Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa
File:                     8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa (raw, json)
Hash identifier:          5WX2nNw2q0px9yUHkjt1JXor4tMCP3iV5rQKKyuHglA=
Subject key identifier:   AE:16:3C:FF:14:F4:F4:9E:BF:2C:3B:15:28:6E:4C:B5:8E:06:96:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DBEA6E3F274AA57354540
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:be:a6:e3:f2:74:aa:57:35:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=093561f5-26c0-40bc-bf65-7bbb76a49f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:0d:14:f4:f1:a6:c6:35:5b:4a:54:58:4e:
                    20:7f:91:59:c3:b2:a2:b8:e3:39:fb:a5:36:05:1d:
                    f0:d2:fd:e2:12:b5:f7:b4:00:52:c6:57:ef:82:68:
                    69:28:e2:03:0e:d3:d6:5a:aa:78:39:17:6b:4e:a6:
                    69:42:d9:f4:16:dd:1a:f1:fd:b8:67:05:1c:ef:85:
                    fa:be:fe:dc:4b:3f:ab:41:e8:b1:c9:6d:29:9c:7d:
                    a8:c3:39:ba:11:99:2a:72:1f:7e:d2:0f:3e:a7:40:
                    96:d0:10:9e:9b:df:f2:43:30:cd:5c:d7:6d:11:cd:
                    f0:1d:18:3d:bf:26:22:91:ca:91:29:96:6b:b7:5a:
                    3b:2f:fa:41:6d:b2:d6:0f:f5:63:e6:3d:cd:05:31:
                    d0:5d:9c:ae:0c:2b:0e:ed:29:7a:6b:68:42:1e:98:
                    e7:0d:60:13:a5:42:e6:42:4d:de:79:58:a8:79:3d:
                    6a:da:a6:17:72:dd:06:be:22:94:df:ff:86:21:ef:
                    bf:82:b0:d3:f3:f9:a7:7e:23:16:2b:87:96:a3:26:
                    c3:41:6e:2d:64:88:da:ae:22:1b:d9:06:76:3f:f5:
                    d9:b7:eb:8e:e8:fe:f6:e6:e5:78:a8:65:59:99:c1:
                    0f:f5:91:0f:b0:eb:81:34:85:82:cd:2e:9e:77:b4:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:16:3C:FF:14:F4:F4:9E:BF:2C:3B:15:28:6E:4C:B5:8E:06:96:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:2b:69:50:8b:af:34:86:70:bb:5f:3c:fe:b3:79:6b:70:
         96:fb:8c:08:4e:92:9d:fa:1a:55:2e:c3:c0:4e:a1:b0:e8:54:
         64:e7:f1:2f:23:bd:18:67:9b:ab:56:b1:80:5a:39:0e:e1:5b:
         a2:07:d4:1c:00:43:41:e5:5c:70:3b:d5:08:99:08:e5:a3:e5:
         8d:ef:26:77:c9:30:a6:70:4a:ac:a2:8f:ec:ad:2b:de:db:c7:
         22:90:f3:05:8c:ef:d9:81:db:67:a6:c8:bf:e5:67:af:83:dd:
         75:e2:9e:c4:c2:a4:53:f0:39:0e:b4:9b:0c:41:29:7b:f7:6d:
         94:88:f9:02:2e:f5:ee:cd:f5:20:f0:4f:1c:ce:04:2c:4c:38:
         ea:65:79:e1:49:dc:b1:6a:55:ef:03:f2:0f:9e:ea:d2:19:ac:
         8e:2a:63:10:9a:19:4c:58:ba:5c:77:db:a7:92:ce:ab:72:b9:
         eb:7c:01:ac:5e:fd:76:ce:65:79:8f:7f:c8:9c:89:33:8f:20:
         ef:7a:3a:df:30:ab:91:ca:f5:73:35:8a:f4:83:35:11:9e:81:
         56:7a:28:36:b4:df:df:cb:7f:1f:b6:a5:52:c2:ab:62:ad:06:
         a6:1f:a6:b4:cc:f0:c0:2e:44:9b:9b:c2:37:73:e2:1d:ef:19:
         d1:3c:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:07 2024 by rpki-client on console-fra.rpki-client.org