Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa
File:                     2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa (raw, json)
Hash identifier:          xODhtpy9C7WECWbYANBPVOKorZeBwcffzFgxK17sp9c=
Subject key identifier:   F8:D1:62:6A:7C:14:6C:D0:85:F3:3C:88:B8:A3:89:3B:3F:9F:E2:57
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3D240CBBE15C55C0F380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3d:24:0c:bb:e1:5c:55:c0:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=111ed80a-a494-4564-b86f-c7945de8cbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:05:67:05:0b:ec:e8:57:13:9e:23:a1:ab:
                    02:ea:ed:43:f2:98:3b:d1:ae:e9:2b:1c:ea:bf:2a:
                    d5:60:1c:be:02:7c:05:05:2e:02:02:06:da:55:5e:
                    7b:01:bc:06:8c:6f:76:88:f7:c6:c4:58:a6:e9:5b:
                    1e:17:2f:d6:d8:74:f5:2a:df:8a:db:82:14:49:f2:
                    2a:25:5a:c9:fd:fd:ed:3d:79:9a:84:74:70:dd:a2:
                    6e:a1:f6:08:95:b6:dc:9e:16:74:e8:8b:1d:51:41:
                    dc:72:77:dd:36:6d:00:9c:70:60:2d:84:c2:ed:22:
                    f0:d2:21:f2:63:d4:8e:e1:ef:52:29:f0:b6:cf:e2:
                    f5:da:d2:b3:30:12:e1:be:2b:0c:2d:0b:88:7c:63:
                    2c:fb:4f:e4:8d:93:f0:5d:3a:5d:b1:57:d3:b7:13:
                    c2:67:7e:05:d8:ea:69:c2:ff:f5:76:6f:eb:34:43:
                    56:97:1a:79:a7:6f:37:3c:ca:68:aa:e2:ff:31:cf:
                    dd:b4:24:71:aa:52:9d:ea:9f:e3:d6:8a:04:af:26:
                    19:a5:66:40:70:d7:e2:a1:73:86:73:c6:89:6d:8a:
                    46:db:ce:ca:17:10:19:a4:27:84:07:14:b2:c5:fe:
                    03:cf:02:e4:c5:4d:38:0c:e1:36:5f:b0:9d:6b:01:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:62:6A:7C:14:6C:D0:85:F3:3C:88:B8:A3:89:3B:3F:9F:E2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e3fa8b0-6cf9-30c9-b4f5-135ae98f93d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:08:8e:18:6d:1a:85:a7:6d:91:b9:0f:c2:5b:41:b9:1b:05:
         91:f7:be:12:38:f3:20:a0:a4:fe:8f:ae:0d:36:d4:dd:d7:75:
         9a:e8:8d:f3:a4:dc:34:ff:40:87:b0:4d:ae:38:a8:a5:5e:18:
         31:25:60:89:80:b1:19:28:c5:c3:1d:38:26:a9:8e:43:51:dc:
         cf:f7:73:25:da:83:dc:84:63:2c:c8:14:49:22:f4:8e:d5:38:
         d0:f8:a0:46:b4:12:7c:bf:e7:03:fb:bd:13:bd:03:07:4c:bd:
         f6:1a:ea:03:aa:dd:58:ad:c9:ce:f9:5c:d9:9c:16:75:10:38:
         37:4a:23:0d:08:98:a1:a7:85:d0:36:dc:1e:15:01:f7:14:85:
         59:2a:bf:bd:6a:da:2a:d3:ad:69:a1:46:6e:9a:34:16:a6:3d:
         cf:0c:4f:29:9a:64:0c:db:36:09:58:95:0c:2e:6d:ec:41:f5:
         6b:63:2b:fb:8e:45:c9:85:13:f6:e7:1e:9e:db:09:60:39:c4:
         0a:15:39:c2:3b:e5:85:d7:03:7f:5e:45:39:0d:56:36:d3:6e:
         4b:f0:8d:de:7e:4a:c3:f0:49:21:a0:5a:dd:b8:ad:18:54:09:
         27:8a:5a:9b:46:6e:5c:79:7b:48:b4:04:3a:b5:68:6a:a4:e9:
         0f:3e:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:01:16 2024 by rpki-client on console-fra.rpki-client.org