Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73acbc94-adf2-3987-bad9-1b09ef4e31d4.roa
File:                     73acbc94-adf2-3987-bad9-1b09ef4e31d4.roa (raw, json)
Hash identifier:          1o2nD3a6jsOs6TweIzIeCMnepy7qbjJ+rAaoIHTI+RE=
Subject key identifier:   A2:51:87:08:97:4A:EE:88:71:2E:FB:35:D7:E1:53:23:8A:21:9A:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3CBCB27BFB09CCA55000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73acbc94-adf2-3987-bad9-1b09ef4e31d4.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3c:bc:b2:7b:fb:09:cc:a5:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0152306f-f28a-44e8-a491-731744f0dbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:6c:72:4a:f7:e7:79:88:cd:8f:e5:c1:e7:
                    67:44:2b:3e:cf:bc:f2:7d:e9:0e:80:6b:3e:c6:e1:
                    ff:9b:eb:03:b4:c7:5f:12:8a:16:61:ec:6f:89:72:
                    14:88:bd:7b:21:11:72:6f:00:68:e2:4d:b5:85:90:
                    15:72:a5:0c:30:1d:04:21:d1:85:18:d9:59:ac:5f:
                    8d:ec:88:22:80:2a:9f:1f:7e:f4:fc:2f:5d:9a:11:
                    a3:9c:48:7a:56:3c:35:f7:17:e5:ca:29:4b:b2:8b:
                    cc:11:21:4f:a5:b5:9c:33:1d:1c:32:79:40:83:6b:
                    71:4f:53:d7:62:af:9a:7f:bc:aa:ea:97:96:33:98:
                    ba:02:a7:a3:17:c4:e8:1a:c0:1f:bd:86:18:f6:fc:
                    c4:2f:7e:ca:77:aa:96:3c:4e:57:8c:a1:e4:a0:07:
                    ea:20:e7:3a:f9:19:4d:c8:1f:36:f3:da:c2:b9:05:
                    20:9a:13:69:44:b4:00:8a:a7:3d:02:01:7d:59:c4:
                    ee:b4:de:a6:e5:cf:94:93:6d:ed:01:d6:c0:3f:2a:
                    37:91:af:b1:6e:bf:6a:4b:05:a4:8f:46:7a:ff:28:
                    b5:83:b0:b9:1c:1e:a8:5a:ca:be:66:3f:01:ed:9d:
                    e0:c8:59:20:b6:c5:2f:46:ad:00:d9:e7:47:63:63:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:87:08:97:4A:EE:88:71:2E:FB:35:D7:E1:53:23:8A:21:9A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73acbc94-adf2-3987-bad9-1b09ef4e31d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:f0:ca:ac:74:e8:9c:99:16:7a:23:1f:55:1a:92:5a:35:f9:
         63:a6:70:e1:3d:20:d1:d9:7b:44:e8:b3:95:80:24:1a:26:83:
         8b:3d:80:37:2e:d8:46:6f:8c:65:f4:c3:af:40:e8:9e:36:c7:
         c3:69:ea:26:9f:69:7a:32:37:d1:83:9f:d6:fa:94:8e:ff:bc:
         77:64:79:4b:c4:96:51:4d:dc:62:33:3b:56:1c:aa:4e:f6:d3:
         b3:39:42:48:9f:40:d2:0c:4d:a7:f7:75:45:10:b7:88:a7:02:
         19:f1:41:db:41:4a:a3:e4:4e:5d:c7:3a:57:e0:3b:81:a5:62:
         3d:67:3d:9d:8f:7c:68:d9:dd:95:77:cf:ea:ce:b9:99:50:43:
         7c:de:11:3f:8e:d2:e0:46:e9:f9:e8:7c:e5:31:6f:9d:0b:6e:
         20:ad:c6:29:2e:fb:12:95:ef:94:d9:f2:c9:0c:aa:7a:a1:b3:
         3d:70:e0:50:e1:a6:34:ac:e0:38:13:f6:c1:26:cc:14:94:21:
         c8:9e:27:3d:21:da:d3:1c:55:32:2d:70:2f:7e:1a:1c:2d:35:
         54:b8:95:e8:9a:e6:c1:ec:53:7f:2f:5e:50:04:20:49:44:f5:
         eb:9a:c0:0e:c2:20:13:f6:5b:49:1c:17:eb:78:28:ed:bf:f1:
         0f:0a:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:40 2024 by rpki-client on console-ams.rpki-client.org