Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68376e83-2fd9-33ab-8a69-d8518759ed3b.roa
File:                     68376e83-2fd9-33ab-8a69-d8518759ed3b.roa (raw, json)
Hash identifier:          gBcV0e7RYBcagpjIVCyDa8PZR0n6WY06f6N9S4vqclQ=
Subject key identifier:   44:DB:F6:E9:5B:AA:0E:E4:F9:5D:B6:CD:30:F5:07:3F:AA:4C:F8:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB349C6F93D989BF3C12BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68376e83-2fd9-33ab-8a69-d8518759ed3b.roa
Signing time:             Fri 03 May 2024 01:10:54 +0000
ROA not before:           Fri 03 May 2024 01:10:54 +0000
ROA not after:            Thu 01 Aug 2024 01:10:54 +0000
asID:                     6167
IP address blocks:        72.107.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:49:c6:f9:3d:98:9b:f3:c1:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:54 2024 GMT
            Not After : Aug  1 01:10:54 2024 GMT
        Subject: CN=a07a2d94-8be6-4924-b1bf-41af22c9f409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:1c:00:15:9e:85:e1:80:28:c5:ba:69:3d:
                    cd:72:49:9e:9c:e6:3e:4c:5d:32:77:84:2a:eb:37:
                    1f:a2:64:aa:00:a0:ec:44:16:28:74:51:27:33:3c:
                    01:9f:c4:f0:26:df:18:ff:7f:40:34:68:d5:7d:58:
                    9e:f7:a9:61:68:53:ca:33:17:db:ef:1b:5b:de:b8:
                    1f:f7:73:2a:a2:f7:82:ee:df:7e:c8:19:69:a6:b6:
                    e9:3c:af:08:3c:46:c1:0c:e4:a1:80:13:b0:3b:cb:
                    a1:99:49:da:59:5b:95:11:06:d0:ab:f6:e9:af:41:
                    68:cf:a1:11:4a:e6:27:39:13:07:ff:2d:5b:ee:0b:
                    30:f4:5e:0e:ba:de:c9:3e:54:20:3a:bb:ac:4e:3a:
                    25:00:d8:95:af:93:e3:d5:d1:ba:a5:23:57:99:79:
                    0a:99:99:68:33:cf:d1:75:b4:e7:c0:f8:b8:42:ff:
                    17:30:37:4b:3c:a3:9c:03:4e:b0:e1:25:a0:08:bd:
                    0e:62:7f:97:f6:9f:56:5e:83:b4:ee:d1:14:78:6f:
                    38:58:ff:27:4e:21:38:bf:cd:be:a6:96:d2:bf:7d:
                    b9:54:8c:8c:49:ab:e3:4e:9d:4f:40:70:52:4f:1f:
                    f5:22:81:39:51:de:9f:02:ae:6b:a1:f5:aa:90:17:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:F6:E9:5B:AA:0E:E4:F9:5D:B6:CD:30:F5:07:3F:AA:4C:F8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68376e83-2fd9-33ab-8a69-d8518759ed3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3c:c0:f1:b4:95:a9:aa:99:9a:f6:0b:4e:61:9c:e7:93:69:
         4c:d3:dc:85:af:c2:76:83:29:74:a5:04:47:a2:a0:1b:a7:34:
         40:92:fc:29:99:6d:13:c2:1f:78:cf:64:f6:7e:3a:83:a4:07:
         c6:61:91:2e:ec:38:a2:59:e0:e6:92:f6:02:60:86:d2:e4:2c:
         47:75:0a:f4:2c:5b:be:59:15:f2:04:d5:a9:cd:33:13:67:89:
         f1:1b:fd:aa:3a:ad:b6:03:cf:a5:02:e9:59:55:7b:a8:01:15:
         39:5c:b2:55:86:be:aa:69:8a:72:0b:1f:04:b1:37:4b:bd:39:
         ed:63:f4:b5:3f:7a:0d:a2:19:1f:5c:35:30:5e:f1:11:f1:7b:
         b5:45:8b:35:ab:76:1a:61:a6:c0:fb:0c:da:49:f1:1c:f8:89:
         72:e5:66:ef:a1:2c:d5:1d:f5:0d:80:23:fc:0b:88:63:82:fd:
         e9:01:d8:78:23:59:02:59:ff:6d:0f:a2:b3:1f:14:6f:bc:c8:
         94:af:4e:31:65:ef:a2:7c:d3:03:d6:6a:f7:32:bc:5c:f2:ad:
         7f:22:46:58:7d:78:0d:fd:0b:1f:f2:94:ef:b2:d3:6a:dd:96:
         5c:df:90:f6:97:78:fe:ca:e9:69:77:80:9b:e5:55:d9:a3:15:
         b1:a0:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:33:56 2024 by rpki-client on console-fra.rpki-client.org