Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e537a507-5a3c-3568-93c1-da45ff58c8a4.roa
File:                     e537a507-5a3c-3568-93c1-da45ff58c8a4.roa (raw, json)
Hash identifier:          G5Tr4nW/HMn+WdVUJPSAzeajuizhUY0XREA0mpkH1RA=
Subject key identifier:   F6:D0:4A:60:F8:24:9D:EF:E1:06:2D:FA:96:9E:DD:98:D4:3C:C8:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF212B776551C9AEC76A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e537a507-5a3c-3568-93c1-da45ff58c8a4.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        162.72.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f2:12:b7:76:55:1c:9a:ec:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0e66e5f6-82f6-4ae9-b5a7-ee40657278e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:c8:64:7d:99:dc:df:07:0f:c4:39:11:37:
                    c3:0a:23:f4:4a:ba:32:aa:0a:d0:61:0f:c7:80:f9:
                    19:6e:eb:5f:d6:07:5c:13:31:11:fd:9c:13:dd:55:
                    7f:1c:40:2d:c8:c0:7e:37:d4:0b:6b:1b:56:3f:b9:
                    20:28:f8:7a:fc:09:56:f9:87:4d:1a:75:27:9c:f5:
                    00:b5:8a:d2:27:e0:41:4e:37:0b:75:a0:d8:e1:04:
                    0c:56:67:60:45:d8:b9:40:26:eb:51:ae:13:18:41:
                    ce:bc:56:bd:8d:56:30:f7:a8:43:87:af:6d:f1:0c:
                    a3:9b:70:18:38:3a:66:c6:21:50:aa:9b:ec:af:7b:
                    03:ed:fe:26:3f:5e:b4:76:3c:e3:f3:2e:1c:5d:4b:
                    0d:84:72:d1:9d:39:18:de:1f:bf:75:48:23:0a:cc:
                    ce:ae:f5:d1:55:5c:5c:b4:05:82:a9:8a:38:f4:34:
                    8e:19:6e:8b:6b:5e:2d:ff:31:0b:ba:f4:b5:f2:e0:
                    97:b9:32:d7:d0:82:3e:2d:ff:41:d8:24:e8:cf:e0:
                    fe:4e:c5:b1:e9:da:56:dd:37:be:54:67:9d:cd:d3:
                    13:20:a6:4d:c1:20:09:26:00:5c:d0:d0:7c:92:55:
                    3b:60:9c:eb:b3:25:77:89:4a:80:e2:2a:c2:69:7d:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D0:4A:60:F8:24:9D:EF:E1:06:2D:FA:96:9E:DD:98:D4:3C:C8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e537a507-5a3c-3568-93c1-da45ff58c8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:3b:06:7e:f9:b6:dd:61:80:03:d4:03:0e:59:ad:49:b5:
         89:c3:9d:2c:cd:3d:11:41:e5:3a:9c:23:2b:c1:46:7c:10:ea:
         d6:d8:cc:97:61:23:91:88:24:fc:b7:e0:98:76:aa:05:ba:41:
         02:5e:14:62:ce:54:a4:c9:cc:97:0b:44:78:37:54:60:ac:86:
         33:a5:3d:36:44:76:e9:bd:5a:77:e5:e8:7d:b7:04:18:41:8d:
         ac:11:79:ee:94:96:f6:d6:0f:3e:9c:4e:f0:d2:d9:42:94:11:
         37:bb:47:ed:76:47:f3:fa:32:55:81:0a:6e:4f:67:a4:d5:53:
         a1:0f:ed:0a:15:09:6d:d8:2a:2c:ab:b8:86:e5:c5:91:b2:74:
         4d:6c:08:c6:4b:32:f9:64:f8:e4:ce:b9:d9:c2:d5:7a:d3:34:
         19:ad:12:61:ef:17:0f:93:34:c5:7e:60:47:8e:ff:04:e8:ac:
         72:41:82:40:6f:15:0f:ff:bf:18:e5:33:b0:6b:88:2f:d2:15:
         27:24:ae:40:f8:18:14:ac:02:fb:c4:ab:b1:49:b4:0e:13:da:
         68:d1:ec:3c:fc:15:f7:97:6f:24:33:9f:c7:fd:ff:7d:67:da:
         e6:9a:ce:d9:9c:e5:04:d0:2a:dd:90:4b:e6:7b:d2:43:29:1c:
         40:64:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:15 2024 by rpki-client on console-ams.rpki-client.org