Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa
File:                     53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa (raw, json)
Hash identifier:          QPPmvSXDHD8z/hS5RleGEDGYvvPJ6/HIgBLDIB1+z+4=
Subject key identifier:   EA:18:69:0B:2D:9B:74:55:9A:7F:7D:FF:DA:9C:88:B9:DA:C9:1F:F9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3F9850D96CFC68D57780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3f:98:50:d9:6c:fc:68:d5:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2f80d520-b638-42af-b1d1-2417fefc36f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:22:c1:2a:f8:ca:7a:49:18:42:15:bc:2a:
                    19:d3:4a:a3:c7:2b:a3:48:16:04:32:5c:ad:11:bb:
                    b4:ca:cd:f0:c7:4d:32:f2:1a:b9:ed:42:38:a5:7a:
                    56:93:b9:99:c0:7b:e2:b1:54:f9:15:b5:ab:3c:2c:
                    9c:0b:09:29:c0:b3:e1:56:f7:ce:5e:5e:23:01:8b:
                    c4:ac:60:d6:9a:bc:8c:bd:99:d8:b2:62:18:b8:ca:
                    7a:ef:7e:96:e5:1c:f7:20:94:5a:80:75:4e:e1:36:
                    f1:92:51:8d:60:7a:c6:4d:7d:df:cd:d8:a6:7c:63:
                    f7:6d:06:17:2f:15:be:84:54:0b:75:17:03:07:9d:
                    e4:f9:17:73:33:43:28:41:be:19:b8:2c:63:ae:7d:
                    4c:af:bf:ef:89:a6:37:d7:62:f0:56:6c:09:0a:a5:
                    8c:61:fc:6e:f0:d9:d5:0a:e7:52:3c:65:a1:3d:79:
                    62:4d:25:cb:18:89:92:d9:c8:bc:cf:65:d7:a0:fd:
                    23:12:45:de:5e:7a:a2:81:d5:9e:fd:45:07:88:07:
                    d6:37:35:d3:fa:07:4a:38:16:30:9c:1b:61:6f:5d:
                    a0:90:ef:2d:21:3d:ab:5b:1c:bc:09:45:a0:6c:b8:
                    d7:70:a1:ff:3b:e4:fd:3e:3f:1f:79:63:19:b0:65:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:69:0B:2D:9B:74:55:9A:7F:7D:FF:DA:9C:88:B9:DA:C9:1F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:2d:af:8a:a9:d9:d4:9c:1b:54:a1:aa:b3:c5:8a:f7:29:
         62:cd:c2:c4:d8:6a:06:4f:af:ad:47:06:d8:58:1a:fd:25:b2:
         bd:fd:0e:16:99:f9:75:82:0c:a0:fe:ea:88:0f:e4:ef:70:37:
         75:3a:ae:37:01:58:e4:b5:c8:8b:e6:1b:3b:80:9d:a2:49:6b:
         b2:48:b8:de:3b:88:5e:2b:73:48:83:7e:5f:af:87:c3:69:79:
         8f:0f:d4:b8:69:b1:be:96:40:82:aa:53:7d:02:fc:68:f9:52:
         01:98:55:ae:24:f8:23:00:f7:ad:45:88:ca:3e:34:4b:48:63:
         3c:c9:2b:e1:1d:09:8c:f8:e7:22:e1:4b:03:4b:ff:27:81:9a:
         a9:f2:6d:f9:ae:1b:29:6d:b5:26:b9:77:c8:a0:4b:4a:60:74:
         85:4a:52:22:6a:c5:e3:07:e6:f8:9e:30:f3:ea:c9:2b:78:7b:
         79:7a:44:7c:99:13:1a:b4:51:4b:19:2d:62:af:35:66:f2:63:
         16:e6:a9:d1:6d:12:8b:d5:a4:20:4a:28:f6:61:d9:fe:b0:b6:
         e6:76:14:82:4a:b0:2b:3b:63:05:9c:ce:74:02:d6:c4:eb:e4:
         6d:26:1f:d3:fa:30:6f:79:df:f6:ae:32:61:a9:08:cf:1f:1f:
         c0:89:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:01:31 2024 by rpki-client on console-fra.rpki-client.org