Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa
File:                     33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa (raw, json)
Hash identifier:          a8Whu/La+QnDmcT6LBOx2NwuRMF6nS6K6B+nav0xlYo=
Subject key identifier:   32:CF:67:9F:52:34:39:51:0D:E9:7D:61:80:61:3B:E8:8B:20:BC:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DBB1095525B39A9CD4B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:bb:10:95:52:5b:39:a9:cd:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0ed82321-38d1-4d05-9af3-e2de181e2d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fe:cc:8e:e4:8f:03:2d:8f:0c:d6:4b:00:2d:
                    fc:58:89:0b:f8:3e:bf:14:25:75:5b:08:8f:ab:71:
                    9d:96:b2:13:59:22:e8:1f:83:b8:20:ad:78:91:28:
                    d3:58:57:ba:27:80:9e:ff:d7:cc:ea:47:5d:fc:65:
                    09:18:96:9a:6a:7d:1a:e9:bd:46:08:52:fe:c9:98:
                    13:2e:c3:19:ed:4e:4d:0d:64:a1:25:1b:b7:32:35:
                    d9:f2:c2:69:ab:00:d9:95:3d:ee:3e:fe:2c:54:2c:
                    ec:80:33:f5:74:4a:e3:3b:f1:40:ac:42:78:12:3b:
                    ce:9a:ae:dc:dc:40:a2:31:b4:a6:4e:27:78:be:06:
                    60:bc:4a:62:9e:e5:79:0d:d6:05:88:8b:98:33:b3:
                    0e:26:c9:16:49:64:17:75:19:67:24:b6:3c:f0:30:
                    d2:92:cb:bc:65:a4:9a:6e:aa:9c:6c:ec:d6:fc:c6:
                    72:4b:14:9b:90:3e:3a:89:e7:00:35:47:20:b2:83:
                    f3:06:68:48:5f:91:82:70:51:bd:cb:57:90:3b:69:
                    b0:b9:1e:39:7c:2f:26:52:ab:7c:94:22:a0:c3:01:
                    79:eb:de:10:e3:a8:1a:6c:cb:a5:d0:21:4f:db:33:
                    26:28:b8:33:c2:3c:49:30:3a:bd:7d:c1:1e:80:4a:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CF:67:9F:52:34:39:51:0D:E9:7D:61:80:61:3B:E8:8B:20:BC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33f64eae-d336-3410-8c6a-2de4bf6a4c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:d1:1c:0f:cc:c3:59:1d:4f:12:d9:06:05:61:08:36:e5:
         5e:cc:7a:40:f0:18:8d:1a:fc:9d:9c:4d:20:bf:67:e9:87:6f:
         10:0e:2b:b4:d6:27:65:31:03:e6:d2:94:a8:e2:e1:d5:c9:52:
         88:d7:8a:45:6b:99:dd:ba:85:37:a9:12:ee:48:08:7d:4e:d1:
         bb:94:33:5e:a7:25:9c:0f:54:ec:27:ce:02:17:2b:59:ae:b5:
         99:e1:96:48:06:ca:54:f1:2b:1f:7c:db:c4:eb:b7:5a:31:e6:
         e9:4d:a2:42:19:d1:7c:13:3f:e8:b4:45:1d:e0:a4:7b:7e:be:
         59:a7:85:f9:9c:ae:ea:8c:9c:41:24:0e:3e:1c:d5:96:1e:5c:
         f2:15:8e:90:97:9d:14:b9:ec:97:22:a3:2b:1e:0d:35:14:a7:
         8b:45:31:5e:30:75:00:3f:b5:7b:3e:61:2f:5d:d6:e1:53:d1:
         d0:f8:4e:65:a6:6e:8b:9b:cc:d8:65:af:85:8e:7f:bc:58:34:
         d3:28:e4:af:bf:3a:da:d8:2f:d3:5a:7e:74:91:96:76:5a:1a:
         3f:45:5d:29:f3:36:e6:c0:f8:72:9c:3f:0a:98:6e:15:3a:0f:
         a2:b9:f0:a7:d6:a5:cf:51:a9:a6:12:64:99:b3:06:c7:22:19:
         3d:7c:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org