Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa
File:                     e3a9b647-f41b-35d3-8c81-fa036a52454b.roa (raw, json)
Hash identifier:          WHlJSl2hqRKwEnEyzEsLimA7wS+3/bT4gINBSVrOd6c=
Subject key identifier:   15:16:98:E2:02:03:32:C9:3C:69:9B:9C:D7:D4:65:FF:2B:44:FB:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D8A0DA90FA6EAE6368700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:8a:0d:a9:0f:a6:ea:e6:36:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=7a6938fe-e2fa-4e61-9b82-1eaea42cbfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:ec:53:55:a4:60:2a:4b:f2:f8:d8:f4:da:
                    2a:25:94:c7:ce:87:83:18:5c:4c:e1:a2:90:9a:c5:
                    0e:64:9c:0e:3d:32:5f:2a:f6:d4:cc:04:b6:98:17:
                    9b:63:97:f7:d0:ad:76:67:ad:5e:83:56:3b:5d:12:
                    dd:78:3e:5e:ad:45:8b:c1:38:22:3a:6b:da:ab:3b:
                    e4:d6:8e:2c:34:38:a2:66:6a:5a:ee:d6:bd:1f:72:
                    b2:3b:c3:79:a5:7a:61:db:74:7f:ee:06:ae:be:c5:
                    0c:5c:cb:73:29:bd:9a:7f:8c:a7:88:99:4a:93:4e:
                    05:22:e1:03:ac:d8:91:e9:62:b3:8e:89:2a:ab:ca:
                    36:86:2a:da:05:29:0d:68:d5:4d:85:9f:9e:b4:f4:
                    e1:6e:92:60:4c:78:a6:b7:05:ad:d4:5c:c8:d3:1f:
                    dd:2d:57:f6:c7:61:1e:65:3e:66:55:7c:45:18:84:
                    58:27:dd:76:3a:39:f9:8f:5f:66:8a:17:33:c1:c6:
                    ec:5c:60:cd:c5:9a:f9:39:16:f5:57:67:d2:cb:d5:
                    81:20:cf:f9:54:b3:f3:41:6d:f6:92:a0:43:82:75:
                    5d:64:d8:fc:50:34:64:2e:03:59:ae:ef:65:af:61:
                    78:af:ac:df:ca:6e:d6:4c:86:ae:3c:45:d5:3f:12:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:98:E2:02:03:32:C9:3C:69:9B:9C:D7:D4:65:FF:2B:44:FB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3a9b647-f41b-35d3-8c81-fa036a52454b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:a7:93:80:00:8d:16:2e:4c:46:e9:1a:2d:24:7d:d1:a9:
         df:4d:5e:3c:18:49:8d:e7:4e:b8:50:85:85:f8:ee:92:da:9d:
         3a:01:0e:c2:de:fe:a4:58:7e:88:c6:f8:db:43:7b:88:be:4c:
         ac:72:f1:30:1b:65:1d:f3:bc:92:f6:27:9d:4a:2a:d7:88:37:
         6b:6f:e4:40:35:57:35:8e:73:b1:4c:eb:b9:b2:05:8a:92:6f:
         e0:cc:60:65:9b:b8:4f:27:82:38:66:86:21:43:c9:80:a1:ce:
         bb:12:ac:f3:da:48:0f:ae:74:7c:c1:08:2e:40:04:04:05:79:
         10:5c:cb:62:c9:29:fe:4c:17:11:b5:8c:2c:78:be:b1:75:bc:
         47:4c:11:5e:ea:bf:a9:f2:7e:9b:8a:97:9a:1a:53:40:15:d8:
         2e:06:91:c2:41:94:c6:ef:43:84:2c:6a:3a:88:8b:46:37:f5:
         0b:d2:b4:89:67:63:50:64:81:9f:3b:c6:be:5e:9c:08:62:a7:
         28:4d:b3:a3:0e:a9:01:c7:03:c4:db:7d:e4:62:ce:ad:8a:d0:
         c0:5e:94:d2:21:63:2a:93:96:74:53:05:bf:78:ad:85:e9:0f:
         81:e6:99:b2:4d:a0:dc:17:75:ed:82:45:ca:0b:3d:06:fb:ee:
         fb:6f:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org