Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/251af424-13ba-33e8-8821-f18af9d78dbe.roa
File:                     251af424-13ba-33e8-8821-f18af9d78dbe.roa (raw, json)
Hash identifier:          qpmbJA21EIj1cXZJORB80ApmPJytXs4awf2g9bj/t18=
Subject key identifier:   83:6B:D1:B2:A7:F0:CA:EB:A1:BA:95:40:AB:BC:E2:E3:96:4B:3E:E7
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F43285845CEE34AA93AF15B9345A8AB80
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/251af424-13ba-33e8-8821-f18af9d78dbe.roa
Signing time:             Wed 08 May 2024 20:20:34 +0000
ROA not before:           Wed 08 May 2024 20:20:34 +0000
ROA not after:            Tue 06 Aug 2024 20:20:34 +0000
asID:                     16509
IP address blocks:        72.22.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:e3:4a:a9:3a:f1:5b:93:45:a8:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: May  8 20:20:34 2024 GMT
            Not After : Aug  6 20:20:34 2024 GMT
        Subject: CN=26c3fc73-c1f3-4cfa-bd67-0dfc509a9f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:73:c3:80:c7:86:0a:b8:17:f9:67:f1:89:
                    d2:27:26:30:32:86:9c:39:5f:85:07:00:c3:35:9a:
                    5a:ea:8f:2f:4e:fa:bc:79:58:6e:61:08:da:a0:6c:
                    fe:55:92:f7:50:e5:3e:6e:63:f0:1f:c3:33:9f:a1:
                    87:cf:5e:89:e1:20:12:a3:59:05:16:45:90:98:5f:
                    d4:fe:55:d8:0a:62:c2:27:d1:94:b4:e7:7a:15:15:
                    4f:a9:1d:62:29:03:89:40:b0:16:41:aa:07:ff:ed:
                    9e:2c:1b:86:0c:0e:9c:20:bc:b3:c4:e3:d7:08:31:
                    70:23:f7:78:58:7f:a6:c6:87:41:6f:53:78:cb:6e:
                    f4:0e:e4:0c:01:e3:76:5d:d0:e5:75:77:31:1f:60:
                    f3:21:ce:72:2d:cf:2b:9d:fd:80:99:05:3d:52:2b:
                    9d:39:2e:1d:47:75:1b:56:77:29:9c:e9:6b:37:a2:
                    24:f3:a4:24:a9:09:5e:3a:9c:7f:e0:32:6b:df:8b:
                    dd:86:b9:b3:d0:bb:0e:c0:9c:e7:0b:80:ad:8c:31:
                    74:ba:1e:db:f1:34:b3:76:2f:b1:33:fd:b3:81:6b:
                    27:e8:8e:3c:d5:87:24:0a:a0:73:0f:9e:db:0f:ea:
                    f8:3d:95:aa:3e:81:7c:c9:76:ea:b9:a0:7e:dc:11:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6B:D1:B2:A7:F0:CA:EB:A1:BA:95:40:AB:BC:E2:E3:96:4B:3E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/251af424-13ba-33e8-8821-f18af9d78dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:1a:0f:c8:6f:a5:df:21:da:56:b8:3d:19:ba:24:26:fd:
         c7:81:d1:48:b4:bd:53:90:9e:db:64:8e:f8:87:78:39:f2:78:
         42:30:86:69:f7:b6:33:3e:43:a3:f2:f9:94:06:1c:48:5c:32:
         0f:bf:5d:15:97:45:ce:1d:bb:ff:4c:8e:6f:fa:af:cc:93:70:
         5e:79:58:8d:bf:15:20:42:92:ce:f1:d8:7b:e8:75:b1:fc:ef:
         89:96:f7:b6:62:3e:82:61:65:53:7a:6d:1c:0d:c0:18:ba:86:
         21:e2:0f:3f:d5:b7:69:94:f5:92:d6:4f:f2:74:e0:e2:16:a6:
         4a:f9:4e:eb:89:09:23:5f:e5:f5:9a:3d:d5:3b:57:26:76:19:
         44:22:6c:70:9d:5c:17:0b:c9:09:84:30:01:5f:3c:79:cc:f6:
         56:b8:9e:06:9f:a4:6d:fb:5a:4d:d2:95:5a:46:40:d6:61:6b:
         8a:d6:57:84:2d:92:37:ca:b5:99:3b:2a:44:e1:19:28:34:ac:
         7a:11:7b:ba:26:d4:dd:cc:5a:67:fa:f7:90:7e:3b:7a:09:79:
         f2:4b:aa:8f:3b:0a:b4:f7:d7:69:71:0f:6d:4f:7b:7d:b4:99:
         8a:cb:42:93:a3:e7:9c:ff:07:86:10:9d:03:37:1f:29:43:4d:
         cf:74:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 01:45:33 2024 by rpki-client on console-fra.rpki-client.org