Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa
File:                     6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa (raw, json)
Hash identifier:          9Vsp6WEphflVgjaRcS3nf5CWW8A2/DXqsUWuWeonHxE=
Subject key identifier:   7A:DD:2C:22:8D:B6:EB:E0:E5:FF:AA:13:F2:5C:DC:E3:A6:4D:00:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A42460F027A316DEF8B30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:42:46:0f:02:7a:31:6d:ef:8b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=819c1b81-44cc-43a0-aa13-a1491f442679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:92:60:d4:2a:e8:2e:10:ee:dd:de:38:12:
                    20:72:92:95:5e:d1:18:c3:8e:a8:f7:aa:dd:2e:4a:
                    f6:fb:f9:c8:d2:38:0d:d6:63:73:0d:9b:97:dc:23:
                    fa:81:b7:2d:ee:c5:bf:9e:12:23:b1:2e:11:ab:38:
                    fe:bc:f2:0e:5f:6e:69:2c:e5:ca:66:e1:08:83:da:
                    30:68:dc:6a:a9:d8:6c:b0:40:b9:b8:9d:ec:8e:91:
                    71:b5:38:f5:60:ad:3c:34:bf:fe:00:35:2a:48:8b:
                    ac:ce:0e:18:c3:d9:db:21:cb:46:67:90:dd:f7:c2:
                    fa:15:1c:e9:7b:94:a9:be:af:7c:76:c6:68:3d:fa:
                    a4:4e:91:07:db:9d:3f:3e:65:ca:80:52:66:b1:dd:
                    70:8c:45:1d:b3:68:06:2c:79:9c:96:1c:d9:ca:43:
                    1b:f2:a1:70:57:45:36:f2:d8:2c:5c:9c:b1:e8:62:
                    c4:2b:e4:2a:12:38:d8:22:75:59:ec:17:5d:99:59:
                    ff:14:cb:f1:f8:85:5a:2f:5b:31:6b:1b:18:30:28:
                    11:54:9c:59:66:21:72:6b:fc:da:7f:50:ae:5b:92:
                    70:7d:87:e1:13:c7:16:4d:4d:30:fa:29:52:f4:e6:
                    fc:06:a4:db:15:ff:65:17:62:88:e9:55:1e:16:92:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DD:2C:22:8D:B6:EB:E0:E5:FF:AA:13:F2:5C:DC:E3:A6:4D:00:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:43:1c:4c:90:82:23:1a:3c:d5:72:cf:be:e4:2e:75:66:
         e3:b2:ac:63:5e:7a:f7:75:e8:db:5c:91:2d:33:ae:79:0c:02:
         1c:51:fc:62:c7:a3:c3:0c:87:99:36:5a:a2:aa:94:59:7c:89:
         1a:82:a2:5e:e7:28:15:70:45:7c:a4:45:01:f0:0a:76:f4:be:
         96:c5:74:20:a9:28:3f:08:68:1f:9e:fa:43:2d:0c:a1:87:16:
         c2:ff:e4:bd:50:42:99:36:bb:0c:69:af:76:b8:24:8b:74:7e:
         b4:50:63:79:a7:01:0d:47:a4:ce:08:aa:43:f0:a3:c9:e2:e0:
         8a:30:d9:83:ca:db:90:98:5b:15:f5:af:85:74:d4:9b:9e:66:
         03:5e:64:0e:7f:29:eb:8e:2b:94:4d:60:ee:8f:95:28:f0:85:
         d1:ed:2e:45:a5:ba:a9:f1:f2:73:7b:93:a4:9a:30:e4:ed:99:
         a2:54:19:76:cb:97:10:21:d1:f0:5a:50:b4:13:18:71:c8:64:
         2d:c3:af:ff:27:aa:25:08:e5:a6:e4:7e:ed:3b:66:ca:a1:f4:
         d9:5c:bc:5b:58:62:82:1b:33:65:05:46:ec:e0:32:51:6f:cc:
         17:fa:7d:15:39:df:63:31:49:63:c0:66:04:12:31:53:79:9e:
         76:94:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:56 2024 by rpki-client on console-ams.rpki-client.org