Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa
File:                     c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa (raw, json)
Hash identifier:          ZFfgheQhHTp7QX5ob+UHLAECMaDBO4bnpOpA1aVx1Mk=
Subject key identifier:   18:33:ED:AB:E4:80:40:6A:BF:3A:42:B5:34:BA:B2:BF:7C:A6:BA:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3B013961B76C70D1BF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3b:01:39:61:b7:6c:70:d1:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d8c7ccdf-dee6-409b-84a6-859da025c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b6:e3:29:87:34:1f:c9:2b:08:bd:8c:17:4c:
                    4f:de:f6:65:e4:68:bb:c3:0f:2a:6f:1b:9d:52:f3:
                    4e:22:c0:57:d0:ea:a4:f5:90:2f:ce:22:69:52:06:
                    ad:cd:c8:61:c1:0d:d3:95:8d:22:c6:b1:93:7a:c7:
                    60:90:b5:df:ea:c7:86:b7:eb:b5:02:b4:54:10:bb:
                    25:9f:8b:cf:35:73:21:b8:1d:a1:0b:ed:0a:23:bc:
                    25:39:ec:dd:e1:46:34:b4:bb:71:fc:01:c5:33:06:
                    71:b8:93:82:7c:1b:ab:e5:db:2a:29:ad:4b:d1:ff:
                    4b:ce:03:ab:50:a2:ba:ea:dc:8a:89:b6:d2:ee:6c:
                    c7:cc:be:5f:ce:6d:94:fb:52:25:b4:11:62:14:87:
                    60:3a:68:89:60:11:e0:b6:36:74:64:75:81:4b:23:
                    fe:60:4f:4e:12:c7:3b:9d:62:5a:25:96:38:65:9b:
                    e2:a0:d9:59:22:55:7a:22:4f:30:fc:40:d8:ef:a5:
                    2e:31:95:18:39:ba:be:87:10:86:29:25:e8:72:6f:
                    99:40:67:ea:89:ae:51:d8:7e:ab:02:a7:cd:3b:f6:
                    7f:f0:ae:71:17:15:7b:c8:f9:d9:45:d7:e3:f0:76:
                    81:77:e4:c0:56:8b:52:f8:28:0f:cf:52:50:23:86:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:33:ED:AB:E4:80:40:6A:BF:3A:42:B5:34:BA:B2:BF:7C:A6:BA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:2e:d5:41:28:cc:e9:0f:be:d0:e3:c5:95:6b:26:cc:ea:98:
         3d:37:ad:16:2f:b1:74:55:1b:42:cd:b5:2b:c7:04:3d:d9:18:
         bd:a7:7d:95:9f:d1:a8:c3:bc:63:ae:b0:72:af:f1:b6:3b:ac:
         5a:8e:5b:40:33:73:5e:f1:31:3d:92:f3:99:57:71:a7:22:12:
         07:13:6c:8c:f7:48:e5:46:f1:02:a4:5e:08:90:79:bf:ac:ae:
         23:bd:8d:25:e6:b7:11:2f:22:d4:7c:b2:0d:99:00:17:ab:c5:
         ea:af:f7:f2:66:36:60:98:bd:bd:44:0e:83:dd:ed:f1:9a:65:
         ed:30:f7:36:ad:a4:db:00:a8:16:08:b0:88:fb:6c:a9:80:b6:
         52:d8:49:53:4c:82:02:1c:d2:e3:77:f7:fe:86:b1:29:97:6b:
         a3:ff:b6:56:01:1c:38:48:4d:98:28:16:36:5f:17:d5:7f:ee:
         ca:25:2d:ca:53:fd:09:d7:8a:1a:9d:1a:4a:d1:67:f5:4e:81:
         a9:eb:7f:5c:ca:aa:c7:9c:92:5c:c3:3a:83:15:b0:a4:8e:95:
         21:ef:db:14:a1:6c:dc:1f:e2:c1:f6:d9:f5:ae:7e:0f:f6:b0:
         5d:d6:c6:31:e1:50:12:ed:5a:42:8f:51:35:45:8e:39:0d:35:
         72:11:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org