Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa
File:                     645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa (raw, json)
Hash identifier:          PE4zueYRg1O8V+SFS9ruVN/znxOJHfUQnEqIJy6lJ88=
Subject key identifier:   FF:E3:1A:1C:CE:13:32:F4:42:3E:AD:55:22:BD:E9:75:92:5F:C7:EA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD35B0F00791231FCA400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d3:5b:0f:00:79:12:31:fc:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=3002edc8-2a6f-4d1e-b95d-d9707283b8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:d3:5d:a9:17:e3:38:fe:2b:b3:42:50:57:
                    52:6a:14:74:e9:51:6b:41:89:17:95:32:72:89:48:
                    95:4d:11:c4:67:fe:0e:f8:a3:20:11:a0:8d:d8:0f:
                    a9:ea:36:e6:4c:bc:71:c0:8d:c9:3b:27:36:c5:62:
                    5e:4e:69:b1:70:21:d4:89:c2:a8:06:eb:e0:42:00:
                    49:39:89:34:c4:e6:3a:22:5b:f4:4d:69:ed:8f:7d:
                    15:5f:66:b2:4b:bf:e0:3a:30:01:62:0f:b3:07:ce:
                    66:dd:6b:f0:d2:38:6f:ff:a4:91:36:4c:05:83:12:
                    45:15:79:dc:3c:d8:52:02:c8:af:25:d0:99:a2:00:
                    a1:ee:40:d9:91:35:de:e3:01:57:d6:f9:b1:e7:d8:
                    9f:05:ae:e3:a6:e1:39:af:83:6b:7a:08:87:95:53:
                    cd:ff:73:cd:cf:51:87:e0:09:ca:a1:e3:a2:84:34:
                    88:d8:e6:b3:ec:3a:a8:c2:cc:77:e9:f0:0d:11:1a:
                    2f:97:b7:35:10:60:b3:e4:ad:cf:4c:af:47:3c:d2:
                    2e:13:0d:be:5e:9b:06:3b:a7:ad:6e:3a:9d:0d:7e:
                    96:83:5d:aa:92:4b:7b:4d:d6:2e:50:36:fd:7b:bd:
                    c2:a7:df:7b:40:aa:34:17:3a:b0:1c:3a:68:9f:41:
                    07:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:1A:1C:CE:13:32:F4:42:3E:AD:55:22:BD:E9:75:92:5F:C7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/645f2ad0-4c63-3f29-abe8-ceb116ec4eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:54:25:de:90:df:50:fd:12:cb:4e:f6:f1:aa:99:73:b1:ab:
         0a:ec:68:b9:74:e9:8e:32:32:2a:f9:40:8b:99:3e:76:a3:77:
         3e:9c:b7:89:e6:51:3d:05:0f:fb:9b:f8:ab:7e:bc:de:eb:f7:
         b2:5c:d5:0c:0d:14:d5:47:21:53:8b:34:00:08:bf:e5:2a:dd:
         c4:d3:5f:35:7b:92:7c:ba:b4:13:d9:79:31:43:5f:71:7f:ad:
         fb:f6:9c:ca:09:0e:fd:db:ca:60:0d:bc:66:14:6d:40:37:ed:
         0f:9c:a2:66:1d:4e:37:f2:57:c3:c2:be:13:38:a8:e0:9b:25:
         10:81:c3:52:0d:91:00:77:01:1f:9d:e2:7e:9f:cc:d5:7a:3b:
         29:f7:d5:03:25:0e:1a:72:e0:b3:22:7a:54:82:79:c8:11:75:
         1f:2e:d2:b4:3b:bf:17:7e:e7:58:37:6f:f3:03:7a:a3:6f:ea:
         24:18:15:d5:25:a3:ab:c6:f7:44:f4:7d:ac:00:bc:f6:ea:f6:
         94:39:7d:3c:32:8d:e0:16:c0:3a:72:a5:ad:d9:c5:1a:6a:d3:
         b3:34:eb:f4:c4:3e:51:3e:c6:7b:67:a6:fe:e0:f2:f6:ca:55:
         8a:5c:4d:4b:69:de:e8:a4:d0:a2:f5:90:1c:ff:f3:e0:c6:73:
         8e:cc:27:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtNbDwB5EjH8pAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzAwMmVkYzgtMmE2Zi00ZDFlLWI5NWQtZDk3MDcyODNiOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB3TXakX4zj+K7NCUFdSahR06VFrQYkXlTJy
iUiVTRHEZ/4O+KMgEaCN2A+p6jbmTLxxwI3JOyc2xWJeTmmxcCHUicKoBuvgQgBJ
OYk0xOY6Ilv0TWntj30VX2ayS7/gOjABYg+zB85m3Wvw0jhv/6SRNkwFgxJFFXnc
PNhSAsivJdCZogCh7kDZkTXe4wFX1vmx59ifBa7jpuE5r4NregiHlVPN/3PNz1GH
4AnKoeOihDSI2Oaz7Dqowsx36fANERovl7c1EGCz5K3PTK9HPNIuEw2+XpsGO6et
bjqdDX6Wg12qkkt7TdYuUDb9e73Cp997QKo0FzqwHDpon0EHRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/jGhzOEzL0Qj6tVSK96XWSX8fqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQ1ZjJhZDAtNGM2My0z
ZjI5LWFiZTgtY2ViMTE2ZWM0ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdUJd6Q31D9EstO9vGqmXOxqwrsaLl06Y4yMir5QIuZPnajdz6ct4nm
UT0FD/ub+Kt+vN7r97Jc1QwNFNVHIVOLNAAIv+Uq3cTTXzV7kny6tBPZeTFDX3F/
rfv2nMoJDv3bymANvGYUbUA37Q+comYdTjfyV8PCvhM4qOCbJRCBw1INkQB3AR+d
4n6fzNV6Oyn31QMlDhpy4LMielSCecgRdR8u0rQ7vxd+51g3b/MDeqNv6iQYFdUl
o6vG90T0fawAvPbq9pQ5fTwyjeAWwDpypa3ZxRpq07M06/TEPlE+xntnpv7g8vbK
VYpcTUtp3uik0KL1kBz/8+DGc47MJ8E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:40 2024 by rpki-client on console-fra.rpki-client.org