Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
File:                     f476b183-5352-33da-bcfc-04901b542cfd.roa (raw, json)
Hash identifier:          dFu/X4tFWL+rpbhKbB/E3niDMZg6tR4Avo+WfKJLeDY=
Subject key identifier:   F3:90:D3:C4:6D:9A:DB:A5:E0:EC:92:B6:FE:96:2C:9B:31:68:00:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D8BA4BEB38FD03BBBA160
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        72.173.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:8b:a4:be:b3:8f:d0:3b:bb:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b096620e-759f-4847-bec6-9908acf681d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:05:67:b0:f6:ba:d2:aa:6a:41:ed:a1:6e:
                    b1:9e:1e:0e:c1:e0:5a:e1:24:f5:fd:7d:38:16:b3:
                    f2:55:c2:70:fa:89:fb:d4:ec:ce:56:33:bb:13:70:
                    bc:a4:6c:91:3a:db:9a:79:9b:29:8c:78:b5:ce:ba:
                    eb:54:23:e4:90:19:e5:c5:91:e4:c4:ca:d5:13:e9:
                    50:a7:7e:80:b6:0f:a1:79:b7:5d:59:a9:a9:80:ab:
                    ac:d9:fe:ed:90:54:c9:65:d0:2b:85:55:bb:44:78:
                    10:6a:02:83:07:9b:81:8b:9c:78:88:9d:98:f3:69:
                    93:ff:31:3c:fc:93:84:87:00:a0:04:de:4c:ca:be:
                    d4:a3:80:1e:a1:33:bb:cf:65:e0:dd:fb:2c:d4:67:
                    d2:5d:d4:35:ee:fb:fd:04:8d:e8:40:a7:23:ba:05:
                    e2:46:ce:20:df:54:16:fa:ee:a8:02:5e:fd:15:e0:
                    22:0f:7a:c1:89:0b:0d:59:1a:12:35:32:b8:68:d3:
                    0a:93:b6:ef:94:8e:23:41:f5:67:6d:af:c8:5a:2f:
                    a5:a6:7d:bb:61:f1:a7:eb:05:e2:21:75:c4:56:ca:
                    65:c5:c8:f0:cf:0b:46:0d:1d:3d:61:4b:0e:92:31:
                    72:68:e7:7e:91:2e:b0:0d:6f:8c:b2:70:5c:1c:39:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:D3:C4:6D:9A:DB:A5:E0:EC:92:B6:FE:96:2C:9B:31:68:00:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f476b183-5352-33da-bcfc-04901b542cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:8d:b8:22:49:78:d3:89:cd:09:80:c0:f1:81:f6:e5:bc:
         b1:4e:85:e2:75:7e:77:2c:a1:73:86:4f:37:cc:cc:72:18:03:
         eb:cc:2c:fc:76:8b:58:bd:f2:60:6b:8b:d7:37:2a:42:9d:07:
         f6:0d:97:46:3b:bb:58:2e:0d:5c:cd:7b:fc:58:ad:38:e1:76:
         b9:c9:45:58:81:22:ab:2b:0c:e9:71:ed:37:09:0b:d5:b2:8c:
         9f:22:3d:2c:f0:37:99:6c:a2:38:64:b1:f9:9e:df:06:d5:14:
         01:bf:50:9f:0d:cf:e3:9d:ed:db:d2:c6:ca:51:ed:6a:5e:19:
         dc:ac:a7:bc:7e:df:a7:c5:9d:db:6b:a4:12:26:bd:b9:63:3a:
         33:bf:2b:bd:06:9b:b3:53:1c:a3:3f:08:8d:c4:71:9f:a8:a1:
         fc:5b:6f:30:9e:78:7e:b4:45:02:5c:60:94:27:b7:37:7b:91:
         1b:1b:0a:0b:89:da:d0:b4:d7:cc:f8:db:e4:a9:0a:2e:bc:ff:
         82:27:51:4e:de:f6:f0:72:aa:0c:d4:eb:99:4a:fd:6a:e1:72:
         4d:1f:dd:d2:26:b1:1f:60:0c:fa:a2:18:a9:b0:ff:50:7c:d4:
         95:c3:02:71:25:dd:f8:00:b2:54:50:46:01:72:f7:61:0a:6d:
         9a:e3:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:49 2024 by rpki-client on console-ams.rpki-client.org