Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa
File:                     109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa (raw, json)
Hash identifier:          gIowFtts3Y5ST8OyYRCKIyXD/SH2Ggs1ANQ1yHXNxbY=
Subject key identifier:   6B:26:DA:5F:A3:21:65:A5:7F:34:66:E9:43:E9:89:ED:E5:54:A4:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D890C28F906D7666C8600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:89:0c:28:f9:06:d7:66:6c:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c1504657-95be-45db-9e8f-6a1cdcd28dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:ca:5d:f7:ee:4b:1d:37:24:e4:73:9e:7f:
                    4b:37:c4:4e:2e:6a:bb:41:c0:de:d7:f7:75:67:41:
                    8c:cc:86:da:ea:ff:a2:fe:2b:7c:f3:f6:39:54:17:
                    91:a0:c9:df:57:6b:8f:54:c4:64:eb:ba:74:47:22:
                    9a:06:81:80:85:60:9a:b6:3b:1c:eb:de:e0:bf:71:
                    72:90:4f:a9:9f:73:35:71:c4:f5:01:32:08:1f:64:
                    e3:99:a0:04:76:44:dc:4b:a8:ab:1a:55:3a:cc:11:
                    4b:35:2a:c2:d7:64:59:29:d3:b1:83:a4:19:00:16:
                    ca:55:ec:8c:be:99:45:bb:34:33:de:89:50:24:95:
                    1d:aa:76:fe:43:ca:25:03:1a:a1:fb:cd:90:fc:88:
                    2d:d8:41:61:95:d3:b2:e9:d0:ed:0c:b5:d2:ea:fb:
                    76:51:c6:83:8d:d6:4f:02:56:35:d6:86:50:18:a9:
                    26:b6:b2:52:4d:09:a2:06:a6:85:74:0f:4e:72:02:
                    fe:f0:d0:9f:8c:5d:75:62:dc:8c:ce:79:0d:fb:99:
                    9e:2b:3b:ff:c0:bb:ca:be:38:ae:6e:59:c8:da:64:
                    a3:fd:a9:68:36:7c:47:da:26:41:41:57:7d:41:02:
                    39:56:e6:fb:09:a0:12:0c:39:67:27:17:ae:35:1d:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:26:DA:5F:A3:21:65:A5:7F:34:66:E9:43:E9:89:ED:E5:54:A4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:46:d9:45:b2:4f:5d:36:e7:98:76:fc:38:24:33:f4:a8:
         f9:f8:5b:dc:a8:65:3d:a2:d3:bd:4a:04:a4:26:9f:47:1e:0e:
         17:95:ce:1c:92:1f:ba:6a:07:f6:89:d4:e1:b0:4a:5f:86:e7:
         88:3c:bc:06:d8:a6:72:43:26:8c:b2:60:4a:05:59:11:25:84:
         6f:3e:38:8c:c7:c5:b3:58:10:17:48:5a:a7:7b:ba:00:7b:6a:
         2b:11:82:60:a3:3f:29:ab:16:d6:81:15:db:39:3a:58:9d:15:
         b1:2e:1c:97:a3:11:73:6e:c5:56:58:29:72:25:db:28:c2:a5:
         d2:76:9e:b2:b4:47:ae:58:1d:50:a9:56:6c:37:6c:a8:e7:34:
         32:7b:11:fb:a5:bf:7f:9e:a7:65:f7:63:d4:99:6b:cb:af:9a:
         14:a5:db:92:88:92:9d:92:06:c1:66:b8:35:ae:1a:61:ae:25:
         89:28:66:77:67:37:00:e1:50:a0:76:eb:06:0b:e9:b3:af:86:
         40:8e:27:c8:d6:0f:92:3d:2c:08:c6:92:48:1b:97:e4:df:a2:
         dd:22:28:2d:af:af:00:16:84:1c:c2:9d:57:ba:d0:ae:98:53:
         3f:f7:95:d7:79:50:8f:4b:85:58:d9:42:b5:73:11:16:1c:0c:
         1b:89:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org