Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa
File:                     76ade4c3-aecd-39e9-bf4a-819928a81695.roa (raw, json)
Hash identifier:          8+s56MebBrVSoiJop9I3hkr8u1U7gqQQA7h15imCeEk=
Subject key identifier:   88:76:FC:E6:E8:D1:50:D8:EC:8E:C9:5E:7F:50:0C:66:F9:FB:AA:DE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B0352BBA125111E345A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:03:52:bb:a1:25:11:1e:34:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a1581c05-104d-4831-a8c2-994b387960cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:df:70:6a:cf:3b:f0:62:f7:b2:55:e2:05:
                    60:0f:44:94:06:2d:18:6d:cf:e3:1d:eb:de:b1:81:
                    ee:7e:b8:3f:52:5d:06:ff:9d:da:a8:f0:7d:03:a7:
                    63:c2:2b:5f:58:3c:3e:2f:ee:25:b4:d2:0a:09:52:
                    fe:45:50:98:be:a6:b2:2e:1b:f0:61:08:2a:ab:a7:
                    4a:d6:37:9f:f4:9e:f2:19:06:b4:0b:ab:2b:fc:10:
                    0d:60:69:77:41:2d:b5:8c:0f:0a:7f:e4:95:2a:4b:
                    d4:a5:7d:ae:03:6b:25:17:8c:bd:3f:59:8a:16:a2:
                    c8:90:85:7a:b6:0f:44:db:d8:9a:1d:65:f1:0c:ca:
                    2f:f4:74:06:24:91:50:a5:19:7f:e9:78:e4:5a:45:
                    1d:47:f4:7b:74:0c:2a:b8:0e:b0:4b:18:0e:97:b5:
                    c1:fd:7d:c5:3d:88:9f:61:26:b4:69:01:ec:e8:5e:
                    ee:fc:b3:9c:e7:33:6a:75:08:28:d7:1e:a6:93:89:
                    c9:12:f9:f2:f8:8d:e1:65:eb:fa:29:2e:e8:7b:87:
                    f0:27:0a:4b:25:1d:9c:eb:3e:83:f0:73:09:68:1d:
                    0b:17:98:84:a9:90:ba:cd:36:02:1f:ad:89:74:19:
                    3d:b3:75:2a:20:37:74:7b:9f:d3:1c:49:0e:e6:e0:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:76:FC:E6:E8:D1:50:D8:EC:8E:C9:5E:7F:50:0C:66:F9:FB:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76ade4c3-aecd-39e9-bf4a-819928a81695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:58:e8:86:bd:13:62:4c:69:50:3a:1c:2c:a9:e6:f1:f9:98:
         1f:b2:40:de:12:77:8c:78:5e:20:ce:21:68:37:9b:37:7e:91:
         2e:85:42:48:c3:c9:0b:b5:66:fe:40:c3:8e:31:cf:84:25:fc:
         5b:ab:c7:8f:fa:19:f2:a4:d1:16:87:4d:bc:fd:98:3e:41:17:
         2a:47:cb:5c:4b:ae:67:b4:4c:3e:07:0b:2d:25:a4:e7:1f:99:
         4e:cf:64:2f:09:fb:1e:e0:dd:f7:c7:68:69:53:be:ce:74:c0:
         70:e3:7c:87:b3:a9:ea:1f:43:39:c0:fd:f1:69:01:f4:73:40:
         91:f8:24:35:85:fe:8e:e4:33:7c:bc:ef:66:fc:c7:f1:9a:c0:
         9c:64:3a:14:47:cb:81:7a:07:1e:8f:39:75:1e:f9:9e:e7:72:
         45:53:8b:0c:ae:ea:da:f5:76:27:e8:60:c4:43:92:70:61:45:
         43:b6:33:fb:fe:c2:24:66:ea:eb:80:59:6b:0e:21:79:fe:96:
         93:b3:dc:05:f5:39:8a:56:ce:c5:3a:3a:5d:15:93:8e:d2:19:
         a4:94:b9:8c:57:bc:17:cc:3c:e3:da:94:bf:d4:51:a6:cb:dd:
         03:86:7d:98:da:ea:40:c3:9e:72:3a:27:ce:cd:1c:b6:c3:58:
         ee:aa:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:01:46 2024 by rpki-client on console-fra.rpki-client.org