Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa
File:                     c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa (raw, json)
Hash identifier:          uFfV/0SOVlKwqFt3ATf4m0MFnYGmZFeic6Yk01nKUXA=
Subject key identifier:   62:34:27:15:73:B1:22:2C:CB:EF:B8:42:25:72:FE:C5:B1:5D:71:F5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E37376957485DFECE9080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:37:37:69:57:48:5d:fe:ce:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=aef3fc8c-3e94-4f0a-80fb-0a677b841260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:ca:cf:7d:58:10:67:e1:49:fa:29:bd:32:
                    6c:ac:69:b9:61:0d:da:f7:a6:7c:0e:29:a7:e4:a1:
                    2c:73:e5:72:f6:44:70:5b:ab:df:f8:f8:e1:ab:dc:
                    d2:32:9f:69:df:34:76:97:cd:42:40:2b:b9:d8:62:
                    a2:21:bc:da:94:2e:47:9c:1a:1e:50:d8:47:9a:34:
                    c7:90:fa:d7:26:99:98:fa:14:2c:85:72:c9:ef:5c:
                    b2:f3:cf:80:e3:62:2d:de:e2:7d:4c:51:21:3c:6b:
                    f7:33:aa:5d:6b:92:11:87:67:c9:ba:f3:bc:a7:79:
                    af:16:2a:92:a4:79:0d:c5:58:57:07:88:3d:6a:d0:
                    68:a2:93:f9:57:c9:4a:e3:cc:f0:6d:5e:f6:4f:aa:
                    b2:0f:0b:57:25:31:29:33:50:dc:2a:01:88:eb:ae:
                    a8:bc:40:0b:02:b1:63:36:27:f8:b6:5f:52:28:7c:
                    42:81:43:b9:46:a3:3d:7f:aa:42:5b:a4:11:ee:b3:
                    9f:c2:a1:ad:75:9c:86:f7:6e:5e:ad:28:0d:c6:6b:
                    38:a0:08:ca:17:59:e1:fe:f0:2c:39:46:be:b0:75:
                    09:81:e6:12:cb:fc:e6:55:39:d1:5d:44:bc:04:67:
                    3b:cc:61:1a:1d:55:06:06:da:28:13:1a:8e:8e:ba:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:34:27:15:73:B1:22:2C:CB:EF:B8:42:25:72:FE:C5:B1:5D:71:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ae317d-1593-3985-8c14-a7d6fcce14e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:44:1b:e4:ca:0e:83:a8:cd:00:a0:c0:43:18:b7:69:18:
         b5:fd:02:4a:c4:e1:c5:35:5e:f0:bb:8e:12:be:fa:a8:0d:69:
         39:7a:a8:8c:e2:e6:ce:5f:e8:ea:7a:92:ff:33:29:ad:4b:ae:
         90:7a:8c:5f:8b:96:d0:12:01:9b:86:65:fd:01:e5:d7:bc:45:
         dc:c3:a3:76:00:79:0b:57:fd:59:93:29:55:20:17:7a:e8:a1:
         81:50:fa:d1:4c:58:ad:2b:3d:95:b8:de:2f:5b:6d:02:c0:48:
         ce:40:f7:24:c9:0d:c3:36:5b:82:8e:ac:77:d4:5e:f6:27:69:
         01:30:dc:cd:02:75:fd:cf:92:78:11:96:67:e4:ee:54:22:0b:
         2d:bf:f6:6d:a4:65:26:fd:90:d7:e5:3e:cf:43:c3:5b:36:61:
         33:81:6b:75:d3:81:7f:41:fd:9e:38:72:50:83:71:4a:1c:72:
         e9:c5:35:7c:43:ec:26:c7:d1:61:3e:f4:16:d2:6f:f0:71:68:
         55:cf:46:c7:cc:d1:8c:14:61:9e:69:ad:e6:c3:00:d2:e0:45:
         1d:15:64:7a:0a:0b:08:48:9f:56:78:bc:a0:ff:f1:0c:f4:97:
         b5:ed:cd:38:68:7d:7b:35:84:a4:ef:69:fb:39:bd:63:8a:74:
         26:12:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org