Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efe75c65-b465-3579-90c4-8b9b93bc366f.roa
File:                     efe75c65-b465-3579-90c4-8b9b93bc366f.roa (raw, json)
Hash identifier:          1dDRNvXmAOBWOcK0o9aihhyeyMcGtJaUYNE90tjo6MQ=
Subject key identifier:   01:5F:75:BF:C5:98:A2:06:B2:75:B5:00:AE:2A:48:CB:A7:03:39:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D83ADEFF49E69C8E35D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efe75c65-b465-3579-90c4-8b9b93bc366f.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:83:ad:ef:f4:9e:69:c8:e3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=fff6b892-07ae-49d8-b48b-e1a7a66c509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:76:18:0a:d6:b0:06:19:b0:a5:14:6e:2e:
                    3a:82:2d:d8:4a:53:c6:a9:dd:64:22:42:80:1c:1c:
                    d9:37:17:25:60:16:00:55:3b:7a:0b:0d:3c:8e:c1:
                    f0:99:ed:e2:99:29:25:85:2e:32:d5:9e:1d:45:bf:
                    3c:b1:35:57:75:0d:47:95:eb:61:f6:c5:6f:6d:1e:
                    4b:1d:00:af:06:ad:fe:77:81:c2:22:86:be:5a:85:
                    ea:f5:21:4d:e0:6f:8e:c9:da:03:12:0a:8a:7f:d4:
                    84:52:16:6c:4c:eb:d2:d4:e0:27:c1:9c:bd:40:5a:
                    47:7d:21:d6:4b:b8:d8:cf:17:44:c7:4e:ec:50:90:
                    a5:ed:c3:e3:eb:ff:1a:f6:e1:23:98:d3:a6:12:fb:
                    e7:fa:fb:b5:a0:db:3f:bb:72:12:f0:f8:f9:17:19:
                    b8:1f:4b:fa:02:4a:e4:da:b7:ad:fd:94:16:2c:59:
                    dd:87:cf:34:0a:04:cf:68:73:e9:04:da:c6:31:b6:
                    0b:d2:72:d4:65:f3:3c:a8:c6:72:d8:79:e3:c4:fb:
                    cb:89:6e:be:b2:ef:ce:10:c0:bf:74:20:19:e3:90:
                    87:79:c5:10:4e:2c:90:ad:15:43:c5:22:07:d6:6f:
                    16:59:e4:0b:20:31:4d:0d:b8:84:12:52:31:4a:a8:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:75:BF:C5:98:A2:06:B2:75:B5:00:AE:2A:48:CB:A7:03:39:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efe75c65-b465-3579-90c4-8b9b93bc366f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:28:ad:ea:b0:1d:1a:92:09:64:b4:a8:b8:22:9c:c0:47:
         a7:ed:c3:59:91:45:1d:21:61:25:6e:09:e0:24:e5:b7:8d:0d:
         3c:3b:ae:47:86:4f:a8:21:c4:dc:13:22:e3:e8:d1:a5:25:c3:
         d1:4b:8b:28:29:f6:b5:da:31:31:73:14:29:21:c6:68:65:b0:
         dc:66:c1:34:ad:de:ae:3f:0f:76:1c:fe:06:dc:38:da:da:7b:
         df:5f:69:9a:15:7b:c7:ec:74:bf:88:a2:62:ee:4e:9b:29:e5:
         9d:2f:44:68:50:38:75:96:b7:45:96:98:85:6b:30:54:55:f4:
         e3:b0:42:49:f5:99:b1:62:82:e3:b9:aa:b0:81:87:bf:d0:ca:
         5d:49:08:a5:d4:a6:e8:6b:8b:e8:71:59:17:e9:5c:6b:17:18:
         b9:99:5a:6d:f8:d2:2d:b6:31:fd:1e:e5:26:85:a9:7c:36:e2:
         f9:e2:d6:f0:2e:ab:70:a8:69:89:19:da:4b:d8:26:1c:c5:69:
         27:33:1d:a1:f3:08:29:82:e8:de:fb:b1:11:d0:d8:8f:ce:b9:
         91:8b:55:cb:d7:b4:c0:32:8e:7a:30:c5:81:a4:58:6b:95:76:
         e0:a8:e2:35:ae:fd:64:71:34:31:59:f2:d0:18:a4:ff:9f:2d:
         91:21:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org