Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa
File:                     2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa (raw, json)
Hash identifier:          ZjNfej8nc7aZXGIlNJ8BQgW4dWRB8Z+RAAVTNF7Bh/o=
Subject key identifier:   06:2A:56:09:7E:76:BA:4D:03:6C:38:ED:60:CD:D7:47:FE:94:A3:FE
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F43285845A213D0EA96335AE45CDD7800
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa
Signing time:             Mon 22 Apr 2024 19:06:57 +0000
ROA not before:           Mon 22 Apr 2024 19:06:57 +0000
ROA not after:            Sun 21 Jul 2024 19:06:57 +0000
asID:                     14618
IP address blocks:        155.72.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:13:d0:ea:96:33:5a:e4:5c:dd:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: Apr 22 19:06:57 2024 GMT
            Not After : Jul 21 19:06:57 2024 GMT
        Subject: CN=a03fe7ba-905f-4a4f-baf7-ae2660410389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:81:35:82:f8:d4:ad:61:ad:df:62:2c:14:94:
                    e1:c2:fc:74:e8:a8:b6:79:4c:23:c0:94:0a:eb:4f:
                    a7:5c:8c:be:e9:ee:c6:a1:4a:73:37:e8:3e:c6:41:
                    01:6c:ce:c6:de:ac:5c:0d:ae:22:8b:2f:03:09:89:
                    db:9d:6d:1d:2e:fb:80:6d:94:4b:bf:d4:79:18:2f:
                    74:1f:6a:b5:32:28:a3:bf:f3:bd:9e:36:a2:6e:9e:
                    66:04:12:bf:94:63:98:75:b4:03:21:70:af:ce:62:
                    d6:e7:af:97:f0:6b:10:05:9b:6c:f7:39:bb:75:8e:
                    5b:d9:0f:10:30:fb:83:b2:b9:1a:a7:4f:33:e0:e3:
                    70:ca:22:ca:73:8c:d7:fb:eb:21:0d:3a:1e:74:d2:
                    e9:45:92:99:bf:e7:a9:c2:86:d0:10:29:49:c1:59:
                    02:ea:10:c2:32:75:b0:82:e2:ea:f4:14:7d:f9:60:
                    d3:29:3e:0a:3d:16:fa:19:86:1d:fd:f1:44:e4:ce:
                    c4:23:db:38:62:cb:fc:c9:91:b1:d6:29:c9:38:e4:
                    b7:ca:55:84:80:ed:79:a9:6e:c3:e8:0b:06:49:50:
                    63:5a:ae:f6:b7:9a:46:0f:a4:dd:c8:91:bf:b1:8c:
                    26:4e:03:6f:8e:8d:5a:22:c2:1f:04:6a:08:84:1a:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:56:09:7E:76:BA:4D:03:6C:38:ED:60:CD:D7:47:FE:94:A3:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/2a72dd21-68c3-37e8-aa23-a1baebdf6e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:df:8b:dd:a4:75:89:e5:3d:eb:21:68:f3:01:81:75:d5:37:
         12:a0:85:24:48:1c:84:79:db:42:6c:03:7a:ae:63:2a:28:44:
         be:90:03:b0:38:81:6a:b8:3c:9c:47:fe:79:0f:f0:ed:44:2a:
         22:55:9e:a0:69:e3:d0:4c:2b:fc:e1:9e:3e:db:e4:04:ff:94:
         58:ce:1b:46:98:24:c3:eb:6a:90:87:49:e1:09:af:c8:e4:db:
         5e:73:bc:fd:0e:11:43:fd:e1:b9:fb:ad:46:84:7b:25:ce:cd:
         12:a1:a3:b9:d8:36:a6:14:09:6f:b1:7a:0e:b8:c1:56:54:8d:
         0e:77:c0:bf:03:05:37:03:73:b8:86:9f:20:73:4f:b3:75:68:
         f2:97:17:8e:59:96:78:b8:7c:fb:6b:48:8d:19:b0:71:d4:8d:
         e5:ee:79:e7:45:ee:8f:12:a1:08:ad:19:e0:c3:83:7c:26:4e:
         b0:c0:f4:e6:9a:7b:68:06:99:6a:c5:29:26:1f:04:48:fe:5f:
         fc:ca:4d:41:c4:bd:6a:ff:35:01:d9:aa:da:8c:30:61:43:1a:
         23:a2:bf:d1:6c:61:34:cb:a3:fb:f5:1b:db:9e:8e:8f:1e:1c:
         5b:80:f1:54:b6:71:16:89:a0:44:9f:17:1c:c3:48:22:52:eb:
         f4:bc:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:31:11 2024 by rpki-client on console-fra.rpki-client.org