Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640aba5e-71ac-34f6-9edc-010a498fd9e5.roa
File:                     640aba5e-71ac-34f6-9edc-010a498fd9e5.roa (raw, json)
Hash identifier:          nwUdsrP21qXkXP1dn0MjuTvd47ddwufX+g6ECUk7edE=
Subject key identifier:   03:5A:78:B3:01:3C:ED:56:22:9A:CD:7A:EF:52:1F:42:5D:3E:E8:DA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DBC5F0661F7FB8385B160
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640aba5e-71ac-34f6-9edc-010a498fd9e5.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:bc:5f:06:61:f7:fb:83:85:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=dd18aa50-9c4a-4ec0-a60b-38e471da956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:57:9e:a9:6f:c2:ba:31:9a:43:58:53:13:
                    44:81:b3:17:ad:20:ce:c0:36:15:15:74:f7:f2:ee:
                    d1:3f:fa:1a:24:26:48:2d:a4:b4:d1:8c:7c:ce:6b:
                    17:0c:a5:4e:87:29:b7:fe:48:d1:41:ee:d3:7b:e0:
                    55:fa:20:df:63:cb:19:8e:ca:b6:c7:26:8b:3f:15:
                    e4:ae:46:9b:e7:0a:fb:7e:17:93:2b:dc:4f:83:4f:
                    f3:a4:ef:11:9a:1a:48:d1:05:ca:b1:18:d1:aa:2b:
                    50:de:9a:d4:89:87:01:39:e2:f7:2f:92:d9:fa:0b:
                    c5:c2:94:9f:c3:eb:2b:4f:ed:65:d0:b1:58:f9:c1:
                    e5:52:3c:c0:a7:30:96:d5:fe:77:b6:1a:07:98:a7:
                    60:7d:45:d8:b9:f0:da:e0:d5:48:65:b8:04:bb:55:
                    6b:32:78:a5:1a:c4:b2:05:cf:7b:3b:cf:10:65:c5:
                    22:0a:29:23:40:de:bb:4a:c7:e2:a4:0f:98:01:27:
                    77:43:b9:8d:7e:84:ec:87:88:74:57:53:24:34:68:
                    31:15:9d:82:9b:57:13:06:56:03:54:ca:82:a0:25:
                    bd:6f:e0:cb:57:e8:c4:c8:6b:f8:c7:bb:6d:d3:54:
                    de:ff:cf:79:28:61:ee:16:77:0f:ce:b4:6d:f5:ad:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5A:78:B3:01:3C:ED:56:22:9A:CD:7A:EF:52:1F:42:5D:3E:E8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640aba5e-71ac-34f6-9edc-010a498fd9e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:fb:c1:2f:7a:dc:27:74:69:80:5f:d6:85:90:19:98:e9:
         cd:de:cc:48:ab:8f:50:dc:56:af:be:c5:ec:97:9c:c5:ea:fc:
         70:e2:17:f0:7a:3e:93:4b:11:5d:e2:1e:09:70:31:b2:c6:0c:
         d2:fe:8f:31:64:15:b2:dc:b0:91:2e:93:91:17:80:35:4c:95:
         4e:51:5b:b2:1a:45:46:c8:09:77:f2:e2:e2:27:8a:0c:b4:e6:
         92:f5:36:e9:cf:b1:a5:fe:22:c6:37:9b:5f:dd:6a:43:3e:a9:
         4e:74:db:18:8f:b8:79:a3:3d:b5:39:7f:40:8f:21:0c:4b:68:
         33:e9:8f:3b:d6:5d:bc:2d:e6:43:1b:ef:cf:da:7b:f9:93:bf:
         09:6c:75:a7:d2:62:4c:29:cd:d9:4f:c4:f4:26:e9:67:51:0f:
         8b:4d:ad:04:a3:14:8b:a7:44:d0:27:77:b8:45:98:8b:e8:a2:
         55:4d:1f:96:02:70:26:02:6e:02:27:11:11:17:61:21:a2:9a:
         37:85:07:80:53:1e:1e:a9:75:d0:de:d4:85:a0:25:bd:2f:08:
         df:ac:9f:08:ab:01:32:36:60:27:fe:78:c7:80:38:97:b6:9b:
         c3:37:16:6b:ee:9c:f3:31:47:75:2f:72:45:dc:a6:82:67:b1:
         eb:23:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:39 2024 by rpki-client on console-ams.rpki-client.org