Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b229b166-a851-3b89-a845-5c52a2e5af0d.roa
File:                     b229b166-a851-3b89-a845-5c52a2e5af0d.roa (raw, json)
Hash identifier:          beIBouyA9cXsPJH3rDYfrE1IbX+ew3oSlFJmaEDDPkc=
Subject key identifier:   1D:E7:40:EB:B0:49:B5:B5:F9:A3:08:91:49:74:1D:CF:48:52:D8:BB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DBD79819D0F658DFC7580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b229b166-a851-3b89-a845-5c52a2e5af0d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:bd:79:81:9d:0f:65:8d:fc:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=be406b7e-9f89-4606-9aa9-72fe1e302880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:90:f6:07:a6:89:50:e4:07:68:5a:3b:7f:
                    22:95:9b:2e:0b:ae:cf:a9:81:85:c1:01:ae:b7:f9:
                    70:cc:27:c5:78:6f:fc:8f:b5:8a:86:c7:33:30:68:
                    45:7a:25:9b:15:4f:f8:de:06:7b:35:72:b5:a0:c0:
                    56:d7:a0:d2:2d:b0:92:cb:a8:c6:88:6f:e3:a1:78:
                    37:f6:28:ab:d1:07:4a:d0:5f:e0:30:24:ce:1d:2c:
                    3d:e5:93:a9:e4:91:02:e5:c7:05:66:e3:7a:2b:b6:
                    33:51:e7:2e:13:bd:bd:fa:1e:38:cb:a3:5d:4a:07:
                    c8:6f:9c:f8:42:bd:fc:dc:69:94:01:f5:ac:2e:5a:
                    62:d8:ca:9a:95:d8:82:55:45:5e:cc:7d:f7:70:92:
                    7b:34:81:e5:30:22:34:49:36:de:2e:d8:3d:aa:de:
                    a1:5d:ea:72:e7:49:8c:22:34:e1:78:95:5d:73:4d:
                    d0:04:25:b5:b5:d0:22:79:32:9e:8e:1f:83:b6:86:
                    d4:b2:d0:2d:ba:e3:d9:a6:db:36:b6:a8:09:59:56:
                    29:82:1a:28:ba:53:ff:8a:64:48:f0:08:76:c0:61:
                    b8:f9:fa:0a:c5:77:c0:79:ad:79:9c:c2:7c:fd:e2:
                    7b:87:10:e6:af:9f:68:05:9f:ec:82:1b:56:8d:55:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E7:40:EB:B0:49:B5:B5:F9:A3:08:91:49:74:1D:CF:48:52:D8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b229b166-a851-3b89-a845-5c52a2e5af0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:66:73:f4:e9:10:20:ea:3f:fc:77:5d:c0:81:5c:04:cd:
         f0:46:06:44:c4:51:2c:c3:83:b9:c3:df:ae:65:a6:4d:74:a1:
         f6:60:48:29:f5:d4:7d:72:81:21:0e:6d:0e:0b:0c:02:70:7a:
         b5:30:17:7f:fc:71:aa:7b:82:90:ee:cf:03:35:c6:66:56:99:
         d8:da:9f:10:bb:19:8b:3f:67:ea:07:3e:21:fc:e3:cd:39:dd:
         5f:0e:ff:1a:0f:fb:03:ff:19:11:ae:9c:40:1d:87:d9:4f:ed:
         29:76:87:c5:a3:a2:64:80:1e:c5:08:a5:a2:18:b6:10:ec:e9:
         5c:e8:06:35:e0:aa:c7:aa:0c:ca:78:22:2f:a6:a2:7b:b8:21:
         ed:40:8a:d8:35:32:b1:4b:78:ad:9c:06:ee:03:1d:28:64:95:
         92:15:fb:99:93:92:41:4f:7e:d8:aa:61:05:a6:ce:9d:6e:20:
         35:36:a3:26:8b:fe:bc:be:9e:a3:e6:54:08:1c:77:e2:14:16:
         7b:17:a6:18:2c:9a:9a:f7:8f:71:f3:41:97:36:41:57:f7:b7:
         0b:47:f7:56:3f:61:e5:f6:51:67:42:24:d2:d8:b8:32:2f:b7:
         b4:21:c2:e2:e7:0d:28:ed:39:96:c0:ef:a8:8f:44:0c:32:ba:
         3b:73:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org