Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5a232d9-9c43-344b-a857-0a76d3579207.roa
File:                     e5a232d9-9c43-344b-a857-0a76d3579207.roa (raw, json)
Hash identifier:          PVPNdf5GtdGtOpWuMxnOMG00naH04LN4IH+OFM9f+0s=
Subject key identifier:   07:1F:1B:3D:E7:AB:9A:B5:07:73:3D:C3:01:79:C0:0C:8B:D3:0A:4A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E0447B0928C21857BB484
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5a232d9-9c43-344b-a857-0a76d3579207.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:04:47:b0:92:8c:21:85:7b:b4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c1d2a55b-9f56-411c-b3ab-babba6e65107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:55:05:02:f1:7a:6b:a2:1d:30:85:0a:9e:
                    51:16:9e:7d:de:b5:96:9e:6c:e2:ba:d8:60:2c:3a:
                    70:bf:a4:fb:49:a3:e7:91:97:56:2f:03:65:d8:77:
                    d9:af:e6:24:a0:2a:aa:60:01:0a:6f:ee:87:1a:e5:
                    63:30:a2:7a:64:2c:7f:7d:50:bc:d1:0b:9f:9e:ad:
                    d9:2c:5f:04:e7:24:e1:5e:93:41:d9:07:42:4f:c8:
                    1e:41:a4:8d:ed:ef:dd:25:2a:19:21:7d:16:2f:f0:
                    e5:56:b0:03:f5:f8:54:54:5b:54:0a:b7:0b:b3:fe:
                    ff:4e:c6:b9:a2:7a:28:6a:8e:bd:85:b6:1c:fe:9e:
                    e9:01:48:40:32:fe:f8:9a:b0:9d:06:d9:6a:55:ca:
                    47:3a:14:dc:76:78:9d:6e:30:31:60:77:3c:50:18:
                    37:9a:ee:4a:38:9a:64:1b:7d:0f:2f:0e:ec:76:73:
                    78:e1:ec:e7:70:c3:a2:0f:af:31:6c:9c:e7:b5:a0:
                    0e:73:3d:1c:20:7b:f4:94:f4:34:2f:aa:7e:55:73:
                    95:b9:a9:5b:48:bb:cc:50:96:43:76:d8:c2:36:9e:
                    e1:53:e6:47:51:a9:48:1f:b9:f5:17:5f:62:e0:e5:
                    19:bf:b0:84:90:c6:36:e4:02:4e:ed:cb:18:3c:c4:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1F:1B:3D:E7:AB:9A:B5:07:73:3D:C3:01:79:C0:0C:8B:D3:0A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5a232d9-9c43-344b-a857-0a76d3579207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:8e:db:6b:57:52:72:52:b3:83:ad:b5:f9:05:16:e8:3b:
         88:3e:df:dd:5f:fa:62:74:3f:39:b7:db:9e:cf:18:ac:34:a2:
         18:51:dd:9a:86:9b:b0:86:6d:68:74:3f:a8:f0:06:93:52:c3:
         c7:70:8b:77:fd:53:11:43:7a:e9:43:7d:6c:13:7d:a1:dc:52:
         b9:93:d3:f9:7b:86:de:3d:9b:c9:8d:d2:ee:16:b9:a9:88:0b:
         72:31:de:f6:f9:8b:b0:92:03:26:57:4c:b0:92:a6:91:2d:db:
         6d:8a:00:7b:11:f1:10:1d:cc:4f:68:03:59:0a:13:89:39:36:
         40:e2:1d:84:cd:d3:d1:14:f4:c4:22:40:a4:82:cb:20:d6:c4:
         58:9d:f4:30:4f:af:02:6e:82:ad:64:67:44:87:14:5a:ec:3a:
         d5:c8:68:e9:e3:a9:74:71:f1:ab:e7:ad:10:7a:ae:79:6f:f1:
         ba:94:34:5c:23:8b:af:16:99:a7:18:60:2d:d2:91:7c:f4:5f:
         84:f1:7a:43:47:45:ba:fb:d0:ac:2d:71:06:5c:c1:e3:94:f8:
         97:2f:c1:1f:62:01:b1:eb:cb:c3:1a:21:3c:e4:c3:da:b9:e4:
         95:46:e6:d5:09:2a:a7:19:8a:c4:fe:a7:58:39:86:36:b9:1e:
         b1:b4:76:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPgRHsJKMIYV7tIQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YzFkMmE1NWItOWY1Ni00MTFjLWIzYWItYmFiYmE2ZTY1MTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+1VBQLxemuiHTCFCp5RFp593rWWnmziuthg
LDpwv6T7SaPnkZdWLwNl2HfZr+YkoCqqYAEKb+6HGuVjMKJ6ZCx/fVC80Qufnq3Z
LF8E5yThXpNB2QdCT8geQaSN7e/dJSoZIX0WL/DlVrAD9fhUVFtUCrcLs/7/Tsa5
onooao69hbYc/p7pAUhAMv74mrCdBtlqVcpHOhTcdnidbjAxYHc8UBg3mu5KOJpk
G30PLw7sdnN44ezncMOiD68xbJzntaAOcz0cIHv0lPQ0L6p+VXOVualbSLvMUJZD
dtjCNp7hU+ZHUalIH7n1F19i4OUZv7CEkMY25AJO7csYPMQKBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcfGz3nq5q1B3M9wwF5wAyL0wpKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTVhMjMyZDktOWM0My0z
NDRiLWE4NTctMGE3NmQzNTc5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXjjttrV1JyUrODrbX5BRboO4g+391f+mJ0Pzm3257PGKw0ohhR3ZqG
m7CGbWh0P6jwBpNSw8dwi3f9UxFDeulDfWwTfaHcUrmT0/l7ht49m8mN0u4WuamI
C3Ix3vb5i7CSAyZXTLCSppEt222KAHsR8RAdzE9oA1kKE4k5NkDiHYTN09EU9MQi
QKSCyyDWxFid9DBPrwJugq1kZ0SHFFrsOtXIaOnjqXRx8avnrRB6rnlv8bqUNFwj
i68WmacYYC3SkXz0X4TxekNHRbr70KwtcQZcweOU+JcvwR9iAbHry8MaITzkw9q5
5JVG5tUJKqcZisT+p1g5hja5HrG0dtM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org