Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e0fa426-4839-30f6-88f3-9ebeac59596d.roa
File:                     3e0fa426-4839-30f6-88f3-9ebeac59596d.roa (raw, json)
Hash identifier:          UPRu4qN3B+94kepcrXz4wlb5rNr5C80A7EpY7YCHyqk=
Subject key identifier:   D2:6E:CF:AE:25:B4:10:87:DF:CE:95:8F:72:3F:C4:57:3C:2E:C5:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E04A9DC0BA6184EC65480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e0fa426-4839-30f6-88f3-9ebeac59596d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:04:a9:dc:0b:a6:18:4e:c6:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=aab87cdf-9f21-48c7-a7db-31ec8c3014a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:d0:c0:7e:a5:f4:b5:72:bb:6d:0b:b0:44:
                    70:39:3c:98:fc:7c:96:cc:75:18:f9:93:ce:f8:93:
                    b4:bf:6a:f4:3b:36:73:d0:39:98:9c:b1:04:b7:d0:
                    f5:68:a6:c8:a4:75:70:d0:97:20:e7:cc:89:ae:a8:
                    58:97:87:f3:7f:e5:39:d1:78:06:6f:06:47:61:89:
                    e2:3d:9f:f3:f5:bb:29:5c:95:c4:9a:70:fb:fb:27:
                    f5:97:fc:8a:ec:5e:50:1a:92:a5:9b:20:97:24:71:
                    4b:f8:a6:d2:1c:3b:f3:a9:50:a5:ee:9b:d7:6c:f9:
                    64:40:80:92:bb:b4:36:61:c1:31:25:df:68:0f:1d:
                    48:25:c6:a6:e0:13:bb:9a:65:cc:a8:3b:47:61:6b:
                    bd:d5:a5:96:ee:de:8b:39:3f:35:5c:30:38:17:78:
                    4d:cc:3c:be:ea:4b:19:a1:8b:dd:d0:08:e3:1d:65:
                    19:8c:9f:72:a1:bd:51:d7:79:63:9e:aa:25:64:3f:
                    f4:35:c3:99:6d:38:4b:f2:3a:3d:e5:13:7d:71:06:
                    f9:c8:e6:a5:7a:e8:f6:6e:13:72:36:ff:50:c1:7d:
                    69:33:71:3a:32:54:ec:8d:5e:39:65:c8:17:9f:9e:
                    8c:2b:8c:6d:1d:ff:8f:63:64:7b:2d:3d:ce:0d:3a:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:CF:AE:25:B4:10:87:DF:CE:95:8F:72:3F:C4:57:3C:2E:C5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e0fa426-4839-30f6-88f3-9ebeac59596d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:9e:91:7e:66:c2:88:bc:ee:de:2d:d5:87:e6:f8:13:6b:f3:
         fa:8f:d2:c0:a1:82:ab:57:3d:92:7c:76:2f:6b:ab:59:5a:b0:
         83:30:e7:b3:0e:07:84:2c:6e:4d:45:b3:65:29:b4:09:89:d5:
         4e:8a:89:6c:37:30:4d:1b:cf:20:65:af:ac:d4:7b:5e:17:6f:
         08:31:52:67:b6:dd:a0:9f:86:51:38:2a:1b:47:09:0e:57:d0:
         0d:8c:8c:0b:20:0a:0e:2c:b4:61:bf:63:9f:56:4c:90:8c:78:
         e7:d1:c9:de:94:21:66:0c:7d:21:7a:6e:7b:5a:44:c3:d9:a1:
         b6:c7:09:4f:dd:29:e8:a9:66:fe:61:7a:ec:f2:0c:e3:24:28:
         1d:39:41:59:ad:d3:78:cf:d3:10:1f:bb:04:f3:d2:7b:e4:f9:
         9a:8d:f4:ec:b7:c6:09:b6:eb:8c:7e:42:c4:21:07:12:47:14:
         52:dd:d7:8a:d1:ad:0f:ac:a9:e4:50:96:52:f0:a1:87:0d:3e:
         3e:3f:f8:bf:60:62:f0:e2:77:2c:9a:cf:8b:73:0b:f9:53:f3:
         64:4a:2f:07:4b:e0:06:8d:cb:c4:ff:36:82:f5:84:d7:30:dc:
         3e:7b:78:42:3d:8b:c8:f0:f4:9d:1e:6a:c4:0e:42:ba:a8:27:
         34:80:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org