Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa
File:                     0304701b-f7af-3dfb-8187-c57bac2f5c32.roa (raw, json)
Hash identifier:          9Ef9Xwc2rhpSaKPmj1kIX5zmjFzMym6SO4P7BZSt1js=
Subject key identifier:   46:10:C7:BE:0A:0B:EB:7C:25:21:86:FC:77:AC:3D:9F:F7:AE:5D:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD2B6406C6BEAECA8B9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d2:b6:40:6c:6b:ea:ec:a8:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1796ba4a-0eae-4e60-946b-8eb5d54fccdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:87:c5:83:a8:98:5f:33:ba:ee:9f:5d:b0:
                    9f:2f:e7:a3:02:01:17:19:28:65:52:34:ae:86:ec:
                    5d:b9:c2:aa:64:8d:74:8c:4a:4d:e5:06:17:72:e2:
                    e9:2a:cb:8b:c5:3f:47:ae:6d:e8:91:59:71:bb:94:
                    bb:03:98:61:c0:f7:6b:32:08:97:af:b8:90:34:86:
                    48:ae:54:26:6f:8a:72:6e:1d:8c:ac:fb:20:29:34:
                    39:38:07:90:e7:f1:a4:2e:43:df:dc:fe:5e:ad:64:
                    0b:e7:e6:10:72:b5:19:40:2d:f7:2e:45:72:7c:2d:
                    72:7b:e0:3d:7e:c7:1b:c8:89:00:ef:38:12:69:bc:
                    3d:9c:ed:95:04:4b:b8:60:3b:6b:a1:d8:e0:82:f3:
                    20:d3:3f:fa:42:1a:bd:4e:bd:79:e1:94:b9:e1:17:
                    01:98:0d:60:f8:d2:4f:2a:d2:ff:00:76:37:63:f0:
                    5d:27:49:19:cb:87:9c:b7:9d:53:a7:59:5a:25:cb:
                    46:86:67:6e:27:29:51:b8:2a:63:98:10:02:5d:6e:
                    12:34:39:cb:11:0d:d2:31:7a:78:79:12:3e:3b:f7:
                    8e:d7:01:8d:10:94:1e:9a:64:3c:87:02:19:21:1c:
                    49:a0:18:8b:90:b0:7c:89:c7:58:ad:50:b9:86:10:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:10:C7:BE:0A:0B:EB:7C:25:21:86:FC:77:AC:3D:9F:F7:AE:5D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:d7:a4:55:7c:e5:0f:0b:2e:20:4f:56:1e:f3:86:2e:0b:
         0c:62:44:84:61:70:01:bb:61:42:d9:20:a8:d1:dd:63:c9:6a:
         d5:5a:9c:96:80:6e:80:93:49:b7:60:1c:0a:03:d7:1e:2b:34:
         b6:51:02:29:f5:24:01:49:0b:10:05:37:f0:59:18:05:be:e7:
         68:08:49:9e:f5:dc:73:ef:be:85:55:c6:92:c3:f7:5e:d9:60:
         0b:fe:f7:d5:73:37:d4:aa:e1:2a:70:03:7d:b6:c1:87:bc:64:
         c1:2a:15:19:93:cc:2e:aa:03:16:51:0a:cb:ec:e3:f0:0c:8e:
         db:30:2f:ed:29:60:39:0a:2f:27:6b:ed:43:c7:28:1a:ab:c1:
         57:1d:d9:4d:bf:c1:f8:c1:81:ec:2c:54:79:10:b0:ae:01:56:
         dd:28:9b:68:51:f3:55:2b:45:e9:f3:f7:27:5b:2d:87:28:bb:
         13:af:9e:10:58:71:7a:9b:2f:6f:05:b1:a1:8b:fd:03:13:72:
         c8:d7:b3:6d:2b:c0:31:fc:1b:10:6d:1c:fb:dd:38:7e:1d:df:
         0c:c6:c8:34:eb:91:e4:38:4f:e3:ab:da:dd:01:d6:7b:d4:29:
         46:66:6a:70:0d:64:dd:6a:b4:1f:b9:04:60:22:7a:82:63:3f:
         3e:21:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:55 2024 by rpki-client on console-fra.rpki-client.org