Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
File:                     265785d5-88d3-3b7c-808d-f7032445583c.roa (raw, json)
Hash identifier:          s1uci8ep1YRarQzRLJXWfMAIIrod5JoRSDlcgbSn2ko=
Subject key identifier:   0B:C9:0A:48:0A:65:C8:3A:2F:43:42:E3:9B:0E:DC:01:A1:6E:71:3A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA619A0A3C79F49E4BD400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:61:9a:0a:3c:79:f4:9e:4b:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7da99de7-4bbd-4b1a-82cb-e538fa6d86ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:dd:82:e7:80:5e:1e:4f:29:c9:07:27:b4:
                    77:b3:2d:09:35:c7:29:b7:d7:db:41:d4:75:10:8d:
                    84:02:1f:d9:0e:5e:ec:13:7b:4a:89:49:84:a8:34:
                    14:6f:0e:f3:be:d5:3d:56:03:21:43:c7:83:fa:b6:
                    c4:ab:64:6f:c7:dd:e5:87:6d:42:c5:80:59:71:10:
                    04:ec:20:b0:f7:64:eb:e4:bd:58:1c:b2:db:4b:9a:
                    5a:7c:bd:63:4c:0f:7d:74:c5:25:39:1e:93:69:e3:
                    4d:a0:9f:d7:47:a2:88:9d:b8:07:11:ce:b2:a6:fd:
                    89:7d:11:c6:d0:d2:dd:d8:de:78:c7:71:95:4e:8f:
                    c2:26:6f:8b:70:f4:0d:64:ec:70:f6:cb:d7:5f:6c:
                    6c:12:42:14:3e:95:8a:4b:ff:90:48:aa:d6:04:9b:
                    b4:16:20:cf:7e:26:07:9e:65:44:b2:41:53:f9:20:
                    3f:51:c9:80:ec:00:b8:1f:f1:28:ce:bd:e3:dd:49:
                    54:b9:39:4c:05:b9:91:c7:f8:6a:21:7f:ad:97:92:
                    67:3d:24:bc:aa:6d:56:59:70:23:7a:45:b7:6d:23:
                    d9:44:f6:a6:e3:ee:97:73:3d:23:c9:5c:27:06:d3:
                    fc:c3:6c:d8:bf:92:02:6f:52:4b:37:0c:17:47:14:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C9:0A:48:0A:65:C8:3A:2F:43:42:E3:9B:0E:DC:01:A1:6E:71:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/265785d5-88d3-3b7c-808d-f7032445583c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:73:30:f8:2b:2a:ab:74:06:8f:0f:6c:2b:ca:8d:1c:a6:
         57:9d:10:55:f0:7d:48:05:d6:1a:43:ab:7f:04:94:6e:26:75:
         f2:c9:4a:a3:89:e8:4a:93:87:c3:18:2c:7f:a6:0a:af:20:73:
         83:2f:ac:44:45:86:0c:5d:b9:f5:eb:51:09:b9:a4:93:48:ea:
         99:f5:88:39:52:b9:5f:57:36:84:2e:30:51:bc:83:fb:66:0e:
         5e:66:97:c1:a8:dd:6d:c1:4a:b9:2f:38:f1:28:5d:72:ac:65:
         52:e6:f2:9e:a7:f4:82:28:22:09:91:24:ed:0d:48:ab:08:81:
         01:9e:1c:55:4b:b6:a4:89:c4:2d:f1:a2:bc:5e:ec:d0:bc:75:
         67:46:42:a0:c7:78:80:51:32:d7:78:7a:06:3d:ac:e6:4d:83:
         23:b8:54:0f:31:7a:2f:4b:c2:e7:58:38:b1:97:31:7e:d5:49:
         13:59:1f:92:bc:eb:da:50:c1:d2:ab:66:14:70:11:ad:d4:35:
         cc:93:87:b0:43:ed:23:ac:a7:f4:15:6a:46:ad:f3:82:31:ff:
         b8:d6:95:03:f8:d6:d9:24:76:6a:5f:99:88:1c:a7:27:17:2e:
         fb:ff:69:ff:e2:a2:76:89:b4:2f:2a:71:64:95:b7:69:5c:36:
         8c:36:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:53:51 2025 by rpki-client