Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa
File:                     fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa (raw, json)
Hash identifier:          uKBswRQJspVoVJqkeAleQf23rC7TOQJiXNqNV8gZlbM=
Subject key identifier:   0C:77:3A:57:D7:AC:DF:5A:A8:92:5A:DE:4D:E9:41:E0:DE:40:2B:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAE9B8CE881AF51E15B980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        72.173.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:e9:b8:ce:88:1a:f5:1e:15:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ca6d686c-a55e-463c-a894-2079dddded56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:d3:92:9a:63:07:dc:79:1c:59:a8:10:fa:
                    1d:26:1a:b0:bb:4f:5d:fe:95:4c:ff:94:f5:0e:d5:
                    c1:c0:6a:e0:6c:ea:a2:a1:3c:c3:87:1d:ef:74:33:
                    6b:b9:84:97:52:e8:3f:6e:ed:d3:0a:a7:7b:e7:11:
                    99:26:4a:8e:8c:a1:ad:5e:c4:08:5f:25:29:f0:84:
                    28:e3:b9:96:c7:53:12:90:4c:1d:bd:6d:9a:78:07:
                    ac:88:af:e7:e0:a2:b2:d3:56:e4:e3:6a:b9:39:7f:
                    27:5e:22:b4:5a:e4:aa:23:3e:bc:2c:91:b1:cd:b5:
                    7a:1c:43:36:63:2c:bb:83:76:f6:c8:8d:c6:6a:69:
                    e0:7b:54:5d:f5:99:57:93:49:6a:a0:63:7a:8f:84:
                    fa:18:8f:12:6c:c0:e2:19:f7:1e:6b:19:d9:17:8a:
                    2a:33:e2:fd:79:f4:3f:bf:c6:fe:5b:be:7e:16:2f:
                    c1:b3:0a:e0:b0:3f:50:93:f3:69:16:1f:9f:f9:4e:
                    7b:f5:b8:32:84:14:85:21:6b:15:2c:1d:bf:f0:fc:
                    fb:60:4a:7f:75:fd:9f:56:f8:88:6c:fa:7b:e3:35:
                    02:e5:34:dc:ae:40:81:2c:e8:a5:bc:2d:64:dc:85:
                    2e:76:7b:be:d9:17:73:95:69:b2:c3:64:47:c8:3b:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:77:3A:57:D7:AC:DF:5A:A8:92:5A:DE:4D:E9:41:E0:DE:40:2B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb51fa85-71e5-3173-a21a-b7f96e72eefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:6f:74:f8:3b:c3:db:cc:4f:dc:fa:a3:c0:90:13:07:54:
         d6:3e:20:6f:51:16:da:88:6b:51:54:8c:91:9d:3f:23:21:fb:
         41:d2:7a:69:11:66:3e:e2:65:a2:74:db:fa:7a:92:b0:14:3c:
         bb:12:de:f8:75:52:1b:87:9f:94:85:ea:9b:11:6d:54:e0:fd:
         50:10:06:2d:85:30:dd:80:0a:54:c3:0b:4d:d9:a6:c8:34:f6:
         b1:0d:6a:94:48:cc:46:74:e5:cf:e2:02:f8:a1:49:8f:39:37:
         55:66:57:f0:0f:45:53:55:27:2b:64:91:f1:84:d4:e5:3e:e3:
         4c:a1:bb:92:af:c9:f2:9d:24:38:62:29:9b:29:0d:6c:4f:64:
         5d:58:e0:67:b8:06:b5:b7:0c:50:06:12:0e:78:e0:a7:71:62:
         38:35:44:4c:86:39:09:4d:11:75:c7:b6:b5:c7:11:cc:59:5b:
         97:0b:0e:2e:83:29:9f:00:f3:28:f4:aa:ae:c5:39:38:26:2b:
         c8:43:4b:ae:6a:ed:9c:ba:ad:c9:3c:9f:7a:6e:27:21:52:69:
         4a:73:73:61:64:a6:a7:ac:09:dd:25:f0:a3:c9:7c:dc:ee:b7:
         1b:d4:67:b0:6d:a8:58:89:f0:66:5a:c6:40:25:22:64:2e:93:
         9c:9c:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:51:20 2025 by rpki-client