Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
File:                     ac356b71-f897-35d7-9961-f79dac30925d.roa (raw, json)
Hash identifier:          ktQxSNglXof4gfWxxULWRlyFStfVjcQs6AJH2eoKfpg=
Subject key identifier:   C1:57:52:C9:78:96:1B:C3:CC:98:1F:42:99:A5:30:E2:4C:98:73:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E01200105A302965C6980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:01:20:01:05:a3:02:96:5c:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3a7f72c3-cdd4-4c63-b8b8-802bf0375a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:3e:b6:87:e5:c2:c6:1d:79:cf:cd:f5:e6:
                    86:32:bb:90:87:fa:2b:58:f1:70:6a:33:52:27:b4:
                    ff:6b:55:a9:74:04:74:f0:ca:0f:34:57:1b:1d:ff:
                    54:78:cb:1a:37:8f:4e:36:77:81:65:e3:7c:50:94:
                    cb:84:08:a5:3a:52:51:e3:15:f6:54:61:fe:31:88:
                    41:0e:86:10:ff:fa:90:e6:29:b9:01:40:c7:9b:24:
                    51:86:a8:2e:d2:0e:52:80:3e:38:6c:d6:a2:6e:d7:
                    d6:03:91:77:18:6a:0f:e7:68:cc:38:c2:84:0c:40:
                    2a:f4:a3:46:27:14:0b:9c:09:19:42:11:d4:7e:c6:
                    1b:57:5a:d5:16:ac:b5:be:f9:14:0f:f5:24:57:5b:
                    00:0d:76:b9:5f:bc:6e:ed:ce:a1:d5:bc:52:5b:ba:
                    c7:b0:9a:69:a4:10:d8:7b:6a:e7:b0:80:22:57:84:
                    2f:20:e0:44:22:f9:42:5d:67:3d:9e:f4:a4:a0:86:
                    77:c1:e4:7b:09:3a:9e:95:23:40:1f:b9:a7:3d:8c:
                    73:83:de:15:a6:a7:ce:10:3c:63:ec:24:74:8a:9e:
                    57:07:ff:12:54:7a:e0:a5:fd:9e:dd:06:a9:02:8e:
                    2d:39:eb:5f:4e:82:b3:3e:3e:75:79:04:2d:52:80:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:52:C9:78:96:1B:C3:CC:98:1F:42:99:A5:30:E2:4C:98:73:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:45:e5:4d:b2:5a:17:85:36:ed:d1:14:db:31:5e:bd:d2:3e:
         84:67:34:b5:56:91:ec:20:61:79:97:3d:19:e9:69:c1:54:c7:
         75:6e:86:d2:63:8f:49:88:fb:53:35:a4:6b:97:e7:93:4c:99:
         59:62:df:95:b6:39:9f:2b:76:3b:aa:1d:1a:38:e6:c8:57:2a:
         7e:42:3a:e5:90:3c:ee:14:a5:ef:cf:75:54:dc:dd:2b:22:51:
         b2:38:1e:c1:86:ae:bc:11:f4:a1:5e:18:57:c2:20:c8:dd:68:
         c8:1f:ea:83:b6:82:92:ff:29:8a:35:b2:65:de:41:d7:77:f0:
         af:b0:9d:86:5d:90:f1:d6:8f:98:0c:90:b6:d6:7a:d2:be:9f:
         ca:90:49:aa:81:2d:7d:f3:e4:ee:59:56:2e:67:2f:14:39:3c:
         8c:86:87:02:ea:90:ca:c0:24:26:55:ee:f0:a2:bf:ee:5a:4a:
         ae:c5:bf:13:a2:bf:3f:17:41:f8:51:02:d5:01:00:04:64:13:
         b2:b5:9f:17:be:a4:b7:f8:27:5b:ed:47:6d:66:47:0b:bb:cf:
         9e:f6:37:e4:83:f5:b2:60:c8:17:e8:5c:e2:0f:54:c8:5f:e5:
         be:38:0d:bc:ca:06:19:b0:01:8c:0c:a6:af:4d:94:b1:50:a1:
         e5:03:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:41 2024 by rpki-client on console-ams.rpki-client.org