Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa
File:                     8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa (raw, json)
Hash identifier:          cSCltc7q3xvQbJh7Mx6+XPTKyrilESfRoOIukfJ0RcA=
Subject key identifier:   95:3D:CF:E3:CD:7D:14:E4:B5:C8:07:43:71:AD:FA:CF:9D:34:BC:2A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E358BB95034EDC8864800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:35:8b:b9:50:34:ed:c8:86:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=f67307b4-e3b4-4db6-821e-6e2a551157e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:ff:08:87:99:c4:02:d7:a5:4e:6f:ef:0c:
                    7c:15:cc:7d:94:5a:5b:30:e8:4e:2f:36:d4:49:16:
                    0a:23:d1:e5:37:9d:96:9d:96:15:e5:29:ee:e1:c8:
                    b9:72:da:45:15:98:f7:5f:6e:a1:f2:c8:c8:64:11:
                    67:6d:49:17:ae:79:10:30:46:1e:98:62:da:4a:7c:
                    50:fe:8d:81:6d:53:98:f7:5c:f1:26:74:b1:0a:23:
                    10:55:65:4d:db:25:53:32:14:cf:80:cb:26:b2:86:
                    b5:e1:13:b7:40:b7:80:ff:f0:84:2e:f1:ce:97:98:
                    13:d2:b0:80:96:df:39:66:d9:bb:ac:08:c4:af:93:
                    cc:fd:9e:44:a1:64:3f:4b:81:e3:61:c4:97:41:c4:
                    1a:2e:9e:59:58:38:b8:37:ce:9e:fe:44:29:01:1f:
                    8d:24:bf:a6:25:7e:c4:fe:22:32:a5:a3:f6:f0:3f:
                    d2:59:2c:25:d6:5e:5d:19:54:18:39:d1:22:c4:06:
                    53:f3:83:af:7a:8b:21:b8:d1:2a:a0:86:0a:fc:6e:
                    47:7e:43:5c:8b:fc:43:27:e4:a3:04:bd:a2:eb:91:
                    2d:a5:17:92:11:e8:b5:fc:f6:4d:f5:0a:76:37:d5:
                    aa:31:d8:42:c0:a3:2f:49:cb:e3:5c:fd:72:57:04:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3D:CF:E3:CD:7D:14:E4:B5:C8:07:43:71:AD:FA:CF:9D:34:BC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8901afcd-3882-3bd1-ae1b-0f0c3922713c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c7:f1:83:47:ce:47:4a:c9:b4:dd:a7:dc:5a:82:e6:d2:a9:
         d9:27:2c:c5:89:28:cc:34:59:c1:5e:91:4c:41:5c:b4:bb:7c:
         96:66:83:e0:01:e4:54:f9:7e:90:09:87:b7:bb:d8:e6:39:31:
         2c:04:06:7a:21:c9:81:bf:13:e6:a2:f7:31:75:ee:df:28:69:
         25:a2:f0:54:92:17:2c:2f:c9:8e:03:ac:83:8a:4a:20:bd:60:
         04:b0:85:43:f3:32:c1:11:81:bc:84:63:a8:98:1c:8c:a8:19:
         de:a5:86:57:76:cb:da:fc:0c:07:9f:c6:b7:c9:4a:e2:09:ea:
         e0:fc:93:ac:34:4f:f5:32:12:de:53:fa:41:6e:1e:8a:91:62:
         37:9a:22:bc:64:23:02:92:4c:6e:d6:81:14:ae:26:32:37:b8:
         57:2a:48:fa:26:1f:23:c7:bc:f4:b6:4b:5f:fd:cd:0a:1b:06:
         28:49:73:40:33:b5:a4:31:b2:b7:2f:84:29:64:31:a0:55:a1:
         b9:5e:8e:4f:5c:f0:92:75:0d:19:87:1a:a3:58:51:90:3d:0f:
         31:c6:52:a5:77:d3:d5:7c:a1:d4:f7:18:85:9a:b8:fe:69:7f:
         88:b8:ce:0d:60:09:db:07:ff:fd:1c:dd:b0:6c:ab:45:0a:90:
         ad:f0:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:39 2024 by rpki-client on console-ams.rpki-client.org