Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bf7d787-f9b9-3feb-9372-ab2f82937186.roa
File:                     5bf7d787-f9b9-3feb-9372-ab2f82937186.roa (raw, json)
Hash identifier:          ffmNsGYhgXPsee7UO/7qHX3wpzPpNxLbY+/S5Q90XUU=
Subject key identifier:   21:0C:5C:C3:C0:4F:39:23:91:CB:7B:91:71:FD:8D:A4:92:4D:38:5B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3BF41DB94B7B38FAE080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bf7d787-f9b9-3feb-9372-ab2f82937186.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3b:f4:1d:b9:4b:7b:38:fa:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4c422e0d-8922-4db8-9363-d58406c01d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:89:fd:49:53:a5:a7:67:32:89:ad:0c:d8:
                    6f:4b:68:d4:f7:18:96:1c:1b:84:9c:dc:71:c6:ff:
                    96:79:df:ab:e9:17:02:1d:9f:05:b4:b3:4d:58:8c:
                    eb:56:29:a9:a5:3f:dd:d7:af:00:3e:14:58:80:b3:
                    f0:e8:c4:43:22:09:9a:69:53:50:54:c5:84:8a:1b:
                    85:bc:84:62:24:9e:f2:8c:98:42:17:a7:dd:6c:03:
                    a6:bc:5d:82:0b:96:cb:21:43:17:8d:f3:99:73:d1:
                    c1:55:2f:3c:40:fc:ec:d6:3c:c0:bb:3f:39:ed:85:
                    04:75:00:0e:4c:93:5e:15:38:30:40:b5:38:a8:58:
                    e0:a0:a3:9c:a0:b3:8a:55:6b:36:77:64:fd:ce:3e:
                    83:27:a8:1d:98:9a:60:8f:34:7e:36:c3:63:da:06:
                    28:61:53:13:ce:52:32:94:0f:7b:fd:f2:31:5a:d7:
                    ed:11:63:a5:69:29:8c:62:d8:65:84:44:1f:70:30:
                    22:0a:5d:ff:4f:9e:30:59:26:a0:e2:8a:27:df:29:
                    e3:9f:65:4f:aa:72:5c:00:4f:c0:f3:9d:e1:3d:61:
                    8a:2c:bb:1c:04:64:20:5c:19:d5:96:e9:b7:73:79:
                    c8:58:26:26:5e:13:99:8f:f7:02:73:cb:ad:b8:89:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:5C:C3:C0:4F:39:23:91:CB:7B:91:71:FD:8D:A4:92:4D:38:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bf7d787-f9b9-3feb-9372-ab2f82937186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:64:34:c7:69:a1:0e:8a:2e:37:ed:a3:35:27:6f:83:0c:c6:
         4a:ef:77:67:d0:a1:49:cb:e7:81:07:74:42:6e:3f:94:e0:ae:
         c4:5a:45:38:39:56:79:be:35:03:04:5f:25:ee:f9:b4:80:d5:
         09:ea:1d:67:e8:2a:c1:7a:96:df:87:17:36:27:74:ee:44:e5:
         f2:df:47:d8:86:dc:4f:c6:68:4b:17:b7:8d:fa:55:9d:c6:ba:
         16:ed:95:8c:ff:ad:6f:f3:58:67:d1:00:5a:d4:93:e8:48:1c:
         fa:45:1d:9d:7c:1d:28:20:bc:27:85:f1:42:e6:fc:14:58:f4:
         7d:dc:c6:4a:f5:5a:30:59:4a:a2:73:7c:47:18:56:ea:c1:6b:
         7d:29:8c:c7:a6:26:e6:eb:36:6a:b4:19:d1:9f:70:5e:16:83:
         be:82:e3:c3:e8:21:69:6f:a7:90:60:77:a3:4d:0b:0b:0f:52:
         1e:14:8a:0b:6a:10:b3:e1:ac:ad:46:06:ab:3c:21:f9:8f:b6:
         43:d8:31:fe:2d:c2:ce:a0:ae:c9:70:5d:1f:f0:d6:6e:f4:a5:
         2a:0f:01:2d:c6:06:d7:30:f0:25:97:72:b9:8f:ad:7e:1f:ad:
         e9:35:d6:34:7f:25:e1:92:5d:59:a2:17:59:84:33:77:7b:be:
         0c:03:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org