Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8faa6316-2c4c-3d59-828d-59c105f5e71b.roa
File:                     8faa6316-2c4c-3d59-828d-59c105f5e71b.roa (raw, json)
Hash identifier:          ieoYFddPXTdQs0wV8LNpKMq2sec1egttXWXebk2zxpM=
Subject key identifier:   97:0F:CD:88:E2:AF:7F:D5:6E:63:0C:F9:1D:62:9C:EB:16:4A:9E:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACF466A21D05AD30F3AE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8faa6316-2c4c-3d59-828d-59c105f5e71b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:cf:46:6a:21:d0:5a:d3:0f:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=1f3d8fce-1a70-4b39-a0f2-676d3bf1fd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:54:bb:50:79:33:4c:a7:16:39:90:d1:6e:
                    d1:66:e1:09:1f:15:59:6b:f1:34:6b:e6:65:c4:4a:
                    77:2a:d5:02:4f:7c:64:c4:3d:24:b8:b8:0b:57:21:
                    e8:39:48:b5:33:5b:a8:d1:15:3c:0c:1c:3d:d9:f6:
                    7c:14:d5:c4:4d:44:8e:e7:ea:d0:31:a6:98:16:37:
                    e9:be:6f:bc:db:be:5c:f4:03:ab:ee:d3:2e:f9:91:
                    b0:c5:81:d7:78:6d:f8:0d:1d:f8:bd:0d:f6:77:81:
                    0d:81:40:6a:e3:f0:31:c4:f9:05:3a:f1:56:d5:6f:
                    84:ed:5c:dd:a2:73:86:40:53:2c:c9:81:69:6a:e7:
                    31:60:30:d0:ae:58:fb:9b:75:5b:eb:5b:4a:87:67:
                    da:5f:c9:81:56:22:ef:8c:d8:87:2b:cf:1e:0b:8f:
                    83:02:47:fa:82:dc:d2:43:0a:45:c2:b5:2d:36:fc:
                    4b:a2:dc:68:40:2b:f9:e7:5c:ef:53:da:81:23:f8:
                    ab:d7:c0:a0:b0:bf:0e:64:6e:ae:22:c1:65:44:2a:
                    b1:d8:97:d2:38:19:69:89:c4:56:41:ec:c0:01:a1:
                    8b:3c:52:55:76:71:71:7f:70:f2:c1:0d:15:a9:7b:
                    04:31:d8:e4:69:c8:2d:41:a7:9f:eb:c6:3e:1e:a5:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:CD:88:E2:AF:7F:D5:6E:63:0C:F9:1D:62:9C:EB:16:4A:9E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8faa6316-2c4c-3d59-828d-59c105f5e71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:82:7d:b2:c6:ea:d1:6a:98:92:83:58:47:73:0a:c3:a8:ec:
         d6:b5:ef:d6:c4:86:1d:56:ef:b5:0c:7a:f2:fa:bb:53:11:25:
         8b:44:4c:72:66:0e:02:ab:a9:c7:b9:c3:7e:60:54:9e:c4:55:
         99:db:80:8d:59:23:38:4c:37:85:f7:f9:f9:4d:39:5e:26:42:
         94:68:11:6f:65:51:52:59:e7:1a:0d:82:25:e5:60:1d:e1:a7:
         e7:fa:a9:6b:64:07:56:b5:d7:70:4e:b6:9d:bc:23:e6:db:a9:
         1a:71:1c:c5:fe:36:0a:b8:4a:bc:eb:bb:74:e8:b1:0d:8a:e9:
         5d:07:15:d1:f4:cd:3a:b6:61:3d:d6:96:f7:96:26:2a:91:32:
         28:bc:a5:92:3a:78:d9:a5:66:87:ad:67:01:2d:ce:2c:15:50:
         8c:7c:55:ce:d9:49:94:60:9b:77:9a:a9:e6:68:7d:ad:a3:6c:
         28:90:e1:04:75:40:8e:f2:c5:44:75:74:7c:5a:53:64:fe:e1:
         3d:5d:ba:8a:81:85:de:d1:f7:ca:3c:dd:33:d7:81:e6:1c:9a:
         db:34:d7:2d:11:29:3d:d4:ae:fa:33:e1:ee:ae:c2:f2:71:28:
         a0:60:e9:c4:3d:ae:66:3b:4f:23:1f:6e:b0:e5:a0:ab:e7:93:
         7e:aa:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:17:41 2024 by rpki-client on console-fra.rpki-client.org