Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e37c583d-f25d-3800-abc6-19405a0153e4.roa
File:                     e37c583d-f25d-3800-abc6-19405a0153e4.roa (raw, json)
Hash identifier:          a9kVn0opHf7S+TPljBEPwjsUNEa4j9TiE66Ez9YI4+k=
Subject key identifier:   75:FF:32:D4:70:2C:ED:E8:19:71:16:C7:0C:08:84:7E:DB:4C:32:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E3A0CBE6900E82D624980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e37c583d-f25d-3800-abc6-19405a0153e4.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:3a:0c:be:69:00:e8:2d:62:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6dac5798-602f-4ebc-8a90-11ad7056b156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:56:50:46:a9:f1:33:4f:84:d5:66:82:87:
                    6e:80:53:14:f2:c8:00:36:49:7d:0f:38:0f:d4:99:
                    4d:2a:f1:23:28:02:73:6b:a4:0b:7b:d4:f8:34:85:
                    87:2f:1d:d9:2d:27:49:52:9d:c5:43:1d:01:34:7d:
                    f8:fb:07:52:6b:bb:32:68:9b:d1:b0:03:99:03:46:
                    a9:2f:47:35:2e:93:0e:f9:39:00:bf:34:eb:81:c7:
                    3a:e5:c4:e9:0d:b2:94:b8:50:33:90:fd:b2:35:e4:
                    a5:01:55:3c:a4:27:00:d4:62:af:9b:10:33:4e:8b:
                    c1:b6:a7:dc:3a:6d:27:c3:54:4b:6f:cd:02:0e:41:
                    51:c6:f0:2e:b4:17:3e:83:56:cc:ba:28:24:e7:4e:
                    41:88:cd:95:06:8c:85:72:06:2e:13:4a:28:a1:cf:
                    b0:f3:27:a2:72:cc:81:bb:d8:f4:08:35:3e:c5:02:
                    6e:ba:7e:55:dc:af:20:be:11:4e:1a:3b:9e:be:c6:
                    76:75:01:75:91:5b:22:20:76:19:e8:56:c8:94:05:
                    cd:ba:b0:84:de:7a:f4:e1:dc:4b:be:02:6a:c2:f4:
                    0d:23:cc:95:d3:90:dc:21:be:9d:a2:25:50:fc:1b:
                    42:9a:68:a3:b8:9f:0b:a4:3b:95:2f:af:df:6d:3a:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:32:D4:70:2C:ED:E8:19:71:16:C7:0C:08:84:7E:DB:4C:32:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e37c583d-f25d-3800-abc6-19405a0153e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:fa:2d:c8:1f:63:45:29:b8:2e:87:c6:1a:23:38:94:3a:95:
         13:a0:5c:c0:6b:c0:02:34:3c:bf:65:6d:cc:08:30:74:df:39:
         4b:66:a4:4f:02:65:d5:cb:40:58:08:78:61:e0:75:59:5f:97:
         61:9c:a5:8c:2a:fb:61:58:f8:2b:1d:31:34:4b:0a:3c:63:c9:
         52:52:70:7a:ba:40:f0:84:1b:fa:90:ce:3b:a9:63:62:5c:8c:
         ff:70:8f:59:21:cb:ab:8f:89:8f:54:91:93:11:45:5d:db:26:
         23:61:e4:24:db:80:ea:11:89:a8:54:cb:65:6c:c8:b3:0f:a3:
         a9:d6:01:26:dc:69:ec:c5:12:fd:4d:b2:5f:12:4c:6f:ea:17:
         05:c1:e3:ba:39:c5:ec:63:ef:63:15:31:6b:7d:67:c8:ba:c5:
         51:36:df:00:30:76:81:da:f5:35:38:f4:0e:05:45:3e:d1:79:
         f9:31:ab:bd:57:75:e5:b1:b7:32:af:6d:2a:1c:19:07:a7:57:
         f1:2e:ea:d8:cd:db:3c:9f:c1:de:fb:8a:1e:9a:67:2c:f9:ad:
         b5:54:0f:bd:ad:78:6e:7c:af:ee:56:bf:ac:5f:bf:fd:29:ee:
         ea:1b:f3:ee:b5:40:fc:bc:38:f1:a4:e7:04:32:95:93:16:c6:
         1e:05:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org