Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa
File:                     8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa (raw, json)
Hash identifier:          1nUYJ4OwytJf8J+11buWU/Og2dSuLka1G8+Pw7JlLwk=
Subject key identifier:   0A:12:36:9B:1D:98:45:2A:8F:7B:0E:04:7D:50:22:C7:F7:74:54:21
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AFF1459781FD303595280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ff:14:59:78:1f:d3:03:59:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=002f6577-87e1-4243-9cd6-324c5cb3144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:96:f5:d5:64:bf:3a:15:00:e0:c8:7d:1b:
                    af:bc:a1:78:e7:e2:7f:3c:22:74:0e:db:d8:79:85:
                    85:9e:03:4b:64:01:6d:03:69:99:4e:89:45:0f:05:
                    72:c8:90:62:2e:51:df:c9:de:b8:0f:05:6c:3d:69:
                    e1:17:66:c6:56:24:55:3f:3d:30:2a:97:d3:77:0a:
                    25:09:2d:64:04:96:65:f1:87:c9:b4:81:dd:d0:be:
                    e5:2f:ed:93:2a:35:f0:2b:52:1b:fe:ea:6c:bc:0f:
                    6b:39:eb:9a:a2:74:f0:2d:68:aa:50:e7:fa:f9:84:
                    16:8a:25:7d:bf:dc:03:c6:71:18:6e:82:55:84:20:
                    bd:f0:4c:17:92:51:f3:96:91:83:c3:6a:54:bd:2a:
                    63:9a:57:7b:e9:d3:c8:4c:77:7b:06:2e:21:0c:2c:
                    02:f9:da:67:73:49:ec:4b:13:6c:ee:03:68:78:80:
                    e7:8a:d0:fe:22:55:64:26:a2:7b:cd:7a:55:0f:ac:
                    56:74:f5:c3:c2:ea:16:a8:8b:b2:3d:be:bb:39:43:
                    94:b9:1c:fb:9a:ad:2d:c0:b8:39:6d:3c:71:98:f5:
                    9f:de:c1:f0:e0:70:aa:bb:74:7b:af:e8:9f:c5:81:
                    ed:79:04:fb:ac:3a:4b:eb:f7:f6:ee:3e:41:2b:66:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:36:9B:1D:98:45:2A:8F:7B:0E:04:7D:50:22:C7:F7:74:54:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:67:2a:78:2c:48:60:9a:e6:30:1f:53:63:63:1b:6c:18:
         65:8c:52:a5:94:4b:e2:dc:54:47:39:ca:15:ce:31:7f:7a:50:
         3b:20:0e:ec:6f:eb:db:e2:bb:f7:d4:dc:ac:11:f1:bd:99:b4:
         fc:13:0e:d3:b4:1c:f2:35:56:25:27:17:28:92:f1:57:80:36:
         fe:8d:00:6a:48:dc:89:d6:e4:31:14:84:a7:46:44:45:a2:ec:
         23:09:77:14:ed:28:09:73:ed:c8:61:c0:ad:cc:84:44:a2:c7:
         b9:6f:98:57:d5:8c:b7:72:4d:19:49:dc:f1:37:e8:55:a8:34:
         16:27:02:44:be:53:45:3d:9c:4c:a8:3f:1e:8a:41:10:a0:45:
         d9:ac:ea:f5:05:7c:1b:cc:6c:aa:58:c8:44:6a:4e:2c:7b:fc:
         c4:11:dd:b7:4e:8b:64:a6:e9:e2:68:77:7a:f4:5f:ed:a0:eb:
         5d:8c:19:52:87:30:54:db:a2:a2:ce:48:a2:ca:54:52:78:3d:
         3c:07:fb:d0:83:e9:5c:87:7f:56:cf:25:6a:4c:05:f2:fd:cc:
         e6:b5:ea:d9:6a:c9:43:c1:b9:47:cb:d1:18:bf:9d:6b:e7:2a:
         32:cb:73:ad:fd:17:a9:49:92:6d:13:62:af:83:a6:72:16:7e:
         d6:67:d1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:55 2024 by rpki-client on console-fra.rpki-client.org