Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9e31b64-4c4c-3915-97f8-dd33acf2a454.roa
File:                     e9e31b64-4c4c-3915-97f8-dd33acf2a454.roa (raw, json)
Hash identifier:          uOjTwxa1x6jVfPYtThPhcqZQgBEOxXg/WscKPKr+/wg=
Subject key identifier:   B4:C3:9D:6B:D1:47:CF:33:BB:87:DF:0E:46:CD:73:87:64:47:E7:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAEB8D2B2751AF311336C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9e31b64-4c4c-3915-97f8-dd33acf2a454.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:eb:8d:2b:27:51:af:31:13:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0fc4318c-1df7-4c85-ac04-8b9d5557de9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:51:61:2e:e1:39:83:2f:17:a1:b4:a1:df:
                    a6:44:55:ca:6a:75:e3:22:6d:40:e1:03:7a:91:77:
                    76:a6:ed:cb:78:cd:8e:96:19:9a:ee:6d:de:cd:a3:
                    98:df:11:85:04:26:6c:f4:df:8e:e9:09:f8:ae:29:
                    70:7a:d3:f4:20:71:dd:45:8b:c2:d6:a8:d9:7d:dd:
                    08:96:09:7b:04:6b:de:86:1e:70:95:59:fa:83:44:
                    9c:17:6f:eb:78:f3:be:75:12:13:4c:82:78:13:38:
                    5c:dd:c2:01:6c:57:94:12:82:81:a8:54:53:87:59:
                    b3:80:1b:74:02:93:3f:4c:92:b7:de:c2:2b:fe:9b:
                    9d:c0:ee:ca:b9:ab:cd:0d:93:22:e6:c2:db:a2:90:
                    5a:47:f0:d9:0f:a3:e3:e2:db:5b:df:59:08:bf:c1:
                    b9:c4:58:38:52:71:c1:9d:29:80:40:a4:8c:68:5e:
                    82:88:4c:46:17:3d:6d:ee:86:75:a4:c8:b8:4c:a8:
                    cf:e6:a0:8a:25:f4:f5:1e:13:70:0d:94:59:c8:04:
                    eb:f1:ba:e3:60:4a:b2:90:55:4f:e1:03:3e:84:9b:
                    dc:09:01:07:e5:49:1a:54:15:ea:68:82:3c:e8:6d:
                    8f:00:ca:5f:5e:ae:a7:a0:4a:25:9a:f3:3c:dc:aa:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C3:9D:6B:D1:47:CF:33:BB:87:DF:0E:46:CD:73:87:64:47:E7:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9e31b64-4c4c-3915-97f8-dd33acf2a454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:1e:f0:c6:e7:8d:02:4f:17:a8:10:0b:2f:be:40:60:90:
         34:23:4c:bf:94:16:aa:37:c9:ff:39:be:1b:89:fa:92:6e:08:
         6d:f6:a1:ab:68:d2:a7:5d:aa:5d:36:08:b7:e7:11:f8:35:04:
         b2:07:88:71:1c:ac:5e:5c:c4:96:4c:aa:91:83:8d:f6:6f:d6:
         6a:41:a9:82:18:f4:4e:e4:53:c8:21:7e:a6:c2:f4:a2:32:5c:
         b3:48:d9:3e:a1:93:d6:e4:1d:95:9d:9d:10:c8:6e:48:37:a2:
         9b:c2:fe:3d:96:ca:ed:eb:d6:e7:e5:68:8b:28:f8:5b:1c:a2:
         1f:2a:6b:51:ba:29:08:a0:e1:a9:3f:30:95:5f:fa:5f:6c:64:
         7d:11:9f:d6:11:24:38:1a:51:7f:80:75:58:7d:da:16:17:ee:
         a8:0b:e4:ab:87:37:ac:af:4d:6e:ce:b3:50:2b:48:ac:09:6f:
         2d:40:9e:f3:cc:54:4d:a9:de:a2:e1:cd:9b:77:a9:c9:ac:c0:
         99:9e:1c:8d:37:74:63:e7:c1:dc:18:ed:96:f2:0f:56:91:36:
         72:9c:2d:85:2d:8a:ce:66:d6:6e:34:83:5f:a9:81:ce:5b:5e:
         73:60:cc:9c:93:48:e6:12:62:1c:8a:c2:75:27:32:c2:0d:a3:
         9a:db:15:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuuNKydRrzETNsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MGZjNDMxOGMtMWRmNy00Yzg1LWFjMDQtOGI5ZDU1NTdkZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYNRYS7hOYMvF6G0od+mRFXKanXjIm1A4QN6
kXd2pu3LeM2Olhma7m3ezaOY3xGFBCZs9N+O6Qn4rilwetP0IHHdRYvC1qjZfd0I
lgl7BGvehh5wlVn6g0ScF2/rePO+dRITTIJ4Ezhc3cIBbFeUEoKBqFRTh1mzgBt0
ApM/TJK33sIr/pudwO7KuavNDZMi5sLbopBaR/DZD6Pj4ttb31kIv8G5xFg4UnHB
nSmAQKSMaF6CiExGFz1t7oZ1pMi4TKjP5qCKJfT1HhNwDZRZyATr8brjYEqykFVP
4QM+hJvcCQEH5UkaVBXqaII86G2PAMpfXq6noEolmvM83KrUIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTDnWvRR88zu4ffDkbNc4dkR+dCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTllMzFiNjQtNGM0Yy0z
OTE1LTk3ZjgtZGQzM2FjZjJhNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADC5HvDG540CTxeoEAsvvkBgkDQjTL+UFqo3yf85vhuJ+pJuCG32oato
0qddql02CLfnEfg1BLIHiHEcrF5cxJZMqpGDjfZv1mpBqYIY9E7kU8ghfqbC9KIy
XLNI2T6hk9bkHZWdnRDIbkg3opvC/j2Wyu3r1uflaIso+Fscoh8qa1G6KQig4ak/
MJVf+l9sZH0Rn9YRJDgaUX+AdVh92hYX7qgL5KuHN6yvTW7Os1ArSKwJby1AnvPM
VE2p3qLhzZt3qcmswJmeHI03dGPnwdwY7ZbyD1aRNnKcLYUtis5m1m40g1+pgc5b
XnNgzJyTSOYSYhyKwnUnMsINo5rbFVs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:23 2025 by rpki-client