Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2dd4f7c-59b6-37a1-be0b-01256eba0cd0.roa
File:                     c2dd4f7c-59b6-37a1-be0b-01256eba0cd0.roa (raw, json)
Hash identifier:          zyvDFI/l97/imfAdtmIL4KD3P38sUBLrxenFlqaYiks=
Subject key identifier:   C4:9D:78:19:CE:82:2E:CD:A8:C5:32:C1:1B:6C:F2:33:0A:E0:B3:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A411C7956B735F030F2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2dd4f7c-59b6-37a1-be0b-01256eba0cd0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:41:1c:79:56:b7:35:f0:30:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9a6090fe-7ba3-4931-953e-13457c467b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:3f:c6:ef:5d:09:d9:44:fe:44:a0:31:65:
                    bf:3d:34:80:3b:64:76:d5:96:d7:36:6d:71:92:c7:
                    70:93:6c:21:74:32:ef:07:97:db:0f:53:0e:84:7c:
                    b5:54:5b:28:96:9c:1b:e7:6c:58:3a:f2:61:2a:ff:
                    0a:3e:bf:c3:f6:10:a9:0d:c6:91:31:2d:88:bd:4f:
                    77:8f:61:d6:da:b1:e0:15:6d:13:7a:a9:35:fa:50:
                    fc:d0:58:d3:bc:6d:3a:f9:54:bd:0c:a3:16:02:83:
                    89:99:37:68:ca:84:fa:95:20:9a:4b:9a:cd:e9:d7:
                    20:1a:30:27:a4:8d:50:06:e9:8d:ab:53:6b:bb:97:
                    4a:57:16:12:c9:74:8b:ed:ed:a6:aa:19:f2:94:39:
                    5f:20:66:3d:b5:f6:fc:98:8e:48:89:a5:97:53:14:
                    c8:5b:4a:83:dc:05:a8:b7:64:38:43:94:09:8a:47:
                    85:8b:b6:f6:ee:ad:6e:31:87:63:63:be:b4:51:07:
                    d6:fe:4b:72:26:3f:1b:26:08:e8:f6:f8:09:00:86:
                    5c:e7:40:bb:1e:24:55:cc:84:2c:ab:f6:07:f3:af:
                    7c:ce:78:20:3a:fc:61:38:41:a4:14:14:bd:49:7a:
                    1f:0d:6f:af:c9:85:3f:83:b5:9a:43:e5:c9:16:93:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9D:78:19:CE:82:2E:CD:A8:C5:32:C1:1B:6C:F2:33:0A:E0:B3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2dd4f7c-59b6-37a1-be0b-01256eba0cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:03:a4:c6:b6:05:31:14:29:63:de:ea:83:82:82:e7:9d:
         ce:51:65:de:6f:fc:13:0f:1f:4b:cc:9b:00:8f:23:39:9e:6d:
         ec:55:71:00:25:56:85:47:14:04:44:17:9c:e1:2f:39:e4:dd:
         1e:b6:d7:61:86:4b:83:f8:dc:0a:c4:95:90:ae:a5:70:9b:af:
         9c:8f:1f:0a:06:0b:5e:33:cf:1a:1b:3c:46:fa:01:3e:1b:19:
         f4:61:13:e8:bb:06:db:28:c1:10:6b:95:a5:f1:94:e6:5a:08:
         1a:ab:c2:6f:4c:3b:89:de:a2:5e:e2:3c:13:c5:dc:7a:dc:74:
         de:5c:69:23:b1:df:30:ef:0e:f4:15:46:fd:81:24:02:38:e7:
         78:11:ee:ad:8d:80:c7:dc:a3:7f:24:d8:98:43:89:0c:db:37:
         fb:af:fd:52:be:92:32:1c:c7:3e:90:08:49:47:0b:e7:b8:96:
         d9:d8:c1:67:10:f2:27:12:db:17:3a:1b:6c:05:20:de:e3:4f:
         57:1e:e1:e9:94:9f:01:d5:be:df:82:46:75:d3:3a:03:39:1d:
         1e:c6:f2:4c:5c:3a:7b:6b:09:b6:a5:6e:49:e5:cb:83:3a:7b:
         e6:85:10:98:92:f8:a7:2e:d1:e6:df:0b:2c:5c:2b:35:6f:02:
         d1:67:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:02:20 2024 by rpki-client on console-fra.rpki-client.org