Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08103be8-b652-3c64-af9b-7f194b375d2c.roa
File:                     08103be8-b652-3c64-af9b-7f194b375d2c.roa (raw, json)
Hash identifier:          ssYWfOqimC0qHW3U/tT+ebAZ80YQxEGAkwOih4JuCo8=
Subject key identifier:   33:74:34:18:78:C2:84:29:42:4F:18:EA:EB:B0:82:2B:BE:54:15:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD2DA0F750767CC5E6980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08103be8-b652-3c64-af9b-7f194b375d2c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d2:da:0f:75:07:67:cc:5e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=532d7870-3ef6-4790-9225-18ca2d146fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:ae:ed:e6:ae:cf:14:8f:41:03:12:f5:b8:
                    ad:08:e8:bb:89:a8:a1:c1:95:16:88:ac:54:55:a6:
                    df:ae:de:51:a6:67:38:61:23:7a:02:36:0a:50:ff:
                    f2:67:c8:28:2b:05:6d:f3:cc:76:04:70:3c:ce:d6:
                    6d:d4:82:59:2b:b1:ce:23:cb:15:20:b5:ed:96:2b:
                    59:2c:89:30:8c:e3:6b:25:da:30:ed:50:bc:87:9c:
                    65:99:80:b7:0f:59:17:9d:be:fc:24:d9:c3:98:70:
                    ba:ce:ea:2a:d0:50:de:ca:93:3f:2e:d3:05:d3:f4:
                    24:6f:9b:e1:36:91:db:36:11:e6:3c:20:94:00:7b:
                    eb:6a:05:51:43:e9:42:05:85:b0:ee:33:f5:a7:07:
                    23:63:6e:92:4e:7f:54:3c:b1:b4:2f:06:11:e9:32:
                    bd:e0:40:61:83:06:6d:62:36:b4:d9:e5:22:13:42:
                    48:77:8f:93:8f:62:be:43:22:c7:54:32:f4:a5:82:
                    d6:a2:8b:9a:19:4d:37:11:e6:05:ca:5f:ae:cc:60:
                    01:f3:b8:ee:ae:2d:2b:af:ef:e6:e9:5b:b6:39:e3:
                    4d:e1:58:8b:96:8b:fd:bf:63:79:63:6b:ff:8d:eb:
                    0f:84:8c:a2:37:7c:49:c5:d6:b3:7d:fa:cd:01:36:
                    24:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:34:18:78:C2:84:29:42:4F:18:EA:EB:B0:82:2B:BE:54:15:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08103be8-b652-3c64-af9b-7f194b375d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0a:55:68:8f:6c:49:fc:0c:15:43:e3:00:4a:91:e6:b9:6e:
         4a:74:58:38:e6:e8:ff:41:c2:b2:85:38:5f:e7:f6:56:ee:f8:
         23:cc:b6:0e:5d:f2:e2:76:7f:5b:0d:57:82:28:d6:ce:c1:05:
         5e:88:50:3c:99:5a:41:90:ef:bb:55:29:ab:e3:3a:5e:87:fc:
         03:e5:c4:b6:5a:21:9b:11:bf:2f:07:f9:18:af:43:a8:71:80:
         b8:7b:21:d4:b3:fc:8b:6d:c5:64:ac:4c:ba:24:db:a0:0a:08:
         0d:4b:52:4e:ad:23:a9:1b:8c:2a:93:91:85:8c:59:01:36:1e:
         f7:c8:23:51:8e:c5:b1:36:45:e8:20:51:d7:58:da:a7:5c:17:
         d8:4c:d4:35:49:5a:ac:16:0c:2c:ad:96:fa:8f:72:dc:2e:2f:
         82:ed:cf:47:ac:96:20:79:d7:47:c7:7c:80:69:d6:ff:07:d1:
         b7:24:b8:18:a1:d4:0e:00:43:d7:3a:cb:9c:b7:c6:d4:31:78:
         ed:fe:2c:b0:d9:5e:01:6e:2c:1a:6c:0f:72:52:55:0c:4b:59:
         4f:1d:77:50:d8:4c:6a:b9:33:ac:5c:21:03:c8:df:51:e5:19:
         13:57:e4:9c:7a:87:38:c1:8c:d5:1c:25:c4:b4:74:d1:f5:9d:
         62:9a:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:09 2024 by rpki-client on console-ams.rpki-client.org