Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa
File:                     7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa (raw, json)
Hash identifier:          3B8TPcwTIHefBkwfL9Xad6Xvj3Q/2Lc+zfWUS1G/E5Y=
Subject key identifier:   62:17:0A:C1:32:C8:29:72:42:68:86:BF:FD:51:E7:DA:0A:27:B9:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DBBBC7041D3D0B03C3D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:bb:bc:70:41:d3:d0:b0:3c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f7371f80-eb66-4722-aa37-aa62b2e54e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:74:da:e5:42:69:3a:c6:be:06:05:bf:d0:
                    5b:4d:b0:26:7c:b2:3c:a7:df:34:47:cd:58:8f:e0:
                    16:0b:98:08:9e:52:91:5c:13:1c:87:d9:8a:f4:df:
                    7f:0b:db:08:1e:2f:1a:43:92:cb:c4:47:e6:62:8d:
                    e3:f5:20:f4:8e:a4:ab:5e:79:48:70:68:64:e5:91:
                    4a:de:38:8d:fc:0e:0b:d0:fe:01:e3:c5:eb:c3:2b:
                    6a:63:3b:46:03:47:d6:1e:3c:65:87:d4:99:29:10:
                    66:a2:a5:66:88:72:0e:e8:f7:fe:22:18:9f:af:f1:
                    1c:ce:c6:dc:9f:e8:17:40:2b:fc:fd:54:7e:d7:b9:
                    95:04:47:e9:db:19:e8:da:10:c8:3d:6a:ba:d6:7b:
                    00:84:ae:85:cc:a8:6b:16:14:8c:36:4b:c2:82:40:
                    06:1e:a6:ec:8a:41:7e:82:cf:90:c1:33:bb:9b:35:
                    b5:ef:90:8e:85:d8:e7:b4:7a:aa:eb:06:f1:aa:65:
                    13:b6:89:45:d8:b0:40:c7:77:76:0a:54:ff:29:35:
                    55:7d:b7:e8:6d:98:f2:c3:f2:6a:00:64:03:80:94:
                    51:da:ce:8e:e8:cc:4c:cb:c7:3e:17:9b:a4:2e:31:
                    85:92:c1:09:9b:9d:3e:60:d7:15:37:e3:00:37:3d:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:0A:C1:32:C8:29:72:42:68:86:BF:FD:51:E7:DA:0A:27:B9:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f531aa3-78f1-3f4f-bf6f-1168708beba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b4:b8:48:08:c6:90:ae:5a:0f:33:21:d4:05:17:53:19:4a:
         05:bf:65:03:47:fe:54:cc:9f:fd:f1:c2:f2:5e:3d:40:85:21:
         df:be:fb:3c:fd:90:3b:0d:1d:cc:0d:88:bb:51:56:43:d2:d0:
         26:ae:47:a0:33:fb:72:10:2b:9d:cf:86:df:23:7b:d3:66:ab:
         45:d3:b9:37:32:07:6f:fd:fa:a6:d0:ba:cc:db:38:c6:5f:2f:
         f0:d3:c6:72:63:4f:9b:2d:1d:5e:c2:94:cd:24:68:c7:a6:f1:
         30:c1:6e:e5:47:88:4c:ca:58:f6:42:4f:31:f1:a0:e9:0f:2e:
         a5:cc:cc:8c:ed:e5:38:4e:26:f6:a6:28:d5:51:81:36:7a:fa:
         65:1e:99:36:13:00:1b:6d:0c:b1:b2:2d:0c:29:38:5f:ae:81:
         02:32:f1:38:71:d6:91:a5:0f:83:fe:0e:b5:34:25:2b:61:30:
         f3:98:78:c7:b2:13:05:49:bd:cd:2c:70:b3:c0:dd:d4:55:da:
         a5:99:b0:78:98:f2:7a:f5:1d:d6:bf:ed:cc:c2:e3:47:6e:be:
         c4:9d:f5:f2:eb:f9:66:c6:57:b6:e1:a0:bc:be:69:4b:60:5e:
         ed:7b:84:7f:ac:1d:92:3d:0c:29:86:77:d8:5a:37:97:e5:9a:
         e1:e8:da:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPbu8cEHT0LA8PQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZjczNzFmODAtZWI2Ni00NzIyLWFhMzctYWE2MmIyZTU0ZTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RZ02uVCaTrGvgYFv9BbTbAmfLI8p980R81Y
j+AWC5gInlKRXBMch9mK9N9/C9sIHi8aQ5LLxEfmYo3j9SD0jqSrXnlIcGhk5ZFK
3jiN/A4L0P4B48XrwytqYztGA0fWHjxlh9SZKRBmoqVmiHIO6Pf+Ihifr/Eczsbc
n+gXQCv8/VR+17mVBEfp2xno2hDIPWq61nsAhK6FzKhrFhSMNkvCgkAGHqbsikF+
gs+QwTO7mzW175COhdjntHqq6wbxqmUTtolF2LBAx3d2ClT/KTVVfbfobZjyw/Jq
AGQDgJRR2s6O6MxMy8c+F5ukLjGFksEJm50+YNcVN+MANz33FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIXCsEyyClyQmiGv/1R59oKJ7lBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Y1MzFhYTMtNzhmMS0z
ZjRmLWJmNmYtMTE2ODcwOGJlYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABq0uEgIxpCuWg8zIdQFF1MZSgW/ZQNH/lTMn/3xwvJePUCFId+++zz9
kDsNHcwNiLtRVkPS0CauR6Az+3IQK53Pht8je9Nmq0XTuTcyB2/9+qbQuszbOMZf
L/DTxnJjT5stHV7ClM0kaMem8TDBbuVHiEzKWPZCTzHxoOkPLqXMzIzt5ThOJvam
KNVRgTZ6+mUemTYTABttDLGyLQwpOF+ugQIy8Thx1pGlD4P+DrU0JSthMPOYeMey
EwVJvc0scLPA3dRV2qWZsHiY8nr1Hda/7czC40duvsSd9fLr+WbGV7bhoLy+aUtg
Xu17hH+sHZI9DCmGd9haN5flmuHo2iQ=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org