Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa
File:                     2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa (raw, json)
Hash identifier:          lHuxypekPkdRu0P4kg4EGAm5p+GNDk6DbVdQCKjqxOQ=
Subject key identifier:   A7:62:5B:6D:8A:C4:C9:FB:D1:C4:D5:B9:3B:CC:61:95:0D:72:7F:DB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD343C478726EA9D6BA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d3:43:c4:78:72:6e:a9:d6:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0891fcab-badb-4636-9729-84dd4e5e42aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:6a:ad:8a:d3:0b:83:56:62:a7:7e:78:d4:
                    82:82:cb:b1:de:ea:d5:7f:0c:8e:bc:25:de:e9:54:
                    3b:ae:1e:3c:43:a3:dd:6b:20:e3:d1:34:62:e7:84:
                    8e:9a:75:ca:4a:9c:8e:eb:ce:32:8b:e4:b9:08:e1:
                    ec:8c:14:cd:f9:d4:72:61:23:b8:e7:15:b5:82:ed:
                    9f:f9:ba:d5:25:55:92:e3:eb:a1:85:20:81:44:e5:
                    51:b2:bc:3e:14:60:f2:36:34:74:7c:69:fc:5d:98:
                    fb:2b:f9:d7:61:c1:c8:e0:a0:83:dd:ce:68:6b:12:
                    c8:98:ce:ec:8d:41:d6:96:dc:ef:b3:46:31:81:93:
                    0a:00:62:c1:85:a5:7b:b4:55:96:8e:61:d3:7b:01:
                    86:ae:7e:8c:80:b2:7c:3a:23:aa:aa:3c:05:7f:55:
                    10:ca:aa:8d:aa:47:57:5a:2b:4b:34:2a:5c:58:e8:
                    ee:28:72:79:ae:da:9b:31:4f:35:16:74:fd:e8:69:
                    6a:0b:a0:53:63:62:66:af:60:b3:f5:2f:39:0d:25:
                    34:99:3c:9b:a0:b6:35:9d:9b:88:04:e8:8d:79:dd:
                    17:a1:e2:1f:b8:ef:93:58:fd:1d:6c:77:60:4c:4b:
                    6c:56:dd:df:a6:6f:a0:56:93:07:5f:09:66:df:65:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:5B:6D:8A:C4:C9:FB:D1:C4:D5:B9:3B:CC:61:95:0D:72:7F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:05:5d:5a:fe:08:c1:e9:3b:c1:4a:68:86:ef:39:01:99:43:
         8f:9e:7c:24:07:30:e9:1a:9c:d4:43:00:2d:af:b7:63:11:2e:
         8e:4a:25:95:d8:82:2b:d4:f5:a5:f7:51:1c:43:ac:9c:8c:e8:
         17:1f:d3:3d:5c:58:90:e2:4e:c9:c7:51:0a:29:58:1a:b8:e7:
         4a:c4:6b:54:05:85:78:47:97:83:52:2f:c4:b7:06:b4:7b:d3:
         57:82:9e:19:ee:63:ce:26:4a:0a:e7:4f:b3:1d:0c:40:59:1e:
         9d:cc:d5:b9:b2:5e:fe:b3:2f:b3:c9:59:01:3b:8d:4b:62:2c:
         7d:b7:4f:14:3b:2f:85:74:77:f2:45:7d:f7:05:ad:ca:67:ae:
         8a:8e:17:17:75:82:a0:b7:a2:f7:8f:95:69:e4:0a:37:86:09:
         29:40:47:c5:df:bf:f7:fd:c0:6e:78:7e:d8:4b:31:30:7e:33:
         ea:a7:19:8d:28:c9:83:d2:7b:a7:42:e7:99:d1:08:62:6c:a6:
         2a:a3:f9:12:fc:92:dd:65:e3:07:0d:03:38:21:d7:61:50:d7:
         e9:f4:6c:b1:8f:d7:1b:27:06:43:84:ef:ca:50:fe:b0:9a:68:
         52:63:6b:39:35:1d:6a:e8:1d:5c:e2:f6:a3:22:8e:b9:b2:ec:
         93:9e:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:57 2024 by rpki-client on console-fra.rpki-client.org