:c5:bc:e0:80:b7:3c:20:e8:
         14:57:b5:c1:2c:e1:94:66:f7:3c:95:d5:f9:4d:e8:36:52:9e:
         c4:f4:fa:c5:4e:d5:ed:c3:cb:76:6c:4c:a9:9d:05:97:94:b4:
         a0:0d:ac:89:2c:25:e8:bc:20:b1:c6:24:f0:97:87:87:48:a1:
         53:93:73:b4:ee:ad:4a:d4:e4:1b:e7:d8:05:1d:3c:33:55:80:
         5f:7b:f1:1d:75:27:44:7b:a7:58:5e:8b:78:c8:d5:2a:85:95:
         3e:2b:b1:a9:86:9d:00:0a:0a:a3:1d:74:3d:e5:ae:5d:ab:f9:
         76:f3:79:2a:8a:8f:54:af:a7:d9:10:eb:0a:cd:89:85:6d:0a:
         72:a6:fd:b4:19:71:7a:59:6c:81:75:6e:4a:b4:76:44:be:2f:
         91:f6:a9:9c:36:b3:e1:7e:e4:50:fa:8d:87:a5:8c:49:50:f2:
         a5:22:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:11:40 2025 by rpki-client