Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa
File:                     072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa (raw, json)
Hash identifier:          tMtqly0LOgCBFeU91e2GfuPBUsa+Hx+3tzCbLaxcTXo=
Subject key identifier:   11:10:27:B4:A9:53:28:5E:AF:A8:DA:F8:13:4A:55:02:68:88:09:8B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3DD2383A9E7AD9F11440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3d:d2:38:3a:9e:7a:d9:f1:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=866832f9-a904-4257-9b99-5145cd290981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:8d:29:ee:d9:a8:d4:1d:ae:58:ac:4a:ca:
                    ee:7a:0b:6b:7b:fb:84:f8:0d:7b:1d:57:34:c8:f9:
                    de:2f:08:aa:f8:01:21:3c:77:24:64:8a:74:30:2d:
                    76:24:75:d4:40:4f:81:60:e8:d7:26:8b:db:7a:d8:
                    f8:37:83:99:25:09:42:db:fb:a5:1e:0f:72:ce:bb:
                    a3:4f:c7:97:92:2a:1f:3f:4a:53:4d:0c:71:07:aa:
                    c2:f5:7d:5b:32:d9:10:b4:2f:79:23:6b:03:f8:34:
                    ac:57:cd:db:10:42:4a:fe:9a:a5:0d:8d:43:08:1e:
                    59:a9:02:ed:94:fc:8e:74:a9:64:51:7f:d8:c5:6a:
                    1c:98:4f:3f:85:23:4e:71:a1:3d:c5:28:c2:02:81:
                    49:20:36:9c:c0:7d:e3:28:1e:d2:35:67:09:15:fb:
                    c0:12:84:51:dd:3f:26:b9:90:cf:a6:a9:58:cd:4f:
                    f2:73:a1:df:46:16:73:19:f2:ef:46:11:69:89:11:
                    a4:f1:fb:86:6c:0b:02:8f:bc:05:a5:b3:d2:e3:13:
                    41:61:9b:63:07:4f:2a:57:b5:0e:e1:e9:cc:10:54:
                    00:53:0d:6c:48:fd:70:49:e6:a8:cb:00:9e:dd:89:
                    54:d0:a5:5c:72:27:4b:6c:82:71:35:35:4d:ef:4f:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:10:27:B4:A9:53:28:5E:AF:A8:DA:F8:13:4A:55:02:68:88:09:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/072bdc1b-1cd3-37ce-820c-a7ba9ab68789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:dc:13:62:b6:8f:ab:09:1b:9e:8c:8e:29:37:0f:15:22:
         33:6b:c1:e3:4c:96:f7:e1:20:4b:d2:74:d1:92:e9:25:87:df:
         31:af:ae:bd:d8:4f:47:49:e3:5c:e3:e0:31:b2:35:40:53:4c:
         d6:33:c9:a3:67:b2:7b:79:04:63:7d:25:a2:0e:15:56:bd:58:
         32:47:39:4f:d0:05:08:57:70:ff:9a:c3:f9:59:5d:35:93:24:
         c9:66:b2:c2:e3:1f:13:dc:3d:9d:aa:a5:e7:68:1d:d5:2d:52:
         52:36:e4:3d:82:41:41:ee:4a:16:3f:cb:a3:9b:81:0d:22:66:
         cd:4e:15:e1:c4:0b:d3:0e:5b:c4:3e:ce:3d:f9:6b:98:0a:cc:
         aa:97:ea:e7:a5:f3:b6:48:49:8d:ef:61:4c:c4:9e:6f:ca:55:
         fa:a8:fc:8f:19:b0:24:df:ba:e0:22:58:35:5b:65:69:56:d6:
         a2:fd:d3:00:42:03:a9:85:68:16:ee:2d:a9:d0:98:24:cb:cf:
         bd:54:4d:31:e8:f7:31:42:cf:0f:de:f6:90:80:8d:55:cc:c5:
         76:4f:d4:31:62:ae:9c:b9:ae:5d:c4:55:10:63:65:01:01:26:
         ab:7d:6e:40:7b:13:79:15:d8:7d:24:04:06:de:d2:f4:e6:4f:
         41:db:31:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPj3SODqeetnxFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ODY2ODMyZjktYTkwNC00MjU3LTliOTktNTE0NWNkMjkwOTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH2NKe7ZqNQdrlisSsruegtre/uE+A17HVc0
yPneLwiq+AEhPHckZIp0MC12JHXUQE+BYOjXJovbetj4N4OZJQlC2/ulHg9yzruj
T8eXkiofP0pTTQxxB6rC9X1bMtkQtC95I2sD+DSsV83bEEJK/pqlDY1DCB5ZqQLt
lPyOdKlkUX/YxWocmE8/hSNOcaE9xSjCAoFJIDacwH3jKB7SNWcJFfvAEoRR3T8m
uZDPpqlYzU/yc6HfRhZzGfLvRhFpiRGk8fuGbAsCj7wFpbPS4xNBYZtjB08qV7UO
4enMEFQAUw1sSP1wSeaoywCe3YlU0KVccidLbIJxNTVN70+bpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEQJ7SpUyher6ja+BNKVQJoiAmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDcyYmRjMWItMWNkMy0z
N2NlLTgyMGMtYTdiYTlhYjY4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokj/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwJ3BNito+rCRuejI4pNw8VIjNrweNMlvfhIEvSdNGS6SWH3zGvrr3Y
T0dJ41zj4DGyNUBTTNYzyaNnsnt5BGN9JaIOFVa9WDJHOU/QBQhXcP+aw/lZXTWT
JMlmssLjHxPcPZ2qpedoHdUtUlI25D2CQUHuShY/y6ObgQ0iZs1OFeHEC9MOW8Q+
zj35a5gKzKqX6uel87ZISY3vYUzEnm/KVfqo/I8ZsCTfuuAiWDVbZWlW1qL90wBC
A6mFaBbuLanQmCTLz71UTTHo9zFCzw/e9pCAjVXMxXZP1DFirpy5rl3EVRBjZQEB
Jqt9bkB7E3kV2H0kBAbe0vTmT0HbMRw=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org