Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b55efe75-bc37-3fcb-90bc-a2ef409558d8.roa
File:                     b55efe75-bc37-3fcb-90bc-a2ef409558d8.roa (raw, json)
Hash identifier:          NMR0cl0ZNPoqvoW4vdZoxZHYSx+BWzg1vGo/n9kNAyE=
Subject key identifier:   78:E6:F6:14:07:A4:88:0E:B6:55:B5:3F:41:ED:47:82:73:02:E2:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62B02924209B5CAFB51E3A8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b55efe75-bc37-3fcb-90bc-a2ef409558d8.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:02:92:42:09:b5:ca:fb:51:e3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0d884d40-28f1-4b45-b40c-f5a13b4247a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:d0:74:ad:06:95:b1:59:a8:e9:35:33:5e:
                    e4:e3:18:b4:ff:0a:71:c8:6a:57:d1:62:24:7b:66:
                    a8:89:bb:e8:ce:1f:15:40:71:14:b1:84:66:bd:52:
                    30:0d:66:24:57:f4:11:5b:9f:6a:c3:cd:e2:16:23:
                    bc:b0:4c:39:96:c5:ca:55:04:97:74:1d:86:9c:7f:
                    c9:73:21:c4:78:ad:8f:2e:9f:29:f5:63:c1:5f:bb:
                    8a:04:0b:99:7f:77:7e:61:b9:a1:06:b4:6a:2b:54:
                    25:f5:40:a4:b7:cd:fc:ec:c5:ee:c6:b4:fc:1b:8f:
                    f5:38:f2:04:5e:98:f2:24:50:cf:a9:19:34:2c:ae:
                    e7:0f:35:82:cf:3c:cd:c6:e7:9e:5a:ab:7b:13:74:
                    f0:fe:35:67:ce:b2:8e:a8:58:2c:4c:42:d3:92:dc:
                    3a:11:79:3b:f5:43:54:fe:fb:d7:8b:db:64:f4:98:
                    86:d2:2c:72:15:3b:03:14:be:40:b9:90:57:61:07:
                    d2:c0:24:38:bf:48:9c:60:79:0d:c6:fa:67:15:0b:
                    de:de:d1:e0:84:57:da:77:66:8c:87:68:34:a9:09:
                    63:01:7d:4a:93:5b:ee:98:33:de:eb:cc:c4:80:4e:
                    fd:1f:7f:a8:dd:e2:e4:cb:1f:11:ae:b2:39:cd:3d:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:F6:14:07:A4:88:0E:B6:55:B5:3F:41:ED:47:82:73:02:E2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b55efe75-bc37-3fcb-90bc-a2ef409558d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:6a:e0:81:d2:c7:fa:8f:38:ec:6b:62:09:75:a9:87:e2:bc:
         22:ab:c7:a8:21:13:17:d7:4e:4a:2f:82:b8:80:45:31:07:d3:
         64:a8:e6:ff:c1:20:1d:d2:d0:c2:e5:73:a8:df:07:a0:95:ab:
         7d:ad:cc:3a:f9:4e:bd:7e:f0:5e:87:d6:1e:45:23:53:97:60:
         29:18:ee:76:70:f8:55:e0:b0:88:ef:ce:c7:59:9a:05:ff:71:
         cc:ba:cb:c8:d7:99:2e:3f:c4:b6:ea:ec:5e:89:4c:1d:07:94:
         04:e7:e3:ec:2a:2c:9c:94:27:a1:15:0d:d0:63:6e:5a:e3:a9:
         64:34:16:67:f7:6d:2d:26:7b:2b:ce:9e:7b:dd:c1:c8:f5:f1:
         bf:95:89:11:52:07:c0:ff:93:61:0f:f6:86:a3:35:a6:27:e4:
         4c:74:3b:da:a4:2c:42:89:8a:63:b5:46:3a:eb:08:63:0f:3c:
         5d:2c:18:84:3c:7a:b2:47:79:7a:5e:6c:a8:99:3c:38:32:f9:
         74:54:61:0a:1f:e4:fe:5e:74:52:f9:a9:a3:8f:bf:d3:8c:81:
         35:84:c1:36:7c:b6:1e:5c:7f:42:45:e0:0a:11:f4:e0:bc:21:
         58:59:0f:5c:be:22:5a:31:82:67:ec:ee:97:ce:22:3e:c1:78:
         ec:a9:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:02:14 2024 by rpki-client on console-fra.rpki-client.org