Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f4d0686-d481-358e-afdf-d88b8f66d688.roa
File:                     8f4d0686-d481-358e-afdf-d88b8f66d688.roa (raw, json)
Hash identifier:          ujbMZYMSWlm4d2LzdSFxbqsHSUxKDBWIgK5Szf0+Gx0=
Subject key identifier:   55:71:14:D9:00:84:AD:96:69:7A:F2:27:BB:54:3C:D8:26:67:D6:8B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E38BD2FA1EE62F986A040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f4d0686-d481-358e-afdf-d88b8f66d688.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:38:bd:2f:a1:ee:62:f9:86:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=03a4b5eb-77c5-4fc1-8291-5e1235dc537e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:6a:3c:7c:10:b2:27:69:12:65:33:b3:a3:
                    a7:32:c9:a4:1a:14:1b:90:6d:61:5f:6f:9e:93:8e:
                    5a:b1:2f:d4:a2:f4:60:84:60:d3:ec:31:c3:d2:21:
                    36:61:ab:74:86:24:17:2b:98:f0:1c:33:d5:60:e2:
                    81:37:5d:4c:9f:ac:b0:1e:65:12:6f:14:ef:00:3e:
                    c9:55:11:9a:7f:54:50:15:57:e3:ec:bc:60:23:ab:
                    9c:b0:25:5d:34:37:15:05:91:10:39:a1:a2:1a:b4:
                    84:af:df:d5:59:4c:8f:13:69:8d:2c:b3:db:b0:63:
                    83:75:e3:30:c8:28:52:87:a1:8b:be:cc:b7:3b:56:
                    b3:b2:c5:04:8e:80:15:77:c1:79:7a:78:96:23:24:
                    f7:1b:59:88:21:63:5c:ff:e8:bc:1e:29:12:84:a2:
                    2a:85:68:76:30:9a:de:d4:c7:ad:fd:8a:39:a3:e7:
                    e6:b6:31:14:b2:7b:11:4b:a4:b2:0e:84:f0:20:bc:
                    03:5f:cd:4e:1e:a0:ce:97:26:f3:fa:84:2d:08:89:
                    b2:f2:98:ba:00:de:27:d1:d8:f0:30:5b:68:ad:31:
                    34:c8:76:97:14:44:f6:ae:f7:09:34:26:75:6b:d7:
                    1d:8b:82:de:c0:f4:f6:e1:59:5e:ab:cf:ba:f8:d6:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:71:14:D9:00:84:AD:96:69:7A:F2:27:BB:54:3C:D8:26:67:D6:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f4d0686-d481-358e-afdf-d88b8f66d688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:49:9e:79:83:08:22:3a:1c:67:a8:25:61:b8:de:59:56:
         59:09:ec:3e:17:15:fe:1d:15:a8:c0:64:8e:e7:13:7a:66:d1:
         76:b9:42:76:0a:43:dd:e9:9b:96:1b:09:4a:b6:13:d3:42:e0:
         3e:5e:a6:55:2a:87:07:6a:77:30:07:a0:10:53:8f:de:6d:1b:
         cc:11:96:74:fe:0a:ca:86:89:0f:71:98:0f:d7:91:6a:02:7b:
         4d:15:51:f7:d9:e3:8a:14:a7:6d:80:67:f0:c6:1a:36:7b:2c:
         4e:0b:41:0a:29:f3:5f:d5:f3:35:b0:46:9a:b2:be:77:e5:49:
         be:1d:a8:cb:8b:05:56:21:d9:5f:62:7e:2d:00:42:d0:36:91:
         a9:f3:9c:f6:af:07:32:6a:d0:c3:97:7b:af:3a:12:6a:9c:55:
         ee:40:dd:33:47:e2:04:3a:c6:3c:bd:ae:b3:e2:d6:85:63:bf:
         aa:03:e3:71:e5:61:04:67:62:ae:e9:d4:38:f3:4f:5c:7c:90:
         03:83:0a:a8:da:72:6d:b1:44:b9:d6:c5:79:b6:29:20:6f:ea:
         df:73:9f:4b:45:dd:38:e8:76:67:41:c9:d0:9b:1c:4a:be:37:
         c3:7a:b4:5b:6c:9f:be:5e:31:03:5f:54:e3:a5:55:31:6a:39:
         8c:cf:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org