Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88316754-8b4d-3a43-bd9a-51940ed2a2d9.roa
File:                     88316754-8b4d-3a43-bd9a-51940ed2a2d9.roa (raw, json)
Hash identifier:          +NEISS8esUuJwFcvdugPBDoVvbT7MiDcA9qcve0ffZE=
Subject key identifier:   52:56:35:DE:A8:9E:B2:41:16:D2:26:9A:74:75:91:DD:DF:C6:FB:9E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AFED4ED6ABEC8E91F1080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88316754-8b4d-3a43-bd9a-51940ed2a2d9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:fe:d4:ed:6a:be:c8:e9:1f:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=93a59282-3ffa-4fe1-909c-7ed1e448ed95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:0a:8b:58:81:cb:b1:d8:07:47:70:d9:11:
                    03:08:97:fe:66:20:01:97:3a:c0:d0:4e:51:35:05:
                    2a:b1:e5:60:d2:10:fe:d6:d7:c2:d6:3b:b4:81:13:
                    70:c7:68:cd:97:3d:cc:d3:0f:87:e5:f2:20:dd:02:
                    3a:c8:50:8d:10:7f:7c:ea:c2:05:c4:eb:dc:d9:f1:
                    55:9b:2e:92:87:d3:81:c8:11:6e:46:1e:f1:d8:89:
                    f4:e3:4e:e8:0f:cf:d4:90:36:8b:f4:9d:b1:61:e7:
                    8d:6a:4d:f7:d4:d8:83:4a:5c:ac:b1:4c:9e:1d:49:
                    f4:d1:95:f9:82:30:33:2f:79:c6:d1:26:01:17:0e:
                    33:08:d9:19:c6:5a:9e:ef:77:46:94:d0:32:0a:76:
                    af:6d:ab:13:2f:fd:cf:ec:85:7c:1d:14:03:5a:be:
                    27:8d:76:99:76:55:d8:43:8f:bb:aa:e9:44:5a:e5:
                    5a:c1:68:94:09:bd:be:34:b3:fc:8c:df:6f:0e:13:
                    46:ad:00:7a:ea:ac:eb:91:d1:2d:98:22:63:ec:f9:
                    62:4c:1e:9f:64:52:4e:66:5e:9a:14:76:e0:e5:18:
                    89:ea:80:f3:ef:00:21:2d:64:94:7c:e1:02:d7:b7:
                    a3:f6:f7:d8:0a:6b:7b:f3:b9:d7:36:9f:0b:3b:b5:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:35:DE:A8:9E:B2:41:16:D2:26:9A:74:75:91:DD:DF:C6:FB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88316754-8b4d-3a43-bd9a-51940ed2a2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:7e:ee:70:5f:77:56:a4:7b:4b:ef:3f:85:ff:ab:fc:d9:
         9c:56:94:00:b5:f5:1f:5a:24:f3:98:c5:c5:b1:cc:7b:15:8c:
         e2:67:00:d8:0e:fb:bf:f5:f6:70:33:9e:27:2c:94:2e:c8:fa:
         ae:07:74:11:71:ca:11:27:d3:2a:19:23:f1:7b:df:88:0a:4c:
         e6:03:01:4b:e9:fd:f5:50:24:b7:2b:72:cf:b5:c3:9a:42:e9:
         2d:05:64:4f:99:13:f1:9f:48:25:c7:87:e3:3a:ae:8b:1b:bb:
         be:d7:ff:ba:d7:8f:70:8d:04:b9:d4:77:d9:47:b5:03:11:74:
         45:2a:8a:b3:7e:5c:81:00:31:14:d1:b1:7a:95:f2:df:c9:81:
         92:75:63:02:2e:05:43:01:3e:85:6d:d1:f7:49:14:c2:95:3c:
         30:21:c2:e9:64:7d:16:0e:97:74:2e:ee:0d:03:01:99:e1:cf:
         bb:91:63:12:0a:f0:ed:a7:9d:7f:3f:5f:7d:5c:07:47:e9:74:
         37:38:90:74:ec:0c:e9:e8:03:f5:2b:5e:52:1b:b7:a0:fe:ed:
         c0:d3:15:d1:f9:71:44:b9:f9:84:3f:e0:cb:b2:93:a9:49:24:
         2c:a8:d6:91:1c:d7:94:f2:89:b6:2a:e7:37:1d:de:35:35:70:
         b0:78:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:27:12 2024 by rpki-client on console-ams.rpki-client.org