Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3d20eae-b315-3266-9a9d-421ba4c28a52.roa
File:                     e3d20eae-b315-3266-9a9d-421ba4c28a52.roa (raw, json)
Hash identifier:          CrwPfCaN3iOq/DmxOVGdsvnArKy3Gj2q49AYukM1G90=
Subject key identifier:   85:70:0B:47:94:2B:5A:EC:53:BE:CE:2A:11:F7:27:A4:46:53:DE:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DFDB0AE4F5F06C6118A20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3d20eae-b315-3266-9a9d-421ba4c28a52.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:fd:b0:ae:4f:5f:06:c6:11:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9a81e50e-c7b2-47e9-95e0-8d74ebc08d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:66:fe:d3:93:24:0e:6e:80:c7:c6:d9:25:
                    60:21:65:6b:65:8c:dd:0c:3b:ff:16:da:83:9a:6a:
                    fc:45:1e:e8:23:7d:f0:f0:b3:16:18:dc:7a:ec:3a:
                    12:b1:12:ae:e8:05:53:74:a3:1c:bf:43:0e:f6:19:
                    5f:6a:e4:7e:5a:37:90:06:0f:fd:99:f0:ed:ab:67:
                    e1:9a:7a:1d:e2:56:64:e6:f3:6d:25:28:0a:52:af:
                    8b:c1:61:66:9e:94:c4:69:b6:30:e5:5e:21:ab:aa:
                    17:29:14:fe:bc:c8:aa:c4:16:fd:0b:ea:94:e1:b9:
                    3f:52:15:cf:62:25:1f:62:2e:37:a0:56:be:88:6f:
                    33:2a:5c:d0:8f:1b:42:cc:63:bb:02:c5:de:7c:24:
                    6d:7e:1a:4a:dd:f8:fa:34:06:19:7e:7d:f5:77:a4:
                    51:54:e5:27:3f:ac:4b:ae:b9:2c:a8:87:cb:a0:a7:
                    0c:96:c6:20:52:b9:f5:f8:16:e4:1d:81:07:74:9d:
                    f3:22:65:f0:5a:5c:34:d4:6c:92:43:67:ea:39:59:
                    76:69:53:df:35:bd:04:ed:29:eb:86:12:0d:2f:84:
                    f2:2e:a5:cf:bd:cd:8c:31:0d:44:60:75:2d:eb:5c:
                    39:d8:83:7a:fc:7c:19:3f:4a:17:25:d0:b6:ff:6b:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:70:0B:47:94:2B:5A:EC:53:BE:CE:2A:11:F7:27:A4:46:53:DE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3d20eae-b315-3266-9a9d-421ba4c28a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:e8:93:e5:61:bf:5f:a3:51:0c:06:33:f9:23:3a:ce:20:
         2d:46:6f:f9:a6:dd:c9:c0:6d:66:dd:e0:cf:57:57:d1:64:8e:
         13:0b:af:9d:67:a0:b8:9e:8f:35:1a:05:1f:6d:8a:61:ba:78:
         43:02:b0:3f:28:ce:61:69:e1:3d:f7:41:c2:e7:45:52:9a:11:
         0f:2b:67:36:93:e1:96:4d:7c:1e:01:f2:43:11:dd:40:b2:79:
         88:b4:d0:96:53:38:7c:9e:c2:18:13:ab:8f:27:ab:fe:ca:a4:
         8c:c6:34:a8:9d:83:cf:68:60:e5:af:fe:44:24:df:cf:b8:31:
         0f:13:1b:0c:fb:86:19:03:7a:a8:ec:31:ef:ac:87:36:9d:02:
         62:4a:9b:06:4b:cb:ac:87:8e:b0:dc:51:5e:95:f6:b7:fa:85:
         78:78:0a:f6:82:1b:ae:fb:09:db:5d:b1:19:a8:c1:a5:65:4c:
         c9:ed:87:63:5d:41:a2:24:90:b3:0f:48:ef:18:f5:03:56:84:
         c2:01:ec:4f:bf:24:d5:f5:d2:b0:2e:4c:c6:fd:8b:7e:7a:c2:
         4f:5d:7d:8e:c0:25:b6:2f:c5:55:40:7f:04:da:23:17:a1:fe:
         32:3d:68:c2:0a:a1:0f:33:03:c1:c0:c8:5e:89:cc:80:b2:c5:
         15:dd:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org