Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa
File:                     8aa0414c-8126-3e49-be44-eb2af2892430.roa (raw, json)
Hash identifier:          CztXmspni1oa1htsJsf7IEaHDKEzgHYTXbjux+UKF/8=
Subject key identifier:   B0:AD:E7:AF:FA:B8:61:2E:0D:CC:84:D4:16:4C:9C:7D:C7:44:B5:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D848DCAF06DF6323B9580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:84:8d:ca:f0:6d:f6:32:3b:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ee500f02-b9d2-4b1a-9416-28f6ed0c436e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:6f:29:b3:a1:db:b3:ad:6d:17:bd:62:42:
                    7d:44:46:5a:40:ba:e2:bd:03:ff:21:e0:7b:83:2e:
                    3c:14:fd:60:83:5b:fe:e2:9b:9e:24:b0:d7:83:4c:
                    ee:fa:3f:91:f4:f6:b6:ce:42:35:1c:52:f8:8f:47:
                    fb:7f:5a:75:97:e2:30:82:52:01:09:d4:1b:7b:6d:
                    2c:bc:9b:d8:aa:9f:02:4d:58:80:42:79:e5:ea:f5:
                    6b:a0:e7:ec:4e:40:13:9a:75:70:aa:a8:e6:22:fc:
                    39:e3:2d:6f:0f:1f:00:16:d7:16:c7:41:c9:d0:e5:
                    d9:5d:b9:87:f9:11:19:61:0a:18:7e:60:42:c5:eb:
                    f4:cf:3a:2a:0c:38:59:23:64:2d:cb:40:cd:7b:a2:
                    1d:d7:0e:e2:ad:2d:79:3a:06:e5:fa:28:f1:46:e7:
                    57:0d:93:c4:9b:7a:b6:b4:98:d8:88:d7:47:3c:e9:
                    0c:f6:ae:02:63:f2:45:af:87:bb:e4:64:6b:51:bf:
                    d4:e0:64:7c:c3:5c:02:15:90:bd:76:c0:e6:66:86:
                    34:cd:e5:09:6d:81:90:d7:91:30:55:9d:a0:39:38:
                    de:d9:ef:f7:25:17:3e:83:54:fa:03:e6:ff:81:6c:
                    a7:46:8b:79:ca:4f:61:77:e6:e9:a7:fe:6f:0b:1f:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AD:E7:AF:FA:B8:61:2E:0D:CC:84:D4:16:4C:9C:7D:C7:44:B5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:69:37:47:61:72:45:f3:2f:f7:0f:51:de:21:6d:94:3d:c5:
         01:69:27:e5:c5:d8:6f:aa:af:fe:8f:50:b6:dc:cb:ed:e7:cf:
         43:18:49:9b:c1:de:04:90:fe:9b:38:64:ee:72:2f:7d:e2:38:
         60:a4:37:84:0a:1a:62:af:60:6c:61:60:0e:dc:1e:e3:8d:09:
         50:d6:cf:f5:ee:b7:21:e5:b1:f1:df:26:f7:e0:c5:ae:bd:34:
         6f:5a:3c:0f:78:e5:50:55:df:d5:2b:63:8e:20:d2:9e:1b:6f:
         01:15:39:b8:db:43:31:49:b9:32:57:cd:a8:4c:7b:3b:53:da:
         79:17:98:45:ce:cb:53:d1:c7:01:8b:08:a7:61:bb:fb:dc:6b:
         cc:96:41:a5:88:38:29:64:ea:0a:26:56:17:d6:f4:8b:ea:d8:
         7a:a0:17:d0:9e:20:e1:e0:2c:c5:0d:26:92:ed:a3:d8:53:46:
         42:56:b6:8e:4e:37:15:f8:8f:f7:25:32:aa:4e:6a:56:47:18:
         46:3a:04:dc:03:80:53:aa:92:a4:64:9c:8e:90:39:fe:0b:3c:
         28:3f:dc:57:1b:aa:c1:bc:94:76:67:16:42:d2:08:e5:69:79:
         71:4b:c4:63:46:fe:91:9d:cb:39:e6:2c:db:9a:d3:7e:19:76:
         65:91:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org