Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa
File:                     6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa (raw, json)
Hash identifier:          EPeagBhWD7NFN1YHKy8obns2/Qk96yMVE6NmfB97xaY=
Subject key identifier:   62:F1:CD:0A:47:85:C2:EF:5B:E9:AA:85:48:81:3C:D5:EA:BD:12:66
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D8C0F877558D1F0F87128
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:8c:0f:87:75:58:d1:f0:f8:71:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7b189025-f4b9-41b4-b71f-3b215a84176a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:0b:93:fe:11:e5:ed:b5:65:42:d3:95:03:
                    eb:13:73:a9:c0:9c:0e:53:9d:00:a8:ec:3e:5b:65:
                    ed:ef:78:69:1c:1a:bb:e3:9a:68:3b:ba:b7:d7:65:
                    23:f3:da:5f:92:70:f2:1a:55:4b:48:4e:a2:a6:5e:
                    4a:ea:8f:63:f6:3d:0d:77:8f:3e:39:7a:f7:43:70:
                    b1:e3:3a:7a:70:ab:e2:15:5d:aa:5d:b5:31:0a:8b:
                    03:dc:e0:49:59:f0:0f:c5:ed:e0:84:30:f5:2f:b9:
                    e8:18:3a:be:10:96:28:dd:43:35:05:64:ca:b4:c0:
                    7f:fa:5f:52:42:83:3d:7f:ac:1c:d2:7b:14:9d:d3:
                    02:ca:09:20:e0:3b:63:07:6b:83:b9:1b:07:e7:15:
                    c4:96:3b:da:3b:f7:e2:bd:f5:27:e5:c1:a3:05:4e:
                    db:93:8a:6c:b2:c0:b9:68:88:eb:3b:f2:a1:74:ff:
                    43:25:27:ed:e3:01:e5:d2:25:c8:76:f0:00:15:79:
                    4d:be:7a:3c:47:65:fc:6c:44:53:9a:f3:df:56:3c:
                    71:d7:e8:b1:fd:62:db:2c:f4:b4:44:54:9b:25:7b:
                    9b:4b:74:e2:b1:82:46:1e:16:1b:89:7f:a7:bb:8d:
                    be:8e:f0:b5:3b:c2:0c:1f:be:f3:20:c4:9d:36:5a:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F1:CD:0A:47:85:C2:EF:5B:E9:AA:85:48:81:3C:D5:EA:BD:12:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6cd8b72e-cf4d-37d8-a1d2-507b4027b7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:f5:db:b8:0b:43:5f:c5:a4:c3:61:74:7d:1f:62:35:d3:b1:
         f8:3a:e4:44:0d:33:b3:0c:47:7f:97:bf:5e:c4:22:c5:f6:be:
         eb:d9:98:ff:49:fa:e5:71:df:3a:06:3d:f9:b7:a7:3f:52:0d:
         4c:dc:ae:26:a0:5d:e1:5f:53:94:03:65:e0:70:30:c6:be:30:
         9b:e5:1c:95:8d:ee:be:e0:a5:9f:5e:c9:77:e3:cb:46:1f:ac:
         9f:b9:2c:16:e1:e5:42:8a:fb:d2:a9:e8:c7:48:3a:1a:c3:24:
         2c:0a:bf:3a:c7:dc:f0:f8:83:32:88:d3:84:8b:cc:c3:76:86:
         c4:ed:30:1d:3e:7f:39:09:ab:76:d6:75:fa:20:40:62:3a:99:
         e7:5b:5c:2c:0b:cf:a0:5b:02:d2:2e:82:f2:9c:01:6f:96:99:
         2d:cb:c0:7a:25:10:2c:1b:0e:5e:94:b2:6b:41:d5:4e:71:63:
         c3:21:07:5c:15:3f:8a:e4:77:ca:10:8d:df:8b:36:1a:14:c0:
         bf:5c:19:9c:ed:47:95:94:55:81:cd:35:68:87:a0:cd:7c:bf:
         40:d7:7c:e6:93:d1:0d:eb:90:e2:ed:2c:c6:77:ea:a6:25:0e:
         a8:8e:73:6c:52:6e:ff:6a:6a:87:19:f0:ef:1c:39:b6:7f:01:
         0c:69:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org