Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3dc7a20-cdca-3a67-9bce-fc380934251d.roa
File:                     a3dc7a20-cdca-3a67-9bce-fc380934251d.roa (raw, json)
Hash identifier:          FPIMPdBrpGl7ifNIRi3sv4QxmRoGbIg3orbNJ48RmBM=
Subject key identifier:   8B:F2:2D:21:F9:42:11:81:61:F1:EF:D3:00:AA:ED:A6:11:6A:AA:6C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D89DC548854738613C000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3dc7a20-cdca-3a67-9bce-fc380934251d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:89:dc:54:88:54:73:86:13:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=22a0a880-e2eb-4910-a7b7-96c363870de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:0e:e9:35:0e:a5:12:07:3b:72:6b:0d:c9:
                    20:bc:f2:f8:a4:e2:c5:5a:d6:f9:4c:c6:a4:8b:39:
                    d6:e3:d5:ec:7e:44:1a:9e:e7:c8:ca:a6:6f:45:24:
                    14:7b:ea:de:dc:8a:a2:fb:e4:99:68:50:19:ae:76:
                    ea:2b:3e:2d:de:05:1d:a6:d4:44:d1:d3:51:3b:2e:
                    66:4d:76:79:20:30:8d:30:c4:c2:82:f0:52:fb:22:
                    7a:99:50:b7:ca:fa:68:71:19:93:a4:c3:6b:9d:41:
                    4e:93:7d:9b:3b:e5:55:e9:8a:db:32:29:06:79:2d:
                    a5:f7:04:a9:40:08:51:f5:47:4a:16:f8:d8:79:4f:
                    28:4a:80:21:6c:7d:47:12:c2:e4:32:7a:e0:06:20:
                    38:9e:ee:b8:59:d1:0e:6f:c3:bb:6f:84:39:b8:81:
                    bd:06:21:37:c3:c3:52:5b:f6:c3:3a:65:0e:7b:f7:
                    43:18:38:85:ce:b8:d6:33:3e:f9:6e:81:99:d4:4b:
                    2e:ee:b2:c4:30:3e:da:79:b7:be:b7:b9:f7:33:af:
                    3a:ec:d3:2a:ec:1c:68:72:cd:0e:ef:3f:89:f5:be:
                    ea:8c:0b:51:20:78:27:f3:98:60:e7:33:bc:5d:43:
                    0e:9b:37:c6:33:69:fb:ce:b1:c5:4d:e8:b4:02:aa:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F2:2D:21:F9:42:11:81:61:F1:EF:D3:00:AA:ED:A6:11:6A:AA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3dc7a20-cdca-3a67-9bce-fc380934251d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:77:6a:f3:28:99:5b:55:91:15:c2:15:17:de:1e:52:f1:
         e2:7d:7a:84:f5:da:84:e0:26:a1:63:0e:22:99:4a:9f:61:2a:
         1a:59:80:4a:f0:02:d0:36:4c:a6:a7:c9:a2:ec:7d:a5:46:ec:
         99:51:00:d5:64:45:2a:fa:a3:78:31:c7:4b:49:6a:25:73:fa:
         58:48:8f:2f:3b:8a:15:c4:3b:60:dc:55:08:69:9a:7f:8d:a6:
         ca:00:e0:54:7e:10:0f:69:76:8a:07:0f:bc:ca:b3:71:5e:4f:
         e7:27:a7:46:10:18:e5:7e:1d:9a:65:e8:1a:f6:aa:bf:54:2e:
         a0:0c:26:33:47:41:6f:7d:a5:51:7c:da:ec:37:13:f4:6c:86:
         cb:d0:df:63:dd:b2:91:b9:43:b6:a9:95:8f:16:41:81:d9:4f:
         14:24:d6:e8:48:f4:6b:fb:fe:5d:0b:b4:e4:cc:1e:cc:62:7b:
         38:3e:15:10:e7:e2:cc:be:a3:34:ca:ae:9c:ed:73:f7:58:66:
         5e:73:17:cd:c2:05:0f:cd:4c:01:f1:85:39:0b:18:fd:b1:72:
         c3:f6:4d:70:6f:b2:e1:ee:6c:19:73:8e:f4:88:10:6e:0a:09:
         f7:64:06:9d:00:93:43:4f:68:7a:66:09:01:95:c1:a4:93:fe:
         1c:86:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:47 2024 by rpki-client on console-ams.rpki-client.org