Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc032508-e432-344b-9b44-50c2a22f0ac9.roa
File:                     cc032508-e432-344b-9b44-50c2a22f0ac9.roa (raw, json)
Hash identifier:          Zzona43stF44TBJs4u3OsFlsrMQ7tEkCSIkTEI9gpC0=
Subject key identifier:   3D:C9:3F:F3:CB:A4:8E:B2:58:ED:D5:7B:9C:A5:1A:E0:65:EE:68:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E37C571BB7E8083BC7680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc032508-e432-344b-9b44-50c2a22f0ac9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:37:c5:71:bb:7e:80:83:bc:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9a59ec5e-c12b-4cd2-b1ad-6b83ba2ff933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:a9:19:fe:5a:f5:cf:3f:62:a9:14:df:7f:
                    5c:2c:06:4b:b8:15:0b:3e:d5:88:72:95:ee:bc:02:
                    fe:3c:f5:23:e0:ae:39:ae:03:51:00:3e:e0:2c:9f:
                    ae:b0:7d:90:df:bd:ea:a9:19:1e:62:6a:f9:3f:c2:
                    72:bb:80:18:23:b5:79:8f:16:e0:44:28:49:e6:a1:
                    38:9f:3b:77:23:af:66:34:50:1a:64:0a:f5:83:ac:
                    2a:01:04:ab:c8:a2:ae:a0:74:76:b6:a5:7d:0d:9d:
                    f2:1a:bb:8f:06:c3:39:34:b2:8d:6b:aa:13:46:98:
                    99:7b:75:1f:62:d2:d1:69:23:a5:a8:55:d2:10:a7:
                    38:58:6b:0d:c3:23:28:04:e1:48:01:3e:51:49:9f:
                    44:b1:f4:42:ef:1a:76:f2:cd:ba:a2:c5:23:cd:93:
                    a1:30:cf:0f:2a:42:0d:83:c0:b1:1c:9b:28:36:a0:
                    0e:34:92:82:29:d1:ca:7e:72:c1:e6:83:34:63:8d:
                    0d:73:24:a6:d2:6b:33:93:9a:20:2e:03:a0:13:6f:
                    78:ab:fe:92:b0:a9:c6:14:69:9d:ad:d7:a1:cd:46:
                    d4:08:37:e6:2a:50:4b:02:2a:3f:0b:34:c5:07:a9:
                    8d:78:11:da:81:8d:96:13:62:fb:21:f9:db:71:15:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C9:3F:F3:CB:A4:8E:B2:58:ED:D5:7B:9C:A5:1A:E0:65:EE:68:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc032508-e432-344b-9b44-50c2a22f0ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:b5:2a:de:4f:93:6a:b4:07:4b:cb:3c:57:d2:ed:37:5f:
         5f:43:9c:46:07:61:cd:a2:66:5c:6c:51:38:ae:3f:ff:05:2f:
         b2:56:a1:c7:0b:1e:05:37:fa:7c:ba:07:58:7e:66:20:ca:79:
         ff:9c:d5:02:7b:7f:75:61:d7:56:28:27:29:28:dc:26:30:93:
         09:b0:42:ae:1e:04:93:69:9d:2b:13:06:f7:8c:f1:ae:5a:03:
         f4:8f:e1:b8:6d:63:d4:06:c5:66:17:4d:f3:79:7d:47:3e:53:
         e7:ea:86:74:14:40:7c:ce:96:a2:4e:bf:67:6d:53:4f:04:a6:
         18:1b:f0:ef:72:37:7a:13:8b:16:75:44:7f:9d:53:a7:96:cd:
         57:bc:39:9a:71:b2:e5:ba:ef:5d:e8:1f:89:cc:5e:4b:35:47:
         f0:21:d1:13:d4:64:12:ee:2c:7b:d1:87:20:5d:fc:0c:86:39:
         d4:d1:74:9d:ff:fe:55:21:12:78:93:c0:02:8e:78:93:e1:5c:
         8f:71:f5:f1:a4:ef:85:d8:0b:24:c7:f3:2d:4e:4a:15:7c:d2:
         a4:7a:30:93:0a:33:6c:95:36:8b:76:e1:a3:99:6a:de:95:64:
         28:5f:83:6c:2b:70:a2:3e:54:fb:ae:fa:5e:6e:eb:84:77:4f:
         fe:93:6e:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPjfFcbt+gIO8doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
OWE1OWVjNWUtYzEyYi00Y2QyLWIxYWQtNmI4M2JhMmZmOTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpapGf5a9c8/YqkU339cLAZLuBULPtWIcpXu
vAL+PPUj4K45rgNRAD7gLJ+usH2Q373qqRkeYmr5P8Jyu4AYI7V5jxbgRChJ5qE4
nzt3I69mNFAaZAr1g6wqAQSryKKuoHR2tqV9DZ3yGruPBsM5NLKNa6oTRpiZe3Uf
YtLRaSOlqFXSEKc4WGsNwyMoBOFIAT5RSZ9EsfRC7xp28s26osUjzZOhMM8PKkIN
g8CxHJsoNqAONJKCKdHKfnLB5oM0Y40NcySm0mszk5ogLgOgE294q/6SsKnGFGmd
rdehzUbUCDfmKlBLAio/CzTFB6mNeBHagY2WE2L7IfnbcRXiVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3JP/PLpI6yWO3Ve5ylGuBl7minMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2MwMzI1MDgtZTQzMi0z
NDRiLTliNDQtNTBjMmEyMmYwYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqNtSreT5NqtAdLyzxX0u03X19DnEYHYc2iZlxsUTiuP/8FL7JWoccL
HgU3+ny6B1h+ZiDKef+c1QJ7f3Vh11YoJyko3CYwkwmwQq4eBJNpnSsTBveM8a5a
A/SP4bhtY9QGxWYXTfN5fUc+U+fqhnQUQHzOlqJOv2dtU08Ephgb8O9yN3oTixZ1
RH+dU6eWzVe8OZpxsuW6713oH4nMXks1R/Ah0RPUZBLuLHvRhyBd/AyGOdTRdJ3/
/lUhEniTwAKOeJPhXI9x9fGk74XYCyTH8y1OShV80qR6MJMKM2yVNot24aOZat6V
ZChfg2wrcKI+VPuu+l5u64R3T/6TbiM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org