Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa
File:                     ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa (raw, json)
Hash identifier:          eVhqlchmkR+rkGI8lNeJp3q3LUpqj14BI0Sk0tGZ/ms=
Subject key identifier:   41:49:3D:28:E0:22:EA:39:C9:0D:99:08:68:ED:5D:97:FB:F7:4F:2A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ACF97BE0EB4D939AE0800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        72.173.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:cf:97:be:0e:b4:d9:39:ae:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=00981501-3ce5-4b2b-9d9c-15f315a6cf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:7e:61:2c:b0:32:5b:31:5f:e9:ea:8b:db:
                    24:aa:5c:48:09:eb:ef:2d:b8:32:ba:98:c2:f0:4c:
                    3d:8a:d3:e3:a3:4b:e9:57:92:d6:f2:bd:3d:78:19:
                    90:cc:65:57:94:4b:22:36:dc:12:51:47:bf:40:62:
                    a3:d9:62:e2:1d:23:38:2f:4b:22:b9:5a:36:73:45:
                    95:1a:db:ff:16:4e:c3:c8:ce:d5:3b:a4:7e:3f:29:
                    a6:b8:90:c1:9d:b8:ee:ab:57:af:7f:a2:f7:0a:bd:
                    13:4b:42:d2:88:0b:f9:00:d1:45:fd:9c:de:08:a8:
                    66:8e:af:01:0a:aa:30:4b:5c:28:e6:56:2d:aa:fc:
                    42:9a:09:9f:da:3e:93:4c:70:83:d3:8c:93:17:92:
                    44:0a:f5:58:be:b5:3d:78:82:ec:3c:26:11:a6:53:
                    57:6d:ac:4c:36:6c:cc:3f:cd:d2:92:41:c6:80:3a:
                    13:9b:d0:c7:e5:6b:86:c3:68:76:d0:7b:d0:e5:e3:
                    36:a6:ac:ee:17:65:01:bf:45:b8:06:1e:26:40:cf:
                    e4:c2:e7:16:26:b0:5a:bc:8a:c6:26:9e:15:1a:ae:
                    9f:f8:19:1b:da:59:e7:17:9a:11:4e:75:ba:6c:36:
                    87:02:a8:d5:fb:6e:b0:cc:c2:59:24:12:48:d0:70:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:3D:28:E0:22:EA:39:C9:0D:99:08:68:ED:5D:97:FB:F7:4F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebd0b740-e71a-3ff5-8b3d-f13254f68d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:d6:79:c8:b2:18:46:ba:eb:69:99:64:69:be:c7:1e:27:16:
         a0:c6:8f:c2:0e:d7:38:68:a9:20:ca:76:1c:9d:a3:99:14:0e:
         0a:8a:f7:92:93:9d:4e:0e:27:0e:aa:f8:9e:ad:f8:b9:94:48:
         cd:db:44:fa:50:72:75:aa:fa:22:11:91:bd:6c:67:a0:3b:53:
         8d:e5:ec:5e:46:2e:7d:2c:d8:56:e2:17:94:0b:4a:37:61:10:
         14:c1:98:8b:a5:da:de:2d:0d:0f:bc:9b:a0:8f:fe:57:20:43:
         18:9f:16:8f:ff:0e:6e:de:f4:44:6d:60:0a:24:9b:9c:db:53:
         b6:eb:f1:49:6d:4c:18:f5:d0:70:38:c5:37:a8:17:e9:ad:0e:
         b0:48:7d:e1:40:d6:55:3e:ca:e1:a0:f7:46:a6:df:34:93:db:
         fa:4b:9f:17:e1:55:f7:a7:af:8b:d3:de:3e:8f:6d:3e:a3:ab:
         5a:be:dc:a8:56:4a:bf:13:68:07:a9:52:db:bb:b3:56:b8:72:
         b9:50:9d:a6:30:a1:e0:2b:df:4a:7d:e9:7e:41:ac:07:71:52:
         65:11:87:2e:18:a5:50:75:ab:6a:5c:c5:1d:6c:ac:1c:2a:ea:
         81:6e:c4:7c:47:81:6f:ad:48:85:88:16:bf:5e:17:e1:09:79:
         e4:a0:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:07 2024 by rpki-client on console-ams.rpki-client.org