Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/28f0a850-7241-3f8e-a77d-403c42300c77.roa
File:                     28f0a850-7241-3f8e-a77d-403c42300c77.roa (raw, json)
Hash identifier:          MIDSERD7JCVn2oWReokuOH/xR+5c4MmRVN8Mpq6fSkY=
Subject key identifier:   27:EB:90:BB:F8:67:EF:3F:60:3C:8C:9A:D3:DF:6C:1B:4D:A4:C2:4E
Certificate issuer:       /CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
Certificate serial:       010D0C9F4328584571E868DF0D0C7558AB23B5E0
Authority key identifier: 12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/28f0a850-7241-3f8e-a77d-403c42300c77.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        72.13.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:68:df:0d:0c:75:58:ab:23:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b198f5fa-f621-42d4-a6d0-93f02eea7bb4
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=716c938f-0a24-4bb5-b865-4ba719db9ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:d7:d4:50:08:e2:9a:ec:57:c5:99:aa:55:
                    af:ad:73:38:fd:5f:7f:2f:89:f1:2c:ed:0a:8b:5a:
                    1b:3b:79:e8:e8:75:45:85:0e:84:8d:af:af:cf:60:
                    a8:8f:fb:31:95:47:c1:6c:5d:ff:df:d2:61:0f:73:
                    f2:1b:66:c9:cb:28:01:4a:d0:c9:4e:40:08:31:08:
                    21:d0:87:f6:6b:52:fd:cf:87:5c:42:7a:ab:0f:34:
                    58:fc:79:b2:17:e9:e9:b2:8e:50:2e:f5:f4:ff:8c:
                    71:a0:82:42:d6:74:a8:02:d5:2b:e6:cf:47:fd:39:
                    76:b6:28:26:41:49:35:e8:68:d5:b2:f9:f4:cb:8f:
                    a5:7b:77:9f:7c:00:67:a9:d0:dc:f7:5c:4b:78:20:
                    76:bb:f2:bd:a1:65:c4:91:68:de:9f:7b:30:20:24:
                    0c:a3:61:40:74:45:7e:48:4d:d9:e9:20:2e:a8:c3:
                    95:d9:d1:d3:3a:66:2d:58:64:8e:2e:70:55:19:9d:
                    04:3d:b0:cd:e5:09:2e:09:a1:87:2a:d7:40:89:b8:
                    92:d7:b1:bd:01:9c:47:c5:5a:60:a4:5a:7a:e5:da:
                    09:e1:30:bc:27:a6:01:e2:8d:f4:ba:af:df:22:27:
                    f2:35:af:99:9a:bf:1d:fd:38:98:85:2f:26:9e:db:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:90:BB:F8:67:EF:3F:60:3C:8C:9A:D3:DF:6C:1B:4D:A4:C2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/28f0a850-7241-3f8e-a77d-403c42300c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.crl

            X509v3 Authority Key Identifier:
                keyid:12:55:4B:9D:8B:59:AC:E6:D8:55:1E:50:57:B0:DC:2E:8A:35:54:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b198f5fa-f621-42d4-a6d0-93f02eea7bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ba:ee:06:9c:47:c9:1b:4f:d3:47:99:a0:64:e0:65:f3:4f:
         e7:43:73:62:f6:8d:e3:34:43:55:af:7f:9c:4d:86:c0:cf:72:
         80:e6:88:58:73:cc:c6:18:8d:2b:0f:09:98:28:66:be:97:20:
         f8:26:f5:e6:d9:1b:dd:80:30:ab:f4:68:b0:55:d7:1e:3d:c8:
         89:2d:1e:2b:c7:82:5b:64:e4:dd:d1:bf:be:b7:10:5d:0f:d6:
         42:92:2e:65:b5:d1:47:1e:ea:7b:24:90:41:df:09:20:9b:4b:
         c9:d6:83:30:3a:c6:cb:f4:58:a5:ff:2e:a9:29:03:bc:65:9d:
         47:3c:c5:d2:a4:6e:62:fa:2d:16:e2:27:8c:be:03:d2:c5:13:
         2e:24:2c:d9:2a:a4:0f:0d:95:dc:cb:7b:86:12:4e:62:64:97:
         50:47:80:be:77:ae:26:42:02:27:0e:ce:5d:71:1b:21:a6:ed:
         34:ba:9d:78:db:4c:8c:d5:7c:5c:46:6e:44:51:77:12:f7:a6:
         76:7f:77:d8:de:52:d2:82:89:aa:8d:c6:36:71:15:7b:80:52:
         c5:c0:46:b3:b5:64:fc:9b:63:f3:b3:d5:10:20:c4:81:fe:26:
         5f:48:10:b9:5f:79:89:51:75:ae:ff:db:7a:ca:39:f3:ba:38:
         44:6f:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:04:22 2024 by rpki-client on console-fra.rpki-client.org