Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa
File:                     675039ce-cff0-376c-8b63-51645ec4d3ea.roa (raw, json)
Hash identifier:          tFgJOzIF1XGU75R2sEU0+uV9oRwzY2AqA5/xdbvZNr4=
Subject key identifier:   DF:F3:69:D9:E8:98:CC:5C:3B:13:C1:FA:C3:09:D6:23:29:5D:7D:88
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D840EF598B33818B41100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:84:0e:f5:98:b3:38:18:b4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=53332338-9423-4a90-874e-e81a82a8e462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:3f:83:db:4d:9f:bb:44:1b:98:08:3d:8a:
                    80:10:8a:80:12:0e:b7:c5:0c:50:80:a1:cc:b1:cc:
                    27:94:9b:77:b8:9c:da:7c:3e:db:7e:39:49:31:17:
                    4d:f1:c1:59:4a:0f:a7:e1:89:f8:6d:c4:2b:a6:c8:
                    bf:11:93:ff:12:8d:a3:0e:30:38:84:94:67:dd:be:
                    32:ac:93:1e:48:92:a4:f8:7f:e7:db:98:db:aa:bb:
                    ec:0e:57:8b:f7:8c:b0:02:76:ed:04:c1:8b:d9:3e:
                    b2:f9:7a:76:44:ca:8b:83:9f:b8:2d:c0:fd:bc:af:
                    84:59:2a:3e:39:c3:8d:3a:ff:c5:83:18:d3:1f:6e:
                    43:88:e2:ce:ff:fb:85:c2:07:64:fd:13:2c:6d:68:
                    ae:fd:cb:7e:09:ab:a3:f9:53:bf:2e:ac:47:31:63:
                    a5:16:a6:95:70:f5:dc:94:68:cb:d0:c1:3c:f4:fd:
                    99:72:1a:df:9d:8c:63:29:b1:1c:4d:50:9c:54:c6:
                    3f:93:a1:2c:04:15:69:e8:4f:4b:f5:34:5f:3a:e5:
                    af:c8:da:fc:a3:50:67:b7:17:3e:a2:24:98:f1:a2:
                    f0:b1:5f:45:55:cc:21:98:8d:47:dd:f2:c9:71:1d:
                    72:56:83:98:37:ea:99:72:0d:50:fc:ad:2d:89:75:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:69:D9:E8:98:CC:5C:3B:13:C1:FA:C3:09:D6:23:29:5D:7D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:d0:92:12:66:ce:63:9e:6d:c3:4a:4f:42:96:3a:28:c0:47:
         77:fc:20:d1:fc:97:ca:10:bf:15:ad:37:f4:6d:d2:22:96:06:
         d5:0a:f4:26:fb:39:01:34:f8:1e:36:24:00:a9:cc:9c:77:fa:
         f9:05:db:07:c0:73:5d:87:83:0b:5f:df:c4:5b:59:24:a1:e4:
         2b:ea:b7:86:4a:c0:48:76:d8:b1:f7:43:59:91:47:54:4e:2b:
         a3:94:b5:53:4e:d4:8c:5d:63:72:e7:d3:ff:5d:b8:12:5a:20:
         7f:f2:18:17:6f:ab:86:77:2b:58:af:fc:95:a8:3e:5a:33:d7:
         a7:3f:45:e4:74:5d:c9:fc:f5:a0:41:bf:69:8f:e0:62:71:d3:
         bd:7a:f8:f4:af:b6:f7:32:be:d3:5a:97:b3:8e:c1:af:b3:78:
         f0:56:e3:5d:6e:e0:b2:4d:65:36:2c:53:2f:63:f8:8c:5e:1c:
         f7:a2:35:9b:79:90:d7:f7:a6:51:f2:52:7a:b5:0c:ca:99:14:
         bb:15:12:05:20:7b:70:29:47:c7:43:41:f3:3c:87:1b:ad:cc:
         6f:c7:fe:ab:ea:85:5a:69:d2:2d:5e:51:74:78:f4:12:6f:23:
         06:6e:d4:1b:32:e6:26:e2:9f:f3:f8:f4:d0:e6:4c:3b:ba:0c:
         5d:22:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org