Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
File:                     ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa (raw, json)
Hash identifier:          T0ritlq9qziNBywlBfM9nio1hH6+jgm6Uy1EunJqP9I=
Subject key identifier:   27:A5:8A:6D:36:89:33:90:59:0F:B7:5D:07:2E:67:7B:AF:DC:89:C1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E03FBCFCE227B364C0B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:03:fb:cf:ce:22:7b:36:4c:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6e24bdae-386d-442e-9c10-da63ebdd1aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:a6:17:f9:9f:92:7d:96:0b:54:7a:53:c3:
                    7d:c3:9f:b0:b8:f8:48:4b:7a:11:b6:34:35:ee:9a:
                    49:ee:bf:ee:0c:93:89:c3:1d:75:c7:06:19:71:a8:
                    57:e4:0c:e4:87:53:1b:bc:98:44:2f:b7:e4:d2:0e:
                    aa:e3:90:f8:76:95:b6:4c:be:52:d9:27:c5:ca:b4:
                    c1:a7:3c:b3:32:f4:70:4e:52:a4:e0:a6:1b:59:d9:
                    95:13:8f:33:07:59:a1:91:1f:ce:b0:d3:a6:14:af:
                    40:15:88:10:b6:da:87:ec:83:f9:cd:73:27:b6:e5:
                    24:be:64:08:a6:4f:80:0a:00:d3:33:1f:ca:62:15:
                    61:26:73:ac:5c:72:e1:9d:f0:c7:2b:f2:d3:6f:8f:
                    06:9a:22:48:5c:2f:bb:a2:1d:24:ea:d3:16:eb:6e:
                    5a:dd:5b:f7:aa:73:3c:77:c8:52:56:3e:08:74:d9:
                    69:ec:bc:fb:f3:6c:4e:6c:db:0d:58:19:a1:08:6b:
                    02:77:05:c0:c9:24:99:f4:88:37:c7:6c:4a:5b:81:
                    e6:bb:26:ea:91:33:e9:cd:53:5f:fb:a8:19:6e:87:
                    f3:ea:93:aa:cb:04:1f:50:80:d3:b7:77:ad:bd:75:
                    cb:40:3b:59:14:8c:54:c0:43:f6:cc:b5:a6:9e:4e:
                    ba:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:8A:6D:36:89:33:90:59:0F:B7:5D:07:2E:67:7B:AF:DC:89:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:b7:4c:56:7e:8b:b1:60:84:3e:af:9f:46:b9:90:32:08:
         78:0e:35:14:ae:fb:98:51:d0:3e:e9:a6:9f:82:67:d1:02:dc:
         40:5f:63:0a:56:c7:bc:89:72:49:dd:dc:77:0d:da:86:e9:3f:
         34:12:eb:c8:84:e0:c0:80:8b:24:72:43:4f:b5:32:dd:17:4f:
         f8:df:68:83:2a:8f:92:c5:54:d8:25:fa:61:cb:63:8c:ed:b2:
         5c:be:5c:7a:89:25:46:cd:ba:59:4d:8d:1c:d8:80:06:dd:a2:
         6c:00:71:45:7e:bb:19:b9:46:f0:ba:a0:39:68:be:19:f5:95:
         57:56:56:98:a6:25:f6:ce:c7:36:0d:71:62:c4:72:92:99:df:
         80:47:b7:81:84:22:43:55:18:99:eb:85:1f:d2:90:8a:c5:76:
         5f:c5:e0:59:31:21:b4:8b:bf:5e:92:02:74:ee:0a:bb:be:72:
         48:6c:d2:8a:ee:02:18:25:7c:c3:63:d7:d1:51:6c:e0:e6:56:
         4c:07:0d:e2:b0:96:0b:9e:d2:38:21:fc:ba:55:36:39:dd:c2:
         25:e2:55:54:6d:2e:a9:79:30:5d:0b:7a:03:7c:2b:fd:45:35:
         0a:60:02:5a:d9:0c:8c:74:50:d7:bb:76:bb:5a:08:72:e3:6f:
         e6:00:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org