Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa
File:                     9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa (raw, json)
Hash identifier:          UDa++GGvmnftdWTK4VuVmnF16hLtdJeGDZnj/cN7xLs=
Subject key identifier:   23:49:D0:D9:9D:EC:6E:12:CA:9B:5A:15:BF:C7:37:1C:E9:82:43:F1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453317E64EB740CE0C5576A800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     14663
IP address blocks:        72.25.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:e6:4e:b7:40:ce:0c:55:76:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=7ea1719c-8988-48c5-80e3-e0e07f004b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:fc:b0:dc:f0:b1:2b:1a:6e:b9:31:bd:4c:
                    1c:da:64:3b:81:64:0e:ce:0a:3f:f2:1b:0f:f3:78:
                    6c:af:4f:d1:6c:de:c9:00:f4:98:09:aa:a2:49:5b:
                    11:09:d7:f9:e9:01:f5:4c:20:48:b0:e7:46:89:e3:
                    f5:63:71:a2:3a:70:4e:d7:3c:02:f8:4d:01:b0:e7:
                    fe:06:99:28:1a:7e:25:6f:d7:92:a3:88:4c:7d:e1:
                    20:98:0a:80:df:1c:17:70:13:d8:1a:66:34:ad:2e:
                    93:a3:95:0d:f3:46:a9:62:bb:31:f1:97:17:7d:e5:
                    07:9c:2f:dd:79:8e:58:5b:4d:67:a6:ba:07:e6:ef:
                    76:bb:19:67:f7:17:ed:b7:ec:63:3f:f6:37:6f:58:
                    6d:a3:14:36:46:c4:fd:32:7c:ac:4b:af:66:50:da:
                    13:db:3b:98:50:5c:14:ba:8e:af:1f:f3:11:26:9d:
                    95:f9:2f:69:84:f3:19:bb:dd:0a:b8:05:e8:02:9a:
                    f0:7a:d3:6a:52:b4:a7:a5:a3:2b:4d:0f:3b:58:fa:
                    ea:7f:59:a8:9a:7b:08:e5:fc:c3:75:57:63:aa:2b:
                    8b:98:f4:a1:d2:5c:47:72:8b:44:10:11:66:69:f0:
                    08:33:36:5d:f9:40:1a:3a:75:b5:d9:0c:a0:25:2b:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:49:D0:D9:9D:EC:6E:12:CA:9B:5A:15:BF:C7:37:1C:E9:82:43:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5a:89:bc:01:ff:ce:9d:eb:5f:cb:2d:9d:a8:c6:cf:9f:c3:
         e0:37:00:41:56:b5:64:06:f2:eb:96:df:07:18:83:54:04:a6:
         cc:32:f0:de:68:a0:e1:f6:d3:80:c2:db:f0:50:8d:6e:13:92:
         ce:d9:92:02:b7:e5:07:61:f4:f1:5c:2b:ab:13:c7:c0:31:d0:
         97:9c:6e:c0:1b:d1:f9:a8:ab:02:96:85:0c:cd:94:3f:e9:67:
         06:23:e6:76:56:0e:8f:f3:f1:a1:f8:7b:2c:d4:12:30:34:21:
         cd:87:89:a9:b0:80:5e:ab:3e:4f:dc:13:e8:33:4a:2a:f0:2a:
         12:f4:b9:b7:24:74:eb:5b:ae:27:38:c1:52:f3:23:3e:20:7e:
         80:7c:55:f2:1f:9b:3a:f3:d3:16:5b:57:73:0b:de:e5:57:a5:
         46:54:c6:b8:d5:cb:3d:2a:2a:9e:4f:45:9e:99:4b:9b:f9:be:
         48:c1:e4:26:85:e4:7b:35:47:94:b6:e4:dc:2f:aa:18:a5:f0:
         89:be:db:bd:5b:9a:c9:2c:df:d7:56:43:cd:bc:ec:9f:1c:8e:
         7c:f8:77:fb:2c:60:74:41:a0:f3:34:25:34:10:db:58:1c:63:
         78:51:d2:db:26:2f:e3:d0:0e:e9:0c:1c:d8:3e:9a:de:72:59:
         a9:41:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:21 2024 by rpki-client on console-ams.rpki-client.org