Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e611917-ab94-3c65-96d2-f7cb545c9e25.roa
File:                     2e611917-ab94-3c65-96d2-f7cb545c9e25.roa (raw, json)
Hash identifier:          ggLCuXJOARaDqPXVKq3JJA584BzJSaSHOtjxwlV7RkA=
Subject key identifier:   7D:F4:BC:FB:6A:08:1E:72:14:8F:B9:73:58:06:37:A9:54:9B:BB:61
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B03BE171F67CDDC0C6980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e611917-ab94-3c65-96d2-f7cb545c9e25.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:03:be:17:1f:67:cd:dc:0c:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=10dc77e1-1337-4210-84bd-5e5227d73215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:1a:9f:a4:33:1a:ec:64:a9:5d:57:90:0e:
                    a1:24:19:01:03:b8:3f:a4:10:4a:d7:f2:82:76:f7:
                    a7:fa:d9:db:63:7d:3d:18:7f:61:dd:50:84:74:f4:
                    74:43:de:2a:64:b7:99:74:2a:ad:52:2f:6f:72:79:
                    a3:f6:d4:13:d7:28:bf:7c:23:e3:75:fd:f8:4e:8c:
                    c2:b5:8b:9d:97:87:8f:5f:0b:78:42:20:20:ac:bf:
                    14:6d:49:41:9c:3b:9b:21:f8:88:4c:ef:bc:0e:e4:
                    5d:d1:cb:cf:4f:62:4d:6f:1a:12:5c:de:eb:ce:d9:
                    fd:b6:92:d1:e8:4c:f8:e9:c6:91:2c:c8:12:51:2a:
                    07:a5:2f:d1:51:98:93:5e:05:44:d3:2e:7e:fd:4e:
                    e9:4a:c3:b5:81:ff:92:bc:24:6c:9f:57:3a:fc:55:
                    3b:0f:9d:37:3e:0c:e3:9b:57:fe:f1:47:ed:0e:b0:
                    69:db:0b:e9:a3:12:70:e6:5e:39:8b:0f:45:1d:69:
                    8e:96:39:68:26:64:0b:2e:35:2c:9e:a5:ca:d6:3d:
                    5a:49:9d:9d:d6:e5:5d:2f:bb:d3:29:64:63:af:8e:
                    b1:4c:f2:5f:ad:34:dc:49:80:45:92:99:9c:63:f1:
                    be:d2:3c:95:87:87:d1:5b:87:f1:2c:86:f9:d8:2e:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F4:BC:FB:6A:08:1E:72:14:8F:B9:73:58:06:37:A9:54:9B:BB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e611917-ab94-3c65-96d2-f7cb545c9e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:97:3f:1e:3a:ed:2c:ca:59:e5:5f:57:f1:ec:60:eb:d2:be:
         65:4b:67:a7:21:f4:b2:c7:88:36:ad:81:b7:47:c7:9e:5d:94:
         a4:d8:ed:9e:a0:3d:9f:d2:4d:e4:b8:53:11:5e:36:d6:e2:a8:
         9b:1d:71:cc:63:61:10:bf:b7:32:22:1c:c4:e4:41:0f:31:6d:
         f4:e4:b6:6b:ca:61:c8:dd:c6:93:19:05:d7:e7:18:4c:37:4c:
         3f:59:52:02:ae:b2:38:86:d0:72:e4:cb:7b:20:16:93:3e:f8:
         24:3f:9f:3a:c7:2f:3a:d4:2d:b6:6a:e0:3c:c9:11:2d:05:e4:
         22:ba:fc:93:bb:fb:e5:f5:7a:de:44:31:90:71:ef:99:7d:2a:
         b8:83:7a:7b:8c:9c:9c:b8:ff:54:49:cf:b9:c0:72:7a:82:c8:
         8e:52:60:f5:e7:67:c5:93:11:16:27:d8:2b:29:22:10:c4:12:
         0c:bb:e5:61:b4:34:81:ff:30:29:00:89:69:24:44:b2:a1:79:
         ce:dd:1e:22:98:79:05:64:43:6a:ef:e7:ee:d4:57:2f:11:2c:
         50:e4:14:9f:c1:db:e3:85:38:97:f2:0d:96:62:1d:1a:e0:0f:
         b6:8e:46:5d:94:a9:2c:3a:3d:5d:db:61:95:c5:1d:bd:5c:e9:
         5a:47:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:16 2024 by rpki-client on console-fra.rpki-client.org