Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51869d59-7bb4-39f6-a652-d3afd9f87643.roa
File:                     51869d59-7bb4-39f6-a652-d3afd9f87643.roa (raw, json)
Hash identifier:          L3vlUvxwPX6xmsub+tlylFxmIdQ1D8qogqkmjhscg8M=
Subject key identifier:   60:29:1B:EC:CA:4B:E4:5A:AC:FC:7F:3B:EB:44:0A:69:24:5A:68:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA5F334AE6AD1D6A598600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51869d59-7bb4-39f6-a652-d3afd9f87643.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:5f:33:4a:e6:ad:1d:6a:59:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=009c09b9-5f67-44b6-ba87-b97cb5a21d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:16:47:e3:1f:72:70:cf:96:30:f4:83:b7:8f:
                    87:0e:b1:3e:45:d4:50:dd:07:6f:3b:86:50:ae:0f:
                    e3:6f:ae:ff:4d:c5:aa:50:e7:ff:e4:a6:7f:f5:55:
                    c4:3f:b8:ca:9e:2c:d5:39:52:be:d6:f2:ca:af:3b:
                    33:72:c9:b4:36:1f:2c:16:f5:97:0c:1a:90:e6:02:
                    92:46:0e:e6:c7:6e:77:20:b3:71:a5:25:c2:98:41:
                    d8:93:52:73:72:62:5a:55:df:7f:d4:6a:ee:3d:75:
                    07:03:7c:49:54:4a:59:1a:4e:89:cb:91:eb:b3:88:
                    6d:1d:2d:77:b5:b8:7a:e7:6b:02:a1:04:a2:23:3c:
                    77:ee:2d:36:8a:53:fd:b3:f2:a8:84:0c:a2:c9:5e:
                    f8:b9:81:47:aa:5e:0d:4f:a8:5c:4c:47:d0:af:8d:
                    77:44:3f:13:fb:35:98:82:b8:7c:df:e2:c2:d0:74:
                    1d:f9:c4:d7:47:ab:4c:78:66:4a:f9:db:0c:66:70:
                    5c:36:98:1a:7b:4e:7d:4c:8b:0e:8a:f9:7b:90:1b:
                    63:85:f0:8e:f3:37:68:bf:a2:40:8e:5b:91:f6:bf:
                    62:cb:44:80:1c:fe:28:3c:d0:65:0d:60:c5:1e:34:
                    d8:59:ea:b8:ba:bb:b7:33:c5:a1:e3:b6:88:49:28:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:29:1B:EC:CA:4B:E4:5A:AC:FC:7F:3B:EB:44:0A:69:24:5A:68:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51869d59-7bb4-39f6-a652-d3afd9f87643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:ac:2a:20:f6:c3:cc:a3:47:7c:2e:33:20:c5:45:f2:ea:
         c6:2f:37:d2:00:de:61:46:80:62:84:fe:c6:9e:42:89:73:79:
         1f:9c:2b:f3:4d:4c:f9:b9:47:22:54:2f:4b:32:09:8a:01:14:
         6c:24:2e:08:01:e2:92:d1:b7:c0:14:7e:50:f5:e3:09:61:37:
         27:49:48:ca:b0:26:00:40:25:2d:b0:f8:d2:06:23:4d:4d:91:
         2b:cf:3f:0f:3d:58:b5:00:10:b1:0b:0e:cc:3b:41:70:95:ee:
         fc:a9:44:47:ef:12:24:dd:a4:0a:f6:42:22:58:ab:5f:47:42:
         4c:80:f2:b9:ff:58:bc:6b:59:f2:19:32:4c:d8:ae:11:ff:de:
         89:0c:28:a9:86:08:ad:ee:fb:e3:ee:42:9a:33:bf:51:51:9a:
         79:83:d5:db:43:24:ff:0f:2e:97:e7:76:27:77:be:07:80:78:
         f8:79:9a:2f:db:1a:1b:3c:8e:f6:fd:02:fb:d6:16:ef:f7:7a:
         29:7f:59:38:2b:b4:b5:fe:b9:3b:43:35:75:91:b6:4e:4a:dc:
         d4:2b:f4:bd:b7:80:25:a4:0a:33:bd:f8:9b:2c:ec:95:e6:af:
         f9:51:13:ea:87:51:13:48:1b:3e:4e:37:c6:66:33:6a:82:99:
         d0:f6:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:11 2025 by rpki-client