Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
File:                     ac356b71-f897-35d7-9961-f79dac30925d.roa (raw, json)
Hash identifier:          +d9ZaRyVQAo+Ojk+nvDXb4t6ZZSL34S0HY9T9WUsjak=
Subject key identifier:   45:3A:31:5A:3F:AE:C6:98:81:55:8D:A4:CB:F6:54:74:4C:FF:A2:2C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE916306630879D7BE1C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e9:16:30:66:30:87:9d:7b:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=72ce2c61-5d22-4a25-b954-aa05532659c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:3a:a2:23:40:0e:f9:7a:de:79:f7:38:5c:
                    98:c8:14:22:a4:4a:37:15:4f:c5:1f:fc:10:6c:83:
                    51:a3:3b:9f:b8:3f:b1:6e:88:09:91:1f:30:3b:6e:
                    e3:59:15:b9:27:54:6e:57:fa:a3:0c:70:6c:16:8b:
                    d1:26:4d:9e:30:fb:1e:7d:1f:91:e9:38:59:72:62:
                    f3:2e:20:fd:5b:9b:79:26:77:60:49:63:5a:b3:f8:
                    0d:91:d1:3a:66:c7:f0:a9:cd:b3:9e:0f:1d:33:66:
                    cf:c1:72:76:04:23:ad:a5:2a:07:3a:39:df:5b:14:
                    6a:43:77:a2:72:cb:af:ba:31:ef:16:26:90:f3:96:
                    d8:e9:87:2b:d7:15:f9:c7:a4:b8:13:5d:ce:9f:3e:
                    5b:73:ac:09:b2:42:f0:b7:79:43:5c:1f:38:0e:4a:
                    88:70:bd:ff:9c:6f:e9:3c:e3:60:c9:a6:19:a8:34:
                    81:74:0e:35:b4:ce:e7:15:b2:4d:99:9e:b6:35:21:
                    1c:ea:a8:e3:57:69:e9:a8:d5:2c:bd:24:45:a6:58:
                    3c:be:19:1f:84:d7:42:e5:59:20:f6:aa:36:3d:04:
                    95:1b:7d:9c:16:bf:be:7d:d5:8c:9d:7f:7a:a7:a4:
                    fd:92:bd:a0:02:96:6a:ad:12:40:cc:31:c9:a8:b6:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3A:31:5A:3F:AE:C6:98:81:55:8D:A4:CB:F6:54:74:4C:FF:A2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:df:32:c8:4b:8b:ca:1c:03:0d:21:d6:5b:39:0e:09:20:d3:
         8b:2b:85:93:ae:43:e8:0e:a2:de:d5:b3:9f:83:43:18:b9:83:
         4b:dc:3a:c0:ec:5a:60:ec:62:7b:0a:f8:7b:87:de:18:d4:a2:
         f0:e4:cd:e7:4e:86:a8:12:b6:40:81:15:56:d5:b1:32:9b:19:
         0f:7f:0f:4a:80:6e:1c:c7:36:84:be:d8:18:07:91:c2:0a:c7:
         2f:ea:61:49:30:2c:16:56:62:83:d9:b2:22:67:45:fd:00:b9:
         4f:34:73:e9:47:37:5d:4b:22:cc:93:b2:df:20:72:de:0c:01:
         4b:e3:97:eb:48:e7:e6:32:22:d7:fc:75:7a:ae:99:92:ce:fa:
         6a:91:2f:86:a8:01:99:cd:1a:2c:65:70:f7:2c:94:cb:5c:c3:
         7d:a5:d4:d1:77:2e:d4:77:41:0e:5c:04:e8:94:c3:14:1d:c9:
         1f:c2:ec:f6:8a:e8:4c:c8:da:06:0a:b4:93:b8:c9:6a:2c:b5:
         18:0f:79:b9:1c:f6:52:4e:2b:eb:76:f2:04:ca:9e:37:12:7d:
         ea:f0:a1:fc:3e:c2:fc:f0:ab:2f:2f:8c:22:87:b3:15:f4:ab:
         75:c8:dd:14:47:81:4f:78:68:f5:31:d2:0f:bb:5d:4c:e3:34:
         cf:d7:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:59:53 2025 by rpki-client