Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bed6a4fe-4df4-3c96-a77b-0a72220435ae.roa
File:                     bed6a4fe-4df4-3c96-a77b-0a72220435ae.roa (raw, json)
Hash identifier:          NgNLaLaD/tyRcmJJmgETogCSlHdebxBQ6qMfWJAfAdA=
Subject key identifier:   69:A8:E5:13:A6:E6:35:FF:F4:0C:D4:41:35:5E:B7:15:73:FE:8F:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DBB674DA0358B5D10F780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bed6a4fe-4df4-3c96-a77b-0a72220435ae.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:bb:67:4d:a0:35:8b:5d:10:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=256a3f9d-c6bd-489e-be6b-9f88df156d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:2b:1b:8a:bf:55:c3:a6:f2:b1:81:91:74:
                    f6:de:4c:9e:65:0a:45:e7:c1:6d:1b:d5:43:28:e4:
                    19:c5:82:0a:92:11:4b:15:69:f1:33:ad:ac:23:79:
                    1e:28:ac:59:19:10:e8:92:3f:ae:de:64:11:c3:40:
                    20:d5:47:8d:27:e0:03:8c:09:54:bb:86:ce:60:48:
                    b4:1f:cf:b0:0b:2e:37:51:b8:db:80:ea:97:7d:b9:
                    58:ae:26:9d:cd:51:f4:fd:cb:2d:13:c8:91:e8:4e:
                    7a:42:90:ab:4a:57:4d:5d:fc:c2:64:98:b7:74:75:
                    f0:f7:e0:c5:fe:71:39:7d:d0:1c:87:19:3e:c1:1c:
                    f9:ed:16:f6:f8:a4:58:c9:8e:a1:4a:02:dc:7d:9d:
                    fc:be:68:84:ed:f8:fe:b8:f5:1c:bb:3e:1b:a0:a6:
                    1c:16:71:b3:42:6b:ea:6d:c4:02:db:14:1d:bb:8a:
                    bd:15:00:ae:85:de:ce:b6:81:a3:b0:ae:b6:a5:b1:
                    48:be:dd:68:3a:75:39:78:12:05:8d:9f:ee:03:94:
                    c1:8a:f5:c5:6d:e5:0c:77:24:e8:1d:1b:5e:83:c7:
                    ff:29:fa:22:20:d1:2e:3a:ac:89:8c:f7:51:a1:e6:
                    77:76:2e:bc:57:41:df:60:72:16:ca:7d:e4:1d:a5:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:E5:13:A6:E6:35:FF:F4:0C:D4:41:35:5E:B7:15:73:FE:8F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bed6a4fe-4df4-3c96-a77b-0a72220435ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:35:7a:00:6e:f2:39:3e:08:13:c4:cb:db:51:25:37:07:13:
         05:6d:3b:4c:09:e4:ba:59:b0:f2:e6:95:4e:bb:5e:39:e2:7d:
         e4:66:c1:07:f5:9c:8b:48:7f:26:a4:dc:b4:63:e8:e0:d8:6a:
         59:27:f6:97:6b:3e:b6:e7:71:97:09:9f:d1:a8:f8:8c:a3:d6:
         ee:7c:50:74:7d:44:39:61:a5:57:ad:0b:cf:33:44:6f:59:79:
         d5:f2:02:20:ab:f5:31:dc:2b:57:61:2e:2b:83:36:59:a3:11:
         28:43:55:bf:34:83:85:e0:75:71:d9:ef:61:35:fc:57:2d:66:
         eb:51:3c:23:21:01:d1:2b:e4:39:e5:70:c9:89:b4:d1:b2:fb:
         e1:90:e1:e6:36:ed:8f:9e:ad:a9:28:67:c2:f4:1c:25:60:17:
         af:7e:7f:18:42:4c:95:af:ea:c1:51:b0:ae:db:a5:d3:79:95:
         52:b1:68:9f:87:a5:c2:c8:76:97:ea:f4:88:61:9f:65:13:a5:
         7b:eb:63:da:0d:f2:07:ed:be:79:bf:80:5a:1c:6e:f5:54:60:
         0b:65:14:77:b4:b2:6a:a5:b7:71:ad:cf:91:08:d5:89:6e:fd:
         0c:f4:c8:17:f9:ac:d9:15:7c:59:e3:bb:5d:40:e4:34:88:95:
         32:a9:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:10 2024 by rpki-client on console-ams.rpki-client.org