Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a052872-d0a5-3afb-a708-b822e4f37cac.roa
File:                     0a052872-d0a5-3afb-a708-b822e4f37cac.roa (raw, json)
Hash identifier:          xN/mHWdFGYd0E9oy8ipmVw29iKROGoxf5Kdy/jpbL9U=
Subject key identifier:   8B:6B:04:CC:8C:D2:EE:BE:57:DD:FA:EE:8A:1C:E9:AA:9E:74:C1:AD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D84D670D35BE038FC0580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a052872-d0a5-3afb-a708-b822e4f37cac.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:84:d6:70:d3:5b:e0:38:fc:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7e763685-2fc7-4c9b-bf94-e795facc9e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:4e:23:0e:02:7c:d4:3d:44:6a:e0:c6:44:
                    4e:97:8f:63:2b:6a:f9:8a:5f:46:c8:38:0b:11:93:
                    7d:96:02:2b:0f:7b:a5:e5:e3:a9:37:b8:cb:9f:db:
                    78:5b:b1:7b:53:5a:04:ad:86:2a:f4:1a:95:e1:c8:
                    99:89:e3:cb:41:49:19:ee:55:e6:7c:fa:7c:79:02:
                    ae:a7:11:d0:ab:c0:a0:87:81:ed:8c:51:9e:c3:c2:
                    a7:22:31:1a:43:01:4e:4d:cc:5f:07:b4:3b:2a:8f:
                    47:fa:86:72:12:5c:6f:1e:bf:5c:16:51:b0:86:1c:
                    74:dd:f4:8d:f5:87:ce:8b:0e:bd:48:52:0d:d7:bf:
                    bf:41:c9:1e:31:1d:1c:8b:9e:0b:70:92:62:05:17:
                    d9:90:47:1c:16:e7:78:1b:57:be:30:f8:b3:81:3a:
                    04:67:64:1d:b6:66:f1:db:08:c0:e0:d3:36:1e:99:
                    c0:c4:e2:92:17:58:38:38:e8:f5:d4:f2:36:46:89:
                    5c:09:62:2b:d9:13:16:41:8b:3a:11:74:ab:8f:71:
                    bf:22:33:f1:9a:0d:26:8b:15:9d:f0:ab:54:96:44:
                    72:7c:b7:06:79:8d:a7:0c:7d:26:90:c3:10:b6:57:
                    6b:d4:79:28:b9:39:41:c5:eb:32:aa:bb:2c:80:74:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:04:CC:8C:D2:EE:BE:57:DD:FA:EE:8A:1C:E9:AA:9E:74:C1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a052872-d0a5-3afb-a708-b822e4f37cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:99:87:f6:7b:34:c6:e5:f0:12:87:79:17:52:1b:55:b8:65:
         7b:b6:3a:ed:59:a7:0f:90:8c:65:b9:df:9d:dc:b4:28:7f:ca:
         c6:17:bc:7a:96:5b:94:69:91:16:b5:7f:da:1a:10:a0:c4:9c:
         e1:00:ef:2e:e5:f9:16:25:b7:07:13:65:2d:a1:00:5b:73:a7:
         8c:7f:f9:ea:bf:37:b3:70:7f:81:b0:61:8e:a8:1d:6e:f5:4c:
         8e:5e:2f:12:3c:d9:92:83:fc:3a:0b:3c:8a:e5:60:68:e4:f6:
         bb:a2:b9:f2:76:7a:4c:28:83:09:fc:4d:f1:aa:72:00:89:ce:
         8b:51:7d:f9:9f:aa:b7:0d:92:9d:de:ff:ed:4f:61:25:57:ef:
         f3:14:f2:cc:7c:5c:77:72:8e:bc:47:9b:01:9e:93:d0:10:4b:
         d6:ee:6f:f5:0b:03:19:4b:32:e3:d0:dd:d8:80:45:a1:aa:42:
         3e:e1:d7:07:75:0d:47:13:29:75:44:da:fd:09:c4:5e:09:7d:
         81:54:e3:e0:eb:1b:3e:38:d9:af:ff:53:25:ce:40:6e:05:fe:
         cf:2f:f1:8a:3c:3f:4e:17:a0:ce:5a:1b:c2:0d:96:bb:a2:88:
         af:4b:18:f5:fc:7f:93:14:da:da:d1:a3:c2:9a:2e:2f:57:92:
         0d:0d:ae:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:28 2024 by rpki-client on console-ams.rpki-client.org