Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa
File:                     af94c568-033d-3a88-9500-558aeee053a0.roa (raw, json)
Hash identifier:          ccFxesVv1UfeXNxxM6JfMRFCCeII4CHXNgZi8/eFdS0=
Subject key identifier:   B7:E4:64:04:63:87:B2:E8:8D:8A:92:F5:C0:FF:58:26:7C:06:5E:D5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A3E62CF58FE05CBA64080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:3e:62:cf:58:fe:05:cb:a6:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=f58165ff-7432-42e2-9b0d-277dae7bde76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:54:a7:c0:ce:ea:1e:14:7c:47:37:de:b3:
                    34:38:ae:e4:aa:00:d9:43:8d:63:e9:04:32:98:02:
                    4a:89:bb:0f:fc:59:c9:c2:ce:95:24:74:9b:45:c1:
                    18:16:da:03:fc:83:a0:c6:7f:32:23:09:47:8e:9d:
                    fc:b5:f7:a2:3c:e7:33:c1:dd:94:c0:b0:b7:0e:0f:
                    13:57:ea:be:86:b6:81:49:5f:2a:06:da:84:f8:47:
                    42:cf:64:11:a5:8b:3f:4e:b5:bc:78:d5:6e:fc:e2:
                    19:39:f7:a0:0c:a1:45:2e:d6:0c:7a:2f:8c:e4:2c:
                    73:52:6a:06:25:26:d6:91:84:0c:19:9e:e2:96:b7:
                    b2:d1:ad:39:bc:75:49:03:3d:83:0a:32:38:81:1e:
                    81:70:b4:24:4c:40:ff:f4:dd:41:a9:df:2f:0a:c5:
                    41:6f:4d:3f:91:c9:21:eb:0e:cc:13:58:26:e7:1d:
                    f2:59:90:70:51:ae:08:31:da:34:1f:b6:0a:34:eb:
                    96:a2:6d:76:5e:db:15:ef:e4:8f:88:07:c5:52:70:
                    eb:46:ef:4a:31:71:f4:c0:86:6f:5f:1e:73:c0:a5:
                    c0:a6:1f:3d:8f:29:b5:bb:3a:bd:fb:fd:f1:a7:13:
                    e0:58:df:7f:21:86:1d:ed:bc:48:19:57:b6:49:dd:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:64:04:63:87:B2:E8:8D:8A:92:F5:C0:FF:58:26:7C:06:5E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:86:29:bd:54:4f:66:c3:cf:e5:d5:93:d1:80:08:ef:ad:
         82:84:c1:ea:1e:e9:0c:b2:7e:90:84:ce:b9:1c:c2:ce:a7:5e:
         3c:04:83:b8:f6:d6:53:74:33:cb:62:dd:7b:4b:04:67:95:ed:
         47:9e:aa:c7:b9:7f:50:bd:c1:4a:39:d7:a4:b9:ab:1a:50:e5:
         c0:af:91:64:fe:a9:a4:d1:87:3b:27:59:c9:16:f7:98:11:c5:
         59:18:c7:62:d9:e1:46:a7:96:da:88:67:f2:d0:c5:27:f0:b0:
         da:d5:b2:19:27:97:10:71:ac:30:f4:bd:23:7b:d8:2f:33:2b:
         64:a3:04:a9:71:0f:a6:ab:e7:2e:4d:39:fe:5f:72:e6:ee:19:
         7a:a0:c4:09:c8:3d:75:14:35:d9:70:2d:26:8c:fb:1c:75:e0:
         cd:c6:c3:66:6c:d1:49:4a:68:98:06:b2:25:bd:96:21:57:64:
         16:94:46:b3:b8:8c:b3:79:66:3a:dc:ee:09:fc:af:ac:14:34:
         1f:a6:a1:a3:a7:b9:ce:b6:f3:e4:20:56:2a:0d:ae:70:30:30:
         89:9c:60:51:71:9f:44:a0:d2:12:d8:83:ae:2e:d4:e9:24:7d:
         c9:03:72:6c:56:bf:49:35:27:b7:db:25:a1:a0:65:b4:c8:2b:
         18:bb:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:12 2024 by rpki-client on console-fra.rpki-client.org