Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bff5539c-d91f-32bb-be36-52c2a0ed42e1.roa
File:                     bff5539c-d91f-32bb-be36-52c2a0ed42e1.roa (raw, json)
Hash identifier:          JjClLeZdY0LNfARcGLAMyorchl/kPgiDpfBnKdWPRT8=
Subject key identifier:   66:35:61:A5:16:CF:FE:30:34:F0:9E:32:02:E6:F5:63:E2:71:0F:82
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E01DFE90B51EDF00DB500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bff5539c-d91f-32bb-be36-52c2a0ed42e1.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:01:df:e9:0b:51:ed:f0:0d:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=af1b1a59-60bf-4223-a8ec-588ad6ec14a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:c1:cf:39:df:33:13:5a:9c:c4:59:8a:b9:
                    be:e0:53:2e:a9:74:4a:71:f4:b3:20:f2:ad:c7:0d:
                    c3:b7:d5:88:9c:61:ed:0e:10:83:9a:cb:25:ba:62:
                    f5:d1:4a:21:0e:70:0a:89:55:e0:ab:0f:0f:80:b6:
                    8c:08:2a:c1:82:57:0c:5d:4c:fb:ac:7f:cd:d0:46:
                    9a:20:cc:83:a3:47:71:3d:58:56:51:a1:3c:88:ac:
                    f6:60:37:7e:66:c1:d9:44:07:d9:87:68:ff:bd:a7:
                    8e:39:bc:6d:90:38:1c:f6:18:1e:54:9a:be:82:d2:
                    95:42:fe:dc:f9:df:eb:d9:cb:a7:af:0c:3a:14:83:
                    c4:ea:72:3b:99:be:a9:59:94:a5:e8:fe:82:61:89:
                    17:f0:ed:fb:65:a0:7c:3c:a3:cf:da:8f:02:11:42:
                    40:9f:3a:8e:c0:70:be:a6:2e:8a:2f:f6:a5:1b:1d:
                    6e:08:c7:dd:79:0a:16:75:d6:b3:c2:b2:6a:1e:fd:
                    63:51:89:96:4c:75:2f:01:55:33:da:97:5c:fa:7f:
                    08:4c:e1:5a:17:cf:7b:92:04:79:39:c4:51:df:1d:
                    ec:89:8d:01:84:a0:2d:35:e4:85:79:cf:89:9e:54:
                    c7:a5:b8:15:b4:fa:23:e0:5e:c5:b0:b0:4d:7b:a4:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:35:61:A5:16:CF:FE:30:34:F0:9E:32:02:E6:F5:63:E2:71:0F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bff5539c-d91f-32bb-be36-52c2a0ed42e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:15:51:52:a1:a0:01:39:27:e3:4c:e2:dc:72:38:62:d3:19:
         36:9e:2a:8d:40:fd:23:70:bf:1e:de:f1:49:70:ce:a0:0b:15:
         22:b3:56:dc:d2:c8:95:2f:c3:21:89:7f:fc:31:51:77:b9:fb:
         e0:92:60:9a:70:8b:56:80:4f:41:c5:2d:6f:6a:f1:ae:eb:d7:
         2a:81:e5:c3:8d:b7:4d:9b:e9:7d:ea:f5:ef:4c:e3:66:4c:ca:
         f0:6e:c1:51:bd:88:55:b2:23:81:5e:b2:62:8f:80:17:a5:07:
         ac:0b:f9:b7:8f:e6:0d:d0:1e:14:20:a0:a7:7e:2c:65:fc:00:
         01:2a:80:bb:52:4a:f2:5a:41:2c:55:d6:09:24:d1:7f:b0:5f:
         30:ed:f7:f3:7a:8a:2a:a7:dc:98:e4:be:f7:5e:d8:65:b2:ff:
         f1:e6:01:a2:b1:5f:a0:7b:0a:38:40:4b:7b:03:f2:8c:49:56:
         1d:01:5c:76:10:2f:62:50:c4:cf:a3:fd:fd:9f:e5:04:47:d7:
         d4:69:3c:32:f9:71:15:21:3d:92:4f:79:76:fe:00:22:41:53:
         92:7c:3c:e8:df:7e:11:6e:09:b0:33:d0:5e:72:8a:bb:6a:d1:
         72:9f:cf:b3:08:d6:ef:80:cd:87:86:ba:bd:40:3e:0f:e6:93:
         2e:3a:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:09 2024 by rpki-client on console-fra.rpki-client.org