Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15fb5031-6071-33f9-b480-0bec8727364f.roa
File:                     15fb5031-6071-33f9-b480-0bec8727364f.roa (raw, json)
Hash identifier:          mkn0IA1GTzSUtixXMLqgCw7/bZMi08pmebQOrHJwKZ0=
Subject key identifier:   FB:82:21:4E:5E:E9:0E:15:20:52:2F:2F:CD:70:16:CE:ED:B6:7D:AE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3C6304586542989EEB44
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15fb5031-6071-33f9-b480-0bec8727364f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3c:63:04:58:65:42:98:9e:eb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=97461125-f098-4a2d-a12b-77be9d91617c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:ef:98:32:79:ad:78:03:53:c3:33:91:12:
                    e0:e0:d8:4b:57:cb:52:11:5e:c7:65:14:9f:d4:94:
                    be:ce:ad:9e:3d:92:01:36:0b:39:2e:d2:5a:2d:39:
                    e2:2e:a9:92:ac:8d:07:d0:a2:c6:55:6f:e0:7d:70:
                    b5:2c:1f:4f:4c:61:f3:a6:4b:1e:f6:59:ac:5a:7b:
                    24:9e:64:3e:bd:2a:62:f7:ce:17:4d:a0:43:b8:18:
                    18:08:8a:b2:72:e5:db:b9:28:4b:f1:46:e7:ce:e9:
                    71:bc:53:bc:82:35:a8:26:bc:49:d1:6f:44:81:b7:
                    bf:0f:2b:cc:eb:f4:94:e4:f1:fc:ee:f5:0e:c5:e6:
                    dd:9c:c6:58:72:24:c4:44:23:60:2f:1a:ef:e0:15:
                    b4:1f:e6:c0:be:79:37:57:ff:16:85:ea:83:d9:86:
                    25:31:35:ae:a1:8c:9d:82:4c:a7:f4:67:17:23:c9:
                    b9:e0:46:9d:65:8a:f9:1e:1a:64:ab:32:97:2d:d3:
                    8f:5f:f3:49:9d:0a:33:28:8c:3f:d1:e6:53:5e:e6:
                    2d:e8:ab:37:4a:c5:e3:df:70:da:c1:34:e9:22:10:
                    74:55:1f:9c:0f:65:6b:fd:07:7d:6b:2a:dd:27:3c:
                    8d:ae:9c:6d:cd:43:20:b4:51:39:ef:51:53:e1:3e:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:82:21:4E:5E:E9:0E:15:20:52:2F:2F:CD:70:16:CE:ED:B6:7D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15fb5031-6071-33f9-b480-0bec8727364f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:95:44:64:50:07:c2:00:94:6f:6a:23:0f:11:55:6e:27:f6:
         fb:2c:8d:7d:20:fa:3e:f6:43:36:e3:7f:47:d7:98:4e:d9:9a:
         c6:b6:9b:ce:5f:d3:c1:9f:1b:c5:0b:40:7e:14:8f:78:36:31:
         4f:71:b7:ea:1d:3c:bb:c4:46:f3:06:88:33:d3:d8:35:d6:e3:
         12:64:c6:16:3d:33:9b:7d:75:d7:a0:a0:da:fe:67:5f:d2:51:
         9c:79:aa:b2:0d:f8:67:59:c3:ea:ec:74:d5:b2:d0:e3:a9:e0:
         dd:53:c7:b7:74:6b:aa:09:e3:74:30:1d:11:0f:ae:f7:bc:da:
         06:12:fa:db:f2:d0:a9:18:0a:05:29:6e:c9:51:ae:82:b3:59:
         8e:08:36:c0:ad:4b:a3:bd:d5:e6:f8:42:c9:5c:6c:44:25:14:
         6c:ff:c2:06:23:ba:ab:bf:d7:6f:df:f6:86:e9:49:4f:ce:98:
         8d:29:eb:f6:34:4e:06:80:f8:29:4f:7c:3b:cb:7c:9d:a6:6b:
         58:3e:84:57:db:f2:a5:12:56:90:7b:0a:b7:43:9e:a4:8c:42:
         1c:32:f6:6c:39:28:2b:fd:4b:98:ca:9c:cb:40:e2:3c:9d:c0:
         6b:87:11:fd:40:bb:61:0e:23:b1:b0:0b:53:4f:02:68:cf:a9:
         85:56:96:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjxjBFhlQpie60QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTc0NjExMjUtZjA5OC00YTJkLWExMmItNzdiZTlkOTE2MTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CTvmDJ5rXgDU8MzkRLg4NhLV8tSEV7HZRSf
1JS+zq2ePZIBNgs5LtJaLTniLqmSrI0H0KLGVW/gfXC1LB9PTGHzpkse9lmsWnsk
nmQ+vSpi984XTaBDuBgYCIqycuXbuShL8UbnzulxvFO8gjWoJrxJ0W9Egbe/DyvM
6/SU5PH87vUOxebdnMZYciTERCNgLxrv4BW0H+bAvnk3V/8WheqD2YYlMTWuoYyd
gkyn9GcXI8m54EadZYr5HhpkqzKXLdOPX/NJnQozKIw/0eZTXuYt6Ks3SsXj33Da
wTTpIhB0VR+cD2Vr/Qd9ayrdJzyNrpxtzUMgtFE571FT4T6GUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuCIU5e6Q4VIFIvL81wFs7ttn2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTVmYjUwMzEtNjA3MS0z
M2Y5LWI0ODAtMGJlYzg3MjczNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANGVRGRQB8IAlG9qIw8RVW4n9vssjX0g+j72Qzbjf0fXmE7Zmsa2m85f
08GfG8ULQH4Uj3g2MU9xt+odPLvERvMGiDPT2DXW4xJkxhY9M5t9ddegoNr+Z1/S
UZx5qrIN+GdZw+rsdNWy0OOp4N1Tx7d0a6oJ43QwHREPrve82gYS+tvy0KkYCgUp
bslRroKzWY4INsCtS6O91eb4QslcbEQlFGz/wgYjuqu/12/f9obpSU/OmI0p6/Y0
TgaA+ClPfDvLfJ2ma1g+hFfb8qUSVpB7CrdDnqSMQhwy9mw5KCv9S5jKnMtA4jyd
wGuHEf1Au2EOI7GwC1NPAmjPqYVWltM=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:37:33 2024 by rpki-client on console-fra.rpki-client.org