Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/b1210d83-952c-34cf-9207-c5cb9a40d406.roa
File:                     b1210d83-952c-34cf-9207-c5cb9a40d406.roa (raw, json)
Hash identifier:          l/w/f4r2xl1oKu1CTa8lf5E0VSGeT7Mzkcywj+qKduw=
Subject key identifier:   58:0B:88:1D:5E:ED:A4:41:5E:C0:E8:67:EE:9A:07:0C:9E:B9:7F:D3
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584863CB096C95874864DE9E6080
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/b1210d83-952c-34cf-9207-c5cb9a40d406.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     40426
IP address blocks:        173.0.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:09:6c:95:87:48:64:de:9e:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=7447ae00-93b9-4090-aa50-ebe3f195d9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:ad:43:20:68:72:67:da:7c:2f:3b:8b:25:
                    c3:4e:b8:f8:e3:2f:71:a0:19:06:ce:2d:b3:02:5b:
                    ba:01:64:ed:39:93:b8:56:3a:d6:cd:38:fc:9d:72:
                    19:bb:a7:19:54:10:e2:66:7f:69:b1:65:fb:88:f5:
                    d0:58:22:54:4c:6c:a4:72:4a:f8:4f:57:aa:a0:c4:
                    58:10:b0:a8:1a:1a:ef:18:47:47:df:62:79:03:d3:
                    47:43:68:3f:09:65:e9:b2:37:cf:2d:47:15:f8:aa:
                    c2:ba:b9:5f:de:c6:40:87:54:fd:7c:f5:72:29:d3:
                    66:a1:db:7d:f6:60:00:bd:b2:eb:3f:be:9e:56:a8:
                    01:32:02:c4:38:21:45:45:c8:24:2b:77:f5:06:9f:
                    2c:a6:ce:86:ce:d1:29:54:8d:24:af:ba:d0:7d:bc:
                    d6:d5:91:3a:3e:ae:7f:e4:0a:d5:6f:cc:13:5b:42:
                    33:ae:17:6b:dd:4c:e3:fb:23:3e:35:5b:95:9d:4c:
                    a8:c7:7f:39:a3:ab:d7:0a:45:cd:01:b6:91:d3:c5:
                    90:15:fc:8c:2d:08:db:94:07:48:e1:f4:eb:7f:ef:
                    12:a5:d9:77:dc:c2:1b:19:29:f8:7a:d1:73:89:dd:
                    16:2f:f8:67:b1:6d:5e:7e:d4:72:2d:ef:79:63:05:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0B:88:1D:5E:ED:A4:41:5E:C0:E8:67:EE:9A:07:0C:9E:B9:7F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/b1210d83-952c-34cf-9207-c5cb9a40d406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:3f:e3:4b:30:48:e1:a7:f3:4b:89:3d:fd:c2:e5:db:a2:
         52:0f:08:f6:b5:48:4f:22:3b:02:35:bc:f9:72:06:9a:31:cc:
         8a:84:3b:0c:77:ff:91:6d:5b:06:08:ef:ad:c6:51:dd:94:d4:
         6d:84:46:a1:86:b6:54:45:8d:77:8d:8d:a2:62:15:f5:b7:6f:
         98:af:23:00:ec:e3:78:87:67:f7:52:8e:0b:da:cf:50:ba:fd:
         5d:ed:f2:77:d5:6d:5e:b1:0e:f4:fd:e7:c5:2f:1d:77:0b:06:
         d4:6c:0a:09:cf:76:63:c0:e7:60:a6:6e:b3:ba:74:3c:a4:e3:
         db:95:f3:8a:1f:2d:9d:1a:5b:fd:60:aa:23:19:d1:cc:f6:68:
         c2:05:9c:4f:85:6a:e0:22:e2:e6:1c:dd:e1:da:34:8e:57:d3:
         dd:b4:d6:a6:0f:ba:46:0c:a2:17:93:e8:c6:9a:db:60:51:ee:
         9b:02:24:5c:97:37:79:80:3c:f6:d0:cb:00:5c:ca:c7:02:62:
         7b:7f:39:d4:2b:6a:8a:26:a7:ae:7a:13:f6:f6:64:0a:57:da:
         2f:84:14:39:cb:d4:4c:76:75:f9:da:9b:e3:31:da:b3:84:54:
         0e:c5:e5:d4:1f:8c:d9:e3:80:fd:04:e8:b0:c4:dd:3d:8d:ed:
         80:11:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:45 2025 by rpki-client