Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa
File:                     fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa (raw, json)
Hash identifier:          xwCuV8QX8QWx3OeHEhC9r6srnp6y2Cq5tWhEIbxVgWA=
Subject key identifier:   66:C9:2B:47:68:92:97:72:52:DB:41:AC:6B:A0:3C:7D:9F:30:99:05
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584569886EEDDBBA70F98F072280
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     54032
IP address blocks:        72.233.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:6e:ed:db:ba:70:f9:8f:07:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=a48120fc-df85-43d4-aa74-5672f959ebdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:40:a8:34:05:ff:e4:84:08:b4:82:47:2d:
                    5d:15:99:ec:b1:9e:ed:e5:2b:9e:6b:0f:04:5d:79:
                    44:c2:b1:91:e0:0e:c3:79:b7:7b:4e:16:9f:69:42:
                    9f:5a:e6:e7:c2:3f:0e:14:fc:ae:23:91:85:fa:9a:
                    18:41:5c:ad:87:ac:fc:9f:5e:8e:c2:22:37:69:fc:
                    2c:0e:83:e6:93:06:ca:de:0c:63:22:ea:c6:81:28:
                    e2:be:2c:7d:38:f0:50:f5:f5:73:a9:27:34:ad:46:
                    00:9f:c3:6b:1b:f5:a2:f5:6d:72:78:f8:7f:71:d1:
                    54:cb:0f:bd:ac:87:6c:e0:9d:dd:b5:a6:ec:aa:54:
                    c9:cf:6b:29:43:88:cd:cd:b9:7d:9b:e8:e5:ab:49:
                    35:89:d2:be:14:88:b1:03:73:97:a8:f2:1d:4a:6e:
                    c5:81:fe:22:53:d6:e3:c6:af:b6:5f:a7:46:40:a4:
                    86:87:f3:6f:84:bd:ad:e6:00:eb:52:72:cd:80:f3:
                    02:73:cf:d1:b1:8b:c4:7a:ae:65:39:c7:ff:63:dc:
                    d3:2e:4d:dd:e1:4c:d4:1c:52:ac:89:25:6e:eb:31:
                    68:2f:9f:a8:d4:30:e3:d9:87:70:fe:56:47:90:02:
                    f8:f2:8a:a3:f4:d4:c4:88:16:05:0b:20:fb:eb:90:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C9:2B:47:68:92:97:72:52:DB:41:AC:6B:A0:3C:7D:9F:30:99:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:28:5d:d0:07:0f:fe:e7:e7:31:5f:69:86:ce:d2:30:13:
         d5:d8:35:1a:b8:d0:7f:fd:2b:68:f4:47:ee:fa:d1:42:06:e9:
         4f:d1:54:05:6f:0c:4d:c2:69:00:9f:dc:3f:9a:ad:4e:20:c8:
         a0:98:06:89:83:1d:09:ba:ee:76:da:35:bf:c4:8f:c1:59:4d:
         6e:2b:85:0e:bc:f1:09:a0:65:6d:7f:0b:5b:ff:55:a3:dd:34:
         6f:1c:1b:c6:6e:55:ea:32:a0:4f:64:2d:de:b8:9b:ed:74:85:
         22:16:c0:c2:f2:23:b6:72:0b:81:d6:38:78:8b:37:5b:eb:0d:
         38:af:2b:96:e6:49:cc:88:72:d2:fb:73:a6:40:18:90:01:26:
         35:43:1a:91:a7:1d:82:e1:2a:ed:b8:cc:b4:51:a2:61:43:9e:
         32:8f:5a:ba:27:79:c9:c8:26:ab:3a:9b:2b:97:6f:70:39:3f:
         5b:10:85:11:16:41:03:10:63:50:ff:b0:f6:c3:37:c3:38:bc:
         96:36:85:c1:d8:43:0d:45:05:ee:34:ce:48:e8:75:6a:90:bd:
         a2:b0:97:ad:e6:62:e2:71:75:d3:a4:62:54:e0:d8:7d:af:34:
         e4:97:af:07:52:96:e6:9d:26:f2:18:b2:66:d1:17:5a:08:af:
         86:02:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:11 2024 by rpki-client on console-fra.rpki-client.org