Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03d7682-892e-3350-a876-c578d07ad8d7.roa
File:                     a03d7682-892e-3350-a876-c578d07ad8d7.roa (raw, json)
Hash identifier:          Ldisi4scWu+YDkVveh4v3AuWplWPg8UIJKEtcsoZixM=
Subject key identifier:   64:69:E2:39:6A:65:43:0B:91:C8:41:E6:F2:A0:FD:F5:7A:FF:FB:DB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE68A0B52FB363EEF6A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03d7682-892e-3350-a876-c578d07ad8d7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e6:8a:0b:52:fb:36:3e:ef:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bf3aa61a-5adc-435f-a254-537ee78dee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:35:bc:f4:13:f2:71:92:4d:fe:f1:d7:be:
                    ce:e5:aa:ff:04:63:52:50:ba:af:74:6d:13:77:a5:
                    75:c2:45:19:c4:32:2e:bf:0d:9c:38:05:ae:74:86:
                    51:be:bf:54:a6:ab:72:e5:82:81:fd:92:81:6c:bd:
                    68:4c:95:31:9c:7f:be:0a:ba:38:35:5d:f1:93:b7:
                    3f:5a:0d:76:db:ce:af:c0:14:dd:07:cd:2c:da:21:
                    c4:51:ba:9d:f8:c7:a1:c0:ac:84:79:02:89:88:fa:
                    d0:42:14:70:22:00:0f:40:49:4e:5e:3f:78:44:5e:
                    de:24:71:8b:8b:76:31:0e:11:26:19:d8:52:77:c5:
                    cd:d9:dd:3a:21:27:c0:67:96:5b:36:f0:7e:42:1b:
                    d0:d4:ab:86:2a:33:e8:73:14:49:d4:d3:91:ef:0d:
                    c2:bd:39:5b:58:76:9a:c8:6c:12:79:77:43:6b:06:
                    5b:d7:65:b6:cd:1f:b1:a9:68:51:26:d0:79:93:66:
                    ee:a0:79:66:98:31:e0:3a:7f:85:4a:5c:40:04:17:
                    3e:32:13:e8:31:ff:6c:61:bd:29:9e:5f:f4:f5:6f:
                    33:df:95:2e:56:51:f4:db:6e:a9:c2:b4:3c:bc:60:
                    93:9e:07:68:4c:8b:df:1e:12:53:20:7c:fe:1d:e0:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:E2:39:6A:65:43:0B:91:C8:41:E6:F2:A0:FD:F5:7A:FF:FB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03d7682-892e-3350-a876-c578d07ad8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:8a:08:66:98:8b:ac:75:f2:97:22:16:72:76:27:09:fa:
         f2:a5:12:f3:9f:2e:bc:91:fa:1f:aa:6c:c3:35:d9:7f:3b:e2:
         fd:49:3b:a5:5d:90:9d:04:99:1d:01:29:92:02:c4:1b:4c:a9:
         69:2c:36:8a:b4:9f:52:5f:08:73:82:db:4f:25:7f:2d:4e:83:
         24:10:33:70:15:0d:57:da:44:f1:d6:f9:81:4c:e4:77:03:c8:
         c5:ec:44:95:a5:3c:0d:45:15:62:c7:bd:50:99:f7:2c:f8:f9:
         5d:ea:7d:bc:85:56:0b:c2:22:a6:63:d6:36:6d:67:24:2c:36:
         93:ab:e3:70:7d:2c:0a:3e:4d:5a:71:5f:87:23:fd:5e:43:1c:
         68:7d:03:ba:6a:9b:00:d7:00:12:07:70:cf:d0:43:37:e2:9d:
         ee:65:01:f2:13:ea:dc:3c:8d:d6:83:9e:cc:04:e7:0e:b4:fe:
         9b:ad:94:87:f2:3f:0a:89:16:a3:e0:70:d2:8c:46:3d:01:72:
         2f:ce:6e:f8:92:62:28:1f:29:89:08:19:2d:28:12:3d:e3:7a:
         09:1e:8a:aa:8d:ef:87:07:76:71:66:a1:a3:45:d3:51:40:bd:
         d1:3b:e9:04:2e:0c:a0:30:ae:2b:ee:b4:79:74:02:57:81:b2:
         95:13:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:26:56 2025 by rpki-client