Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9799bac2-ff5a-387a-9bec-b3183badbfbc.roa
File:                     9799bac2-ff5a-387a-9bec-b3183badbfbc.roa (raw, json)
Hash identifier:          6xBfERIyPyKhrHnunrZ7wQn1cxJ0fkI5RjSbqgyh7W0=
Subject key identifier:   91:BC:AF:C0:73:E6:30:06:90:7D:86:73:F7:2F:82:95:1A:8B:E7:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B022DF7C0DA3BD7599545
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9799bac2-ff5a-387a-9bec-b3183badbfbc.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:02:2d:f7:c0:da:3b:d7:59:95:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=57d9b1e7-10bc-4e4c-bb0d-1c6ba673c1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:9b:ef:38:0d:43:2e:c5:36:f1:7a:22:f9:
                    fe:a5:ff:89:62:d5:9b:48:1e:ad:f0:aa:39:78:cf:
                    bb:ca:d1:0f:a6:70:6c:1d:71:39:a5:0e:8a:60:fa:
                    c7:6e:1d:5a:05:9c:a6:fb:f6:dc:58:7a:b5:a5:31:
                    82:2b:d4:af:6d:d2:97:8b:45:fc:17:bc:42:d5:1b:
                    88:b3:71:02:dd:fc:f8:7e:3b:7e:a7:c7:48:5f:11:
                    66:1a:a2:4d:bd:10:39:94:25:9c:c8:d8:bb:04:d2:
                    fa:ec:fe:e5:23:ca:8d:72:33:32:41:d9:ae:f4:a1:
                    0a:6d:59:39:d2:dd:29:f6:39:ac:7d:98:0f:37:1f:
                    e7:39:da:38:a5:4e:84:74:23:53:ff:ac:26:29:e3:
                    d1:44:17:d8:29:85:17:ab:49:67:36:c1:51:d5:d2:
                    55:55:99:7d:28:d5:e3:da:33:eb:03:1a:a4:dd:90:
                    6d:36:c4:c6:de:10:e1:93:56:12:62:83:4b:21:c5:
                    76:36:87:99:1c:8d:34:f2:9a:e5:84:f7:9a:55:1b:
                    ec:3b:66:2f:cd:d4:6d:88:a2:ee:ca:a4:55:99:06:
                    bd:15:91:63:1f:b2:b6:a7:ae:7c:b7:d3:57:b1:2a:
                    5b:a6:a3:af:b8:94:8b:59:77:f8:89:a0:d2:96:ef:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BC:AF:C0:73:E6:30:06:90:7D:86:73:F7:2F:82:95:1A:8B:E7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9799bac2-ff5a-387a-9bec-b3183badbfbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:9d:9f:12:eb:b3:a1:eb:81:de:40:21:10:83:a6:fe:af:11:
         53:c9:88:98:52:c5:45:86:7e:72:be:1c:8f:3a:7f:81:70:29:
         0c:e3:75:db:25:ee:18:9d:ac:3c:1c:8a:2f:58:32:66:03:cc:
         b9:bd:c1:3f:4e:78:eb:26:2b:aa:fd:0b:ab:eb:cc:d5:00:9e:
         f9:b2:37:32:09:75:a5:2e:33:b7:a5:15:d3:4b:91:fe:74:99:
         ad:27:66:55:46:ca:1e:33:96:51:76:c6:47:7e:b9:a3:f7:f2:
         aa:48:77:0b:1d:59:c3:7a:1f:9e:d3:b2:45:69:87:df:6d:b9:
         da:a2:97:a5:26:f2:90:1f:bf:f0:c1:8c:4a:e5:70:78:a9:e4:
         ef:1b:b1:35:a6:85:09:07:5f:66:2d:35:1e:bb:5d:36:ec:74:
         e3:8a:3a:42:7b:1e:da:b8:c0:83:3a:78:51:3b:32:6e:75:6f:
         97:04:57:8c:7d:38:d0:8c:96:6b:c3:eb:a8:17:83:3b:67:30:
         ed:ba:c1:b9:47:d7:6d:d3:ff:4a:f7:58:e4:ef:7f:82:6f:e4:
         42:3b:f8:ab:ce:94:8d:73:87:93:b3:e5:11:12:8d:49:ac:85:
         0d:c9:98:fa:cc:02:55:14:9f:df:3d:d7:9d:10:9b:ce:11:78:
         1c:39:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:38:31 2024 by rpki-client on console-fra.rpki-client.org