Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa
File:                     a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa (raw, json)
Hash identifier:          lxEHDMho/j0S2PzMd8+7F5PE1RPxarIkAQs09w1DDvo=
Subject key identifier:   F4:E8:98:E3:77:E9:DD:E4:C1:F2:4C:BA:F6:89:19:BE:76:A2:BE:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD372642C7E57C5881280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d3:72:64:2c:7e:57:c5:88:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d160528d-56bc-4c4f-af74-9fbf57a7e5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:4e:03:06:1f:45:d5:13:4a:88:66:9c:7d:
                    3e:d7:8e:49:16:67:6b:ed:35:09:89:37:f6:e4:65:
                    a2:df:93:30:4a:ff:f6:96:16:7c:93:56:a7:36:99:
                    8d:00:91:0f:1d:9f:21:92:d4:d9:47:56:34:1e:85:
                    76:bd:79:fd:6c:46:b1:78:ac:c8:b2:26:f0:c8:a1:
                    3b:e0:3f:fe:ae:af:02:61:eb:bf:63:7d:e4:47:17:
                    e5:0a:73:17:90:df:cc:b3:c0:d0:dc:00:d8:d7:09:
                    78:3e:1c:72:39:f8:75:51:91:96:52:0d:3c:23:46:
                    69:ba:2a:a8:01:89:15:ea:6c:b0:e2:e1:3e:a9:02:
                    87:9a:43:b3:f1:cb:0a:09:e7:64:ca:27:3d:84:ac:
                    1d:72:e7:c6:0a:c4:75:04:12:08:da:64:b9:60:33:
                    52:58:0c:32:71:92:af:67:c4:08:f5:48:a7:64:cc:
                    70:32:51:0f:27:c8:d9:a3:94:10:26:ed:66:5a:c5:
                    19:24:f5:19:ca:d3:5c:11:90:e2:cb:c1:c4:a9:2a:
                    5c:8b:44:50:3c:9e:52:f0:1c:d9:d4:10:22:13:f1:
                    f0:32:80:f2:6a:09:36:32:c9:55:f5:71:b6:38:ac:
                    42:d2:3d:2d:a3:fe:e1:e2:c5:63:a8:10:91:d8:24:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E8:98:E3:77:E9:DD:E4:C1:F2:4C:BA:F6:89:19:BE:76:A2:BE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:91:47:c3:0f:a3:bb:90:26:2f:1c:3f:f9:88:92:c5:6b:1b:
         fa:e0:a6:ce:03:54:b0:1a:11:84:2d:66:2b:c2:3f:86:2a:a4:
         5e:b1:b5:45:10:13:c6:38:77:ee:d1:d9:ae:7e:71:d4:a1:78:
         d6:dd:14:1b:18:e5:b7:2a:5f:68:1a:5b:c7:82:c6:14:8b:cb:
         41:30:71:40:4d:ca:c1:9d:09:be:f3:88:ec:9c:72:33:1d:51:
         c7:ac:ff:87:83:c5:af:4b:e7:9b:cd:4a:ee:b0:57:4a:c7:0f:
         4c:cc:1c:87:0e:b7:4a:0f:19:18:5b:dd:81:3c:51:5f:c0:ec:
         2b:8c:54:ed:13:c8:19:a3:1e:66:a0:21:ad:19:75:e5:e1:a7:
         e2:bb:f1:07:b0:b1:fd:1c:bd:57:44:e0:64:b4:69:64:ba:06:
         89:e4:02:b4:ac:40:42:00:00:7f:11:f2:ca:e8:c3:a2:1f:32:
         e2:42:05:29:51:56:80:ec:cb:d6:c4:54:04:2c:69:67:30:c7:
         eb:5a:d8:c1:06:41:cb:f7:1b:05:36:24:f8:c2:91:f3:7d:7a:
         6f:31:36:d1:9d:cb:c5:dc:04:9d:31:68:65:5e:5e:0f:d9:50:
         ee:fa:9f:8e:e3:d2:b6:86:f2:1b:d0:72:7c:d0:57:21:55:bc:
         06:0f:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:19 2024 by rpki-client on console-ams.rpki-client.org