Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ce7d9151-48ea-3700-86d4-4107fa295ed9.roa
File:                     ce7d9151-48ea-3700-86d4-4107fa295ed9.roa (raw, json)
Hash identifier:          22RhCdM8sRBKOP7zkWrXspFVm4CdOeDyJhcuFLYAg4g=
Subject key identifier:   97:77:93:F7:98:3C:FD:3C:78:F7:D9:63:05:B1:96:B2:64:D9:1F:AE
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F432858450471143D9CAAFFC0A0132C00
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ce7d9151-48ea-3700-86d4-4107fa295ed9.roa
Signing time:             Mon 26 Feb 2024 07:57:09 +0000
ROA not before:           Mon 26 Feb 2024 07:57:09 +0000
ROA not after:            Sun 26 May 2024 06:57:09 +0000
asID:                     23470
IP address blocks:        172.82.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:04:71:14:3d:9c:aa:ff:c0:a0:13:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Feb 26 07:57:09 2024 GMT
            Not After : May 26 06:57:09 2024 GMT
        Subject: CN=f73e969f-e924-41e2-8ddc-49d26ceed8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:54:60:71:89:9e:82:d2:ed:86:a6:f0:a6:
                    45:cc:77:1b:2c:17:fc:38:dd:d6:44:7e:9d:76:58:
                    50:4c:77:66:df:0b:77:d1:7f:ae:ce:4d:4a:c4:1c:
                    74:3c:22:49:5b:3a:2e:e9:03:88:22:28:a3:58:56:
                    65:46:f2:74:a8:cf:d3:f5:d0:55:e2:2a:73:7a:8d:
                    d4:28:78:55:ae:80:0a:1d:87:45:03:83:5f:23:96:
                    bb:57:e2:29:bb:19:a5:1e:e2:05:1e:3a:b9:e5:1a:
                    f3:67:b5:f8:2e:8c:aa:ae:55:a3:6d:83:6a:79:52:
                    0a:ca:5d:59:97:90:b5:26:f7:a9:11:3a:2b:ed:d7:
                    ac:bb:22:44:dd:52:42:08:7c:9b:8d:67:6f:b0:b4:
                    39:6a:71:c3:10:c4:cf:d7:0d:6b:e8:c0:98:24:9e:
                    b5:b6:d2:04:32:2c:a4:af:7d:b6:54:56:04:b8:60:
                    6b:79:e3:ee:1d:08:d3:42:a3:09:7b:bf:89:68:11:
                    92:b4:a7:20:78:de:1f:ee:db:1a:4a:51:3b:dc:2b:
                    e6:52:65:65:18:a6:cc:41:33:5d:2d:73:9c:f9:9d:
                    a8:3f:d5:ae:72:9e:d4:01:94:e5:cd:09:86:f2:2f:
                    1b:98:70:76:70:50:85:82:ce:59:a8:48:97:63:e0:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:93:F7:98:3C:FD:3C:78:F7:D9:63:05:B1:96:B2:64:D9:1F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ce7d9151-48ea-3700-86d4-4107fa295ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:50:2a:51:e8:d9:10:95:18:81:42:9a:f1:0e:15:d8:77:f7:
         6c:a9:69:c5:a1:e0:85:b9:97:c3:e4:9d:ca:78:23:6f:d5:61:
         09:23:65:d2:36:17:1a:e9:aa:18:93:1c:23:fe:05:0c:59:bd:
         44:05:95:a8:50:8d:63:d4:21:b9:20:bd:9e:87:6d:0d:e4:73:
         3f:6c:8e:d0:b4:fe:08:29:fb:f1:4a:eb:f8:63:d1:5a:49:d4:
         b7:9b:ac:38:da:37:ee:03:cb:df:96:19:a1:e5:cb:7a:67:6b:
         1b:62:99:62:59:66:d0:cb:59:a6:a1:96:fa:0c:05:28:73:45:
         88:8a:8d:b9:6b:9e:82:f8:76:66:b9:93:a6:ec:dc:c6:7b:a0:
         85:ff:ac:90:3c:b5:94:cb:21:a0:fe:14:7f:d5:4f:fa:a4:31:
         a8:6c:45:16:24:f6:4a:5c:ce:d6:4e:0d:34:89:96:91:ee:63:
         9c:c9:1b:05:5b:10:d9:e2:39:89:60:a7:f0:5f:cb:ff:30:1e:
         8d:4f:aa:43:b7:d9:2b:b3:54:89:e1:38:6c:fd:a7:78:7e:90:
         72:7c:f0:6d:77:ae:b8:b4:bd:86:48:2b:9c:36:70:22:7d:1b:
         e0:d9:ac:46:ca:57:4b:16:5a:06:ea:1c:fe:b1:1d:7f:d2:12:
         e5:c5:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:47 2024 by rpki-client on console-fra.rpki-client.org