Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd738d25-836c-347c-bdc3-2c379b7c7837.roa
File:                     cd738d25-836c-347c-bdc3-2c379b7c7837.roa (raw, json)
Hash identifier:          dXYrHKWekSCon/lXFDDYdhk2189V+GTAp6PYRGChEm4=
Subject key identifier:   01:D0:F1:69:67:CA:E8:97:7F:08:FB:6D:77:54:E6:8E:9C:B0:55:BB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AD15448CF6591DF5D9D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd738d25-836c-347c-bdc3-2c379b7c7837.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:d1:54:48:cf:65:91:df:5d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ee6cb69c-4102-49f0-b461-86e68f0bfdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:3d:33:d5:3e:d8:c3:8e:0c:47:bc:66:b4:
                    ca:8c:36:7a:ca:dc:7f:7b:48:18:8d:ea:d3:e6:5f:
                    88:66:85:0d:7f:c2:6a:b4:f1:b6:73:dd:88:ec:0f:
                    0a:d6:5f:f2:23:b3:0a:5f:53:42:c0:79:f2:e6:2e:
                    c8:8d:30:d3:2f:55:d9:62:58:0b:ee:38:0f:86:1d:
                    e4:03:2f:3b:96:e8:3c:d4:f4:9c:0d:b4:a9:0c:92:
                    16:0f:c7:00:4e:7f:b1:0e:1e:59:5d:55:a5:c4:6d:
                    9b:b1:86:df:d2:05:bb:93:75:9d:d9:24:ab:a2:7b:
                    8f:e2:b7:1b:39:52:43:5d:34:1f:40:2d:71:51:b3:
                    f1:21:ad:f6:65:7a:f0:8a:72:18:99:f8:02:61:ea:
                    3d:08:51:a1:0f:4c:d0:b5:5b:e2:44:42:00:5c:64:
                    11:cd:e6:60:e2:f4:64:2e:aa:95:9a:db:b3:dd:f7:
                    2e:27:a5:86:c4:4c:fc:c5:19:35:50:65:ec:85:4c:
                    7d:82:5c:06:8b:b8:80:b8:d3:98:09:76:e8:ce:38:
                    ab:c1:34:bd:8a:63:c6:7a:b9:b0:5f:f9:8b:d5:f6:
                    13:6c:8d:c0:ef:79:7f:4e:7d:be:a6:ec:d1:a4:a8:
                    35:c3:ca:c0:8d:ff:1e:d0:e4:cf:8c:c5:7f:f0:b0:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D0:F1:69:67:CA:E8:97:7F:08:FB:6D:77:54:E6:8E:9C:B0:55:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd738d25-836c-347c-bdc3-2c379b7c7837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:21:5b:b6:ec:f7:eb:98:45:05:bd:53:8d:18:7f:f0:5a:
         6b:a6:0f:5a:79:e5:81:cd:e1:42:31:e2:23:1f:b2:88:08:37:
         ad:e4:63:85:19:92:8f:71:85:bd:76:03:42:f2:48:7c:5e:0e:
         b7:e9:6e:bd:36:37:c3:88:0c:26:a7:8b:b2:4d:ba:95:71:df:
         c2:28:38:29:b4:05:c7:cd:7b:fb:d3:ef:d1:a3:73:0e:51:27:
         72:67:f0:5e:25:5c:fc:2c:33:8e:36:62:10:75:05:3e:5a:d5:
         f7:bc:da:3f:3f:b2:05:4f:8e:07:db:1b:df:de:9e:fe:da:f9:
         24:03:50:6b:c4:fb:7e:29:87:63:54:72:ba:27:5b:d8:43:a8:
         fe:c5:93:78:9e:81:8b:20:7a:fb:e3:b3:7a:8a:e3:79:d2:c0:
         16:87:17:76:e9:71:e0:62:59:ca:c4:69:37:3f:d3:6e:ca:fa:
         f1:57:e1:25:08:6f:af:9b:3b:55:5f:9b:49:dd:a3:bb:8d:1e:
         37:a0:35:d1:f0:52:be:65:35:32:1c:c4:bd:2e:8b:8f:be:2d:
         53:cd:8d:51:49:d9:e2:a6:03:0b:66:0f:1f:f0:65:e9:7f:e3:
         dc:ac:ec:6a:c5:e2:89:77:72:2b:9f:f1:08:ba:8f:2c:98:73:
         7f:26:f4:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtFUSM9lkd9dnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZWU2Y2I2OWMtNDEwMi00OWYwLWI0NjEtODZlNjhmMGJmZGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8I9M9U+2MOODEe8ZrTKjDZ6ytx/e0gYjerT
5l+IZoUNf8JqtPG2c92I7A8K1l/yI7MKX1NCwHny5i7IjTDTL1XZYlgL7jgPhh3k
Ay87lug81PScDbSpDJIWD8cATn+xDh5ZXVWlxG2bsYbf0gW7k3Wd2SSronuP4rcb
OVJDXTQfQC1xUbPxIa32ZXrwinIYmfgCYeo9CFGhD0zQtVviREIAXGQRzeZg4vRk
LqqVmtuz3fcuJ6WGxEz8xRk1UGXshUx9glwGi7iAuNOYCXbozjirwTS9imPGermw
X/mL1fYTbI3A73l/Tn2+puzRpKg1w8rAjf8e0OTPjMV/8LBVKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHQ8WlnyuiXfwj7bXdU5o6csFW7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Q3MzhkMjUtODM2Yy0z
NDdjLWJkYzMtMmMzNzliN2M3ODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPRIVu27PfrmEUFvVONGH/wWmumD1p55YHN4UIx4iMfsogIN63kY4UZ
ko9xhb12A0LySHxeDrfpbr02N8OIDCani7JNupVx38IoOCm0BcfNe/vT79Gjcw5R
J3Jn8F4lXPwsM442YhB1BT5a1fe82j8/sgVPjgfbG9/env7a+SQDUGvE+34ph2NU
cronW9hDqP7Fk3iegYsgevvjs3qK43nSwBaHF3bpceBiWcrEaTc/027K+vFX4SUI
b6+bO1Vfm0ndo7uNHjegNdHwUr5lNTIcxL0ui4++LVPNjVFJ2eKmAwtmDx/wZel/
49ys7GrF4ol3ciuf8Qi6jyyYc38m9Ek=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:26 2024 by rpki-client on console-fra.rpki-client.org