Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ad2d2b9-8849-3783-8d0f-9d4f867143ea.roa
File:                     2ad2d2b9-8849-3783-8d0f-9d4f867143ea.roa (raw, json)
Hash identifier:          326t1BhAQ/TIjD3PWyqkbu39cTR70R2I79LrnfBtWL8=
Subject key identifier:   A7:35:40:AF:FC:36:6D:94:8C:AB:4D:D3:9F:A6:9B:9B:8D:EC:7B:82
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E352BC562D60303269D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ad2d2b9-8849-3783-8d0f-9d4f867143ea.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:35:2b:c5:62:d6:03:03:26:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=8fe58e9d-2e8b-465a-b5f6-dc7f8c708895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:1b:e5:57:69:a8:f8:df:c1:7f:5b:ff:44:
                    cc:c9:45:10:07:1d:8d:27:a4:a3:ef:04:8e:80:3b:
                    5c:c4:05:2d:2e:2a:6d:79:0a:9a:1a:2b:b7:65:1b:
                    d6:5a:3c:98:cb:55:5e:09:47:5c:76:b3:b4:18:aa:
                    7e:c6:b1:99:f5:b2:11:7b:a8:e4:00:ae:9b:ca:63:
                    1a:ce:70:76:dc:48:ce:55:93:21:52:b3:b0:96:a0:
                    5d:09:30:5c:c3:78:18:c6:52:fe:a6:17:b5:3a:cd:
                    0c:a5:43:9a:e6:a0:ef:19:78:8c:f6:47:b3:6e:9f:
                    0b:31:84:a7:7e:dd:11:fd:04:13:f2:d4:8d:75:0e:
                    ec:66:28:16:51:04:85:07:a9:a9:22:8a:cd:c1:7e:
                    d1:79:e8:2a:7c:69:08:61:9e:21:fb:20:c0:d0:43:
                    2a:61:cf:04:cc:e1:7d:45:45:26:22:86:0e:b4:26:
                    cb:68:ba:02:9f:c1:71:70:99:3d:88:d3:71:8d:8d:
                    d2:c4:ec:72:27:9b:26:45:34:e6:9d:72:39:6a:12:
                    00:08:ec:31:44:89:d6:09:2a:7b:45:b5:ac:4d:b3:
                    91:3b:6f:db:24:6a:9d:52:74:bc:1d:0c:2e:2f:12:
                    fd:04:6f:db:b0:ad:78:49:b2:1f:2d:a2:4b:b5:84:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:40:AF:FC:36:6D:94:8C:AB:4D:D3:9F:A6:9B:9B:8D:EC:7B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ad2d2b9-8849-3783-8d0f-9d4f867143ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:c1:f3:ca:0a:77:88:4b:d4:2b:83:75:44:47:6c:f0:a7:
         2b:8d:5f:e4:ae:43:07:18:85:cd:11:e2:fc:b1:38:46:8f:34:
         1b:d5:b8:65:49:e5:fd:5d:89:f8:f0:15:e1:8b:e5:bc:6a:56:
         8b:d9:15:1d:22:33:60:b7:ec:9d:6d:94:24:12:d7:5b:91:8a:
         d9:f6:b9:24:6f:26:68:89:c4:51:7e:36:d3:ce:86:b2:59:e6:
         6c:02:90:21:b1:eb:78:d9:61:39:75:ff:7f:55:b1:be:34:a9:
         e1:32:c1:2f:c4:a6:21:6b:a5:4d:bb:2c:4b:5b:2a:86:ba:30:
         dc:bc:13:ee:87:bc:47:b0:f4:93:1a:f7:1e:fb:39:19:86:e5:
         93:c0:1f:f8:7c:a9:9b:b6:45:ff:bb:ba:4c:bc:5f:70:f5:5c:
         9a:ff:79:72:32:1c:dd:92:ba:e9:79:44:7a:6c:34:0c:39:5e:
         98:a7:9c:c8:8c:b4:51:c5:aa:5f:26:dc:4d:0f:d4:5e:bc:d1:
         2c:2a:43:ab:b0:3a:f1:a2:fe:71:8d:c1:0e:61:90:cf:b9:fd:
         e4:ca:ea:f9:23:b8:a3:cc:62:17:18:04:8d:80:94:11:88:ea:
         0e:81:3e:b2:da:27:30:07:74:63:7c:1c:85:38:20:12:de:ca:
         9a:3a:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:32 2024 by rpki-client on console-ams.rpki-client.org