Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2699484d-b27b-3943-82b3-55b7521de7a9.roa
File:                     2699484d-b27b-3943-82b3-55b7521de7a9.roa (raw, json)
Hash identifier:          XIDABfUVwhRRjz6dN06bYf7kwnyM9ZiwC8HhV/IP39g=
Subject key identifier:   EF:DA:ED:DD:77:A2:DB:B6:C1:32:84:F3:2A:FE:50:DF:31:A8:50:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3B776942DEB6E4356FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2699484d-b27b-3943-82b3-55b7521de7a9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3b:77:69:42:de:b6:e4:35:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c00a3729-5e51-4273-aaf7-750d2496c1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:71:61:ad:1f:07:d5:d6:de:97:f1:d4:49:
                    63:64:9b:7b:6e:5a:e9:9f:06:13:e2:dd:80:27:c8:
                    1e:d4:9b:d7:6f:9a:f0:56:94:b5:73:d5:c1:ba:81:
                    be:63:a8:79:d0:63:3a:8b:c4:12:ea:49:55:c0:84:
                    39:40:2a:f5:2a:a1:41:a3:90:7f:d7:97:ec:a1:53:
                    e4:b1:da:27:2d:1d:e3:34:20:2d:c2:cf:bd:9d:2c:
                    43:08:2b:e2:06:aa:1d:da:97:92:e9:ca:03:3f:4c:
                    e7:6d:52:9b:b0:98:5c:53:4e:ec:37:2c:6d:1f:2a:
                    8a:ee:c7:04:dd:4a:03:70:be:df:b3:bb:05:1b:69:
                    69:87:de:52:7f:6d:15:4e:9f:9b:a4:55:92:be:a1:
                    53:a1:a7:fe:f1:cf:6a:d7:85:e9:23:89:31:37:2f:
                    13:38:0f:52:ca:f6:dc:fd:d4:29:06:77:6c:5d:23:
                    07:45:3d:e1:58:2c:7c:cf:03:52:c7:eb:f9:87:13:
                    b9:38:f1:3c:3f:c5:98:92:55:db:b0:b4:b3:d1:23:
                    50:c5:72:cb:17:63:77:5d:4f:46:64:8d:f1:a8:70:
                    a6:5a:8b:3a:d3:f1:79:76:64:94:1d:bb:63:c0:b9:
                    37:de:37:58:de:51:b8:d8:d9:79:1d:77:fe:a0:90:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:ED:DD:77:A2:DB:B6:C1:32:84:F3:2A:FE:50:DF:31:A8:50:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2699484d-b27b-3943-82b3-55b7521de7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:27:6d:0f:19:97:f3:42:df:3e:d6:eb:58:8f:a4:9a:61:c5:
         17:ff:f4:2d:b0:d0:14:80:8e:ab:96:80:78:ab:db:e3:3d:63:
         92:88:cf:64:e6:0e:5d:ff:5f:e3:d4:9d:46:12:f8:90:54:72:
         ad:ce:92:05:6a:03:dc:fb:f1:f7:37:70:ff:b8:ae:02:22:90:
         fc:78:e0:1b:26:c2:72:05:54:b9:f9:57:1c:7b:28:84:25:57:
         22:03:f5:e0:4a:28:53:0d:d1:c4:0f:8c:48:61:93:e0:96:07:
         0b:25:d3:6e:f4:61:87:4d:59:91:79:18:e6:1d:da:c5:e3:1d:
         f6:ad:af:83:4c:40:23:e7:8b:59:5e:df:1e:f3:b5:a7:3c:e7:
         ab:bf:4c:c8:a8:27:e4:ac:b4:d8:d2:82:11:93:61:68:49:0d:
         bd:c3:b7:9f:38:cd:cf:f4:97:45:7d:c5:96:66:a1:7d:ca:1d:
         e3:29:d9:dc:f4:87:df:10:c3:40:d6:81:53:69:6b:35:04:1e:
         eb:ef:ab:3c:f7:e1:66:ab:03:43:16:cc:29:47:28:f0:73:dc:
         a0:d2:8f:04:08:dc:5e:87:30:71:5d:c6:be:f6:8e:09:91:3f:
         cd:e1:df:c7:22:87:e6:86:1c:0d:c0:50:f7:83:57:e2:04:1e:
         99:45:0a:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPjt3aULetuQ1b8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YzAwYTM3MjktNWU1MS00MjczLWFhZjctNzUwZDI0OTZjMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmpxYa0fB9XW3pfx1EljZJt7blrpnwYT4t2A
J8ge1JvXb5rwVpS1c9XBuoG+Y6h50GM6i8QS6klVwIQ5QCr1KqFBo5B/15fsoVPk
sdonLR3jNCAtws+9nSxDCCviBqod2peS6coDP0znbVKbsJhcU07sNyxtHyqK7scE
3UoDcL7fs7sFG2lph95Sf20VTp+bpFWSvqFToaf+8c9q14XpI4kxNy8TOA9Syvbc
/dQpBndsXSMHRT3hWCx8zwNSx+v5hxO5OPE8P8WYklXbsLSz0SNQxXLLF2N3XU9G
ZI3xqHCmWos60/F5dmSUHbtjwLk33jdY3lG42Nl5HXf+oJB9+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/a7d13otu2wTKE8yr+UN8xqFBUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjY5OTQ4NGQtYjI3Yi0z
OTQzLTgyYjMtNTViNzUyMWRlN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJgnbQ8Zl/NC3z7W61iPpJphxRf/9C2w0BSAjquWgHir2+M9Y5KIz2Tm
Dl3/X+PUnUYS+JBUcq3OkgVqA9z78fc3cP+4rgIikPx44BsmwnIFVLn5Vxx7KIQl
VyID9eBKKFMN0cQPjEhhk+CWBwsl0270YYdNWZF5GOYd2sXjHfatr4NMQCPni1le
3x7ztac856u/TMioJ+SstNjSghGTYWhJDb3Dt584zc/0l0V9xZZmoX3KHeMp2dz0
h98Qw0DWgVNpazUEHuvvqzz34WarA0MWzClHKPBz3KDSjwQI3F6HMHFdxr72jgmR
P83h38cih+aGHA3AUPeDV+IEHplFCnE=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:33 2024 by rpki-client on console-ams.rpki-client.org