Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa
File:                     8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa (raw, json)
Hash identifier:          ZWEIvSiO+VIs0Q8zbgB/XpDMvmqtBmTSKGg6gSo3WW0=
Subject key identifier:   4F:C6:17:08:94:66:1A:AB:7A:6C:A3:FD:13:0C:E5:F5:B5:C3:6C:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A704E4BB3AE91E2119A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:70:4e:4b:b3:ae:91:e2:11:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=31122747-b762-4aaf-b0aa-439d7dffccea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:d8:22:08:bc:e6:9b:e8:c5:ea:a6:72:eb:
                    32:e3:ba:fb:56:fd:89:1f:9f:45:e6:04:6d:9d:12:
                    83:4c:2d:3b:f3:13:85:ee:a2:88:b9:6e:17:eb:20:
                    9a:aa:74:e0:a1:f1:6e:50:4f:2b:46:f2:36:4b:c2:
                    4d:e7:16:dc:95:b4:b0:22:61:00:c2:88:ec:ea:c4:
                    64:e7:b1:63:2c:56:3f:42:bc:72:7b:0a:1d:87:8d:
                    8d:71:bd:eb:11:ef:0f:e0:0b:f7:28:c4:7f:f0:48:
                    91:a5:50:ca:d2:14:d0:04:17:37:64:db:7b:0c:10:
                    1e:a7:a9:fc:0a:ce:16:e6:04:94:fb:b1:01:86:51:
                    87:98:52:b0:18:2c:8e:8f:8c:0a:fe:8e:74:53:56:
                    00:20:c8:52:b3:7f:a5:e7:87:a3:71:57:f1:a5:30:
                    96:47:7d:c4:ef:ae:25:f8:61:21:6d:a1:b3:08:64:
                    dc:c0:e7:63:6a:94:fe:68:fa:30:07:8e:00:3c:ce:
                    ab:0f:9a:78:e7:d8:6a:3b:67:a8:d0:ce:fb:03:37:
                    d6:41:84:6c:4e:94:3a:01:ab:15:d3:e3:80:42:0f:
                    bd:5d:d6:b8:aa:27:c9:81:00:eb:31:4b:08:f4:54:
                    65:a2:43:49:1d:55:62:55:a0:98:a4:6e:76:1a:92:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C6:17:08:94:66:1A:AB:7A:6C:A3:FD:13:0C:E5:F5:B5:C3:6C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dc4bf02-1dc2-3c49-bfd9-017e5d5c6601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:1f:3c:89:93:af:1d:3a:41:a5:d9:7b:36:3a:2f:6d:c2:
         42:70:1a:75:21:59:a9:08:9b:ff:c3:a3:9e:24:a9:89:b6:de:
         5a:ce:cf:6c:d0:25:f9:81:a7:c9:94:42:b7:4f:e2:6c:d6:c8:
         1a:af:25:bb:63:dd:e7:e4:13:ed:33:70:c6:09:9e:98:f3:78:
         8e:16:05:5a:69:da:1a:8a:9e:9b:cb:52:47:92:1e:67:43:8e:
         5a:d6:33:61:ec:88:d0:4f:8a:b5:9b:05:fc:c3:0d:7e:9b:90:
         31:6d:e9:a8:d0:c4:e5:f0:e3:60:e1:a6:22:67:95:aa:fb:a7:
         ef:77:4c:97:96:64:d2:2b:9f:72:9b:85:65:a4:30:60:a8:82:
         23:c7:b9:10:c3:ec:95:a0:41:13:55:b8:e7:f8:24:3e:f4:78:
         f8:95:07:3b:0d:4e:9a:9c:29:12:06:fe:77:2b:c5:81:d6:87:
         7f:45:8a:22:47:09:e7:4f:0e:29:8c:06:84:f9:75:d4:58:f4:
         ae:ad:f9:dc:9a:c6:08:af:23:2f:03:8b:bf:20:bf:e6:8b:33:
         78:1f:37:02:37:93:bd:d8:4c:64:d1:ee:f5:03:32:a1:3e:13:
         6d:4d:08:a7:a7:37:f3:dd:d7:45:a6:59:95:0f:f8:36:b5:f1:
         c5:2a:38:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnBOS7OukeIRmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzExMjI3NDctYjc2Mi00YWFmLWIwYWEtNDM5ZDdkZmZjY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfLYIgi85pvoxeqmcusy47r7Vv2JH59F5gRt
nRKDTC078xOF7qKIuW4X6yCaqnTgofFuUE8rRvI2S8JN5xbclbSwImEAwojs6sRk
57FjLFY/Qrxyewodh42Ncb3rEe8P4Av3KMR/8EiRpVDK0hTQBBc3ZNt7DBAep6n8
Cs4W5gSU+7EBhlGHmFKwGCyOj4wK/o50U1YAIMhSs3+l54ejcVfxpTCWR33E764l
+GEhbaGzCGTcwOdjapT+aPowB44APM6rD5p459hqO2eo0M77AzfWQYRsTpQ6AasV
0+OAQg+9Xda4qifJgQDrMUsI9FRlokNJHVViVaCYpG52GpLtWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/GFwiUZhqremyj/RMM5fW1w2xPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRjNGJmMDItMWRjMi0z
YzQ5LWJmZDktMDE3ZTVkNWM2NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+mHzyJk68dOkGl2Xs2Oi9twkJwGnUhWakIm//Do54kqYm23lrOz2zQ
JfmBp8mUQrdP4mzWyBqvJbtj3efkE+0zcMYJnpjzeI4WBVpp2hqKnpvLUkeSHmdD
jlrWM2HsiNBPirWbBfzDDX6bkDFt6ajQxOXw42DhpiJnlar7p+93TJeWZNIrn3Kb
hWWkMGCogiPHuRDD7JWgQRNVuOf4JD70ePiVBzsNTpqcKRIG/ncrxYHWh39FiiJH
CedPDimMBoT5ddRY9K6t+dyaxgivIy8Di78gv+aLM3gfNwI3k73YTGTR7vUDMqE+
E21NCKenN/Pd10WmWZUP+Da18cUqOJI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:57 2024 by rpki-client on console-fra.rpki-client.org