Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/021e3829-5d23-3794-8971-b5e6fb58448e.roa
File:                     021e3829-5d23-3794-8971-b5e6fb58448e.roa (raw, json)
Hash identifier:          FHm4QNH5bxQnRFap+Uauk1Wbi5EpQwEIxync3RFnsdg=
Subject key identifier:   8E:E2:38:D5:08:B2:6B:AF:92:77:29:3D:9A:70:60:2F:93:98:DA:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA5EB3562AF3E168B48C40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/021e3829-5d23-3794-8971-b5e6fb58448e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:5e:b3:56:2a:f3:e1:68:b4:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=27cec0d4-6f0a-4561-aba3-05c0e0c1468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:6f:b9:e6:46:80:a7:8a:44:e9:1c:c3:25:
                    33:c5:91:63:dc:9d:36:16:3c:2a:81:db:67:12:0e:
                    a8:3f:f6:55:a3:ad:e8:e4:cf:30:e5:93:e1:f5:df:
                    78:8b:f8:06:a6:ff:a2:a7:6e:1c:24:38:c4:2c:00:
                    c9:fe:ae:3a:0f:59:d2:91:4f:95:c6:cc:c2:99:75:
                    bd:64:5d:fd:af:be:b4:9f:a6:6a:68:46:df:9f:26:
                    17:4f:7a:45:79:88:12:08:fb:9c:7b:f1:e8:28:0a:
                    05:e9:3a:6f:a5:fa:9e:ef:10:8a:31:31:41:ea:49:
                    3a:3b:ea:77:c9:74:6e:03:8c:57:fa:14:c5:ad:f9:
                    75:92:64:59:03:12:c2:4a:0b:81:64:bf:c9:03:d5:
                    25:80:f1:db:de:94:0c:43:10:4d:78:f2:dc:23:9e:
                    9e:60:4a:6c:7d:fc:04:be:da:6f:8b:55:eb:be:26:
                    6a:94:e9:d0:cc:72:2f:a3:31:11:36:23:ab:5c:4b:
                    e1:7f:32:ed:b1:92:5e:90:af:ab:12:f1:bc:d8:38:
                    6e:e7:a4:bd:cb:2c:ca:17:45:ae:96:d8:bf:c2:d2:
                    f4:fc:c6:07:1d:91:45:26:00:09:e1:50:cb:2e:5e:
                    cc:80:14:b4:74:2c:1e:30:21:0a:0c:2e:0a:fc:16:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E2:38:D5:08:B2:6B:AF:92:77:29:3D:9A:70:60:2F:93:98:DA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/021e3829-5d23-3794-8971-b5e6fb58448e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:a4:2b:f6:c7:37:cb:aa:d2:3d:10:bb:8a:a0:3f:91:d8:
         c9:73:6f:d7:0d:cd:d5:7d:a8:ef:7a:95:7d:01:6f:19:54:35:
         c5:c7:3b:4f:32:0c:38:00:82:14:63:6d:95:53:0a:6d:a2:2a:
         7d:8e:c9:c9:51:13:9a:89:46:d6:5c:ac:3c:47:eb:b8:eb:a2:
         cd:58:ed:0b:11:7f:ac:ea:53:d8:07:c5:53:62:bc:68:ea:5d:
         d6:32:ee:ee:73:21:5a:f5:15:5b:38:bd:8a:76:1b:5f:40:1a:
         4f:e8:66:06:c1:53:95:2b:50:8e:f2:d9:e2:a7:1e:96:8b:22:
         59:5a:49:2d:79:9a:a9:5e:44:78:eb:dc:f6:ee:a3:74:9a:1e:
         35:8a:b1:16:82:e6:e9:62:2b:0b:bb:53:d2:18:0a:c2:43:f1:
         38:6d:de:34:73:5e:1f:64:5d:eb:5b:0a:fd:c3:fb:40:f3:e2:
         a4:f4:b4:38:b9:66:54:bb:f5:2e:6d:a6:84:79:1b:da:4e:bc:
         8c:49:8e:35:ba:a3:8b:89:b2:cd:8c:89:33:52:d5:0e:fa:7d:
         87:2e:71:77:45:f9:8f:2a:d0:1e:5b:5a:7c:be:60:32:89:97:
         d7:48:13:1c:46:f4:4e:a3:c0:0a:ce:64:da:47:50:5d:0e:76:
         dd:29:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:59 2025 by rpki-client