Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bd0df18-564f-3ded-ab14-92848e13e7a7.roa
File:                     7bd0df18-564f-3ded-ab14-92848e13e7a7.roa (raw, json)
Hash identifier:          msh7LdX1ZmYwX1oIcH3FaOU/QvwRuc9My7Q08n6QEns=
Subject key identifier:   C7:D5:A4:C4:35:02:D8:B1:2B:2B:F4:43:B9:30:42:80:B5:0C:BD:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933C317F41ECE7EDB769B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bd0df18-564f-3ded-ab14-92848e13e7a7.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     54288
IP address blocks:        72.52.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:c3:17:f4:1e:ce:7e:db:76:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=a3fc572d-c80a-40a9-97e3-692664ff3d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:75:6e:ce:e5:16:25:a5:66:65:b0:8f:2d:
                    e5:fe:f7:64:ff:5e:60:34:78:cc:ed:4e:82:37:0d:
                    04:cd:fe:ec:0c:df:41:5d:83:25:4f:5f:c8:4d:59:
                    6f:ee:4c:cf:d8:de:86:74:b7:75:52:58:f8:60:f2:
                    b5:b4:5f:ec:54:29:e6:cc:93:11:f6:9a:f9:5c:ac:
                    61:cb:dd:77:24:a8:a8:75:0e:33:81:a6:64:20:f4:
                    86:b8:85:24:94:13:0c:94:12:9e:c2:97:1e:9b:ce:
                    8b:86:82:a9:21:00:0b:50:cf:69:ee:90:c6:a2:e2:
                    c9:2c:ef:54:77:cb:f6:5d:4b:79:8f:fe:15:92:7b:
                    af:38:7d:87:12:0a:e8:4f:5f:3c:f3:e7:c7:82:7b:
                    51:ac:32:8e:fd:62:a7:e4:25:a8:97:db:96:14:84:
                    91:e9:5c:c8:b6:eb:68:30:55:63:4d:de:8e:63:dc:
                    96:e8:5b:7a:00:8b:5b:ee:ee:f9:e9:1f:52:14:7d:
                    75:64:c5:b5:b4:90:87:87:70:58:e3:f6:37:54:da:
                    65:d7:a4:f0:b3:64:11:1c:0b:c2:85:f7:eb:1d:0f:
                    1c:59:44:cd:cc:10:69:77:1d:b6:0f:42:60:42:e6:
                    f5:69:b6:94:7c:92:ab:e0:41:36:35:d5:b4:4b:41:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:A4:C4:35:02:D8:B1:2B:2B:F4:43:B9:30:42:80:B5:0C:BD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bd0df18-564f-3ded-ab14-92848e13e7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:0e:23:ed:7b:01:ee:33:28:c8:b0:07:85:fe:13:61:23:
         e4:39:0a:1c:b8:9d:3d:69:f1:fd:02:52:92:77:6f:4f:27:9d:
         41:3c:21:90:10:a4:59:89:6a:65:22:a8:23:57:24:63:a4:f7:
         1e:e0:00:09:0b:c7:f6:af:c4:2b:3e:0e:1d:86:95:0d:f1:aa:
         6d:e4:08:81:be:78:f2:f9:c0:9f:4f:03:9e:cc:b3:b6:dc:8b:
         2e:74:5c:24:e9:44:30:13:c5:92:f9:8d:ce:30:0b:ee:8d:2e:
         97:93:a9:4d:93:32:98:18:bc:be:1c:7c:c8:67:d8:c3:44:6e:
         8d:7b:69:56:d6:77:e9:a5:d1:03:e3:5a:5a:03:31:72:14:ac:
         02:1d:91:e5:d0:60:20:a4:d7:7a:0d:04:65:03:2f:80:fb:55:
         e9:fd:15:dc:ed:c3:dd:5d:7d:c4:68:97:f3:ba:75:0c:be:2b:
         c7:4d:d8:71:ff:6f:83:e8:39:9c:3a:24:61:51:91:13:d9:84:
         be:12:50:21:4f:94:74:b0:64:79:3c:77:45:59:4c:f4:30:4f:
         e2:d9:78:a2:72:ce:99:b5:4c:17:93:49:8f:12:ab:4b:c6:58:
         b8:da:0b:f6:36:2b:b7:38:ca:d9:12:18:40:ba:08:04:f2:9f:
         6f:0f:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:18 2024 by rpki-client on console-ams.rpki-client.org