Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/be006960-88e9-3224-9d69-90726468960b.roa
File:                     be006960-88e9-3224-9d69-90726468960b.roa (raw, json)
Hash identifier:          uy2oMOtfGN3LnTvWHu8aKam/KaMeoipWCDrzaJc2CLo=
Subject key identifier:   8B:D3:30:5C:80:F1:E2:1A:2B:A3:0A:98:2E:52:FB:17:6A:1D:3C:90
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285844FB04DEF62F03149CF2DA4840
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/be006960-88e9-3224-9d69-90726468960b.roa
Signing time:             Thu 22 Feb 2024 22:56:51 +0000
ROA not before:           Thu 22 Feb 2024 22:56:51 +0000
ROA not after:            Wed 22 May 2024 21:56:51 +0000
asID:                     14618
IP address blocks:        23.172.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:04:de:f6:2f:03:14:9c:f2:da:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Feb 22 22:56:51 2024 GMT
            Not After : May 22 21:56:51 2024 GMT
        Subject: CN=34b2f3df-59c7-44ef-82cb-3308dde74b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:13:41:7e:4d:11:46:32:e7:e6:7f:87:bf:
                    68:4c:2f:f4:d5:79:b9:a3:fe:93:b9:8b:26:33:a7:
                    06:3d:6d:a4:74:da:ef:96:f5:ae:a0:d0:40:a3:be:
                    60:bc:f4:3b:ee:7f:74:1d:a5:bf:83:3f:a4:f6:7c:
                    fc:9f:c5:86:a6:0d:ae:08:20:1f:ce:6e:c9:85:de:
                    1e:ca:d5:7a:93:7a:3e:a1:29:21:07:5a:e2:c6:ba:
                    58:f1:9a:ca:98:92:a6:76:23:26:b5:16:41:d9:3a:
                    18:5e:57:e5:33:45:00:e1:ef:9a:b2:f9:ef:50:dd:
                    44:90:bb:69:16:c5:65:8f:9d:9b:2c:20:f7:13:63:
                    77:85:9b:41:3a:13:03:15:c2:53:70:ef:20:61:28:
                    36:80:77:77:c8:59:89:6f:49:e0:95:2a:30:b8:ac:
                    b2:9d:b5:80:a0:e3:14:06:8f:58:d0:bb:be:c6:3e:
                    5a:ba:18:cb:85:7a:3d:b3:67:32:b4:7f:23:4d:c9:
                    f8:fe:4b:1e:af:5e:b3:63:be:5c:fb:d9:08:76:19:
                    34:19:c9:d4:a7:e5:3a:2f:ce:da:3a:32:2b:14:01:
                    eb:e0:5a:54:cb:04:ed:5b:60:e0:46:7c:17:d9:58:
                    41:0d:59:6f:c9:f6:11:46:5e:e0:3e:e5:b3:e6:eb:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:30:5C:80:F1:E2:1A:2B:A3:0A:98:2E:52:FB:17:6A:1D:3C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/be006960-88e9-3224-9d69-90726468960b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7f:dc:d8:c0:35:06:10:c1:b6:de:96:29:63:12:75:08:16:
         44:36:e5:26:ac:8b:ed:85:a4:0e:93:ea:3a:36:6f:ad:3e:c0:
         ed:ed:16:1a:f2:80:91:d7:63:c3:d0:d7:99:f8:a0:b7:f1:04:
         2e:e4:1f:bc:4a:e0:28:34:64:61:32:6a:49:bb:01:1e:ff:36:
         4e:e2:e6:fd:61:33:36:eb:7d:9d:0a:e8:8b:dd:db:db:84:65:
         94:31:be:6d:c3:f1:36:06:b5:75:48:22:58:71:66:c2:74:d6:
         6f:fd:8b:9c:e4:a7:b1:7e:fa:d7:f8:5a:5f:d5:91:23:a0:b3:
         3b:25:b2:1e:c0:64:ff:a5:84:3a:c8:b5:be:ab:00:85:4e:cc:
         3a:bb:85:36:4a:37:9f:a8:13:b6:0a:fb:a7:59:7f:3d:8e:2e:
         56:29:ed:cb:96:98:f0:7e:14:66:42:55:d7:16:cd:1d:bc:84:
         37:d2:e0:39:5d:eb:a1:23:4a:f8:fd:d0:ac:18:08:dc:92:60:
         ff:da:fb:63:a0:42:76:f5:ef:e8:9e:12:2d:f4:fb:5d:26:76:
         0c:49:4d:06:24:f9:52:72:1d:9a:1a:1d:6f:a9:1b:27:ef:7f:
         a4:47:93:01:c1:31:cd:08:02:6a:9a:cb:bf:b9:20:8e:dc:ae:
         30:97:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:05:47 2024 by rpki-client on console-fra.rpki-client.org