Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa
File:                     eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa (raw, json)
Hash identifier:          CygACM675bcnpk1stuHPcor+PsY27cO151pHhVta4SM=
Subject key identifier:   28:2D:83:1B:73:3B:3C:06:D4:AB:9F:CC:25:16:36:4A:ED:9B:85:8C
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F43285847E1FA191737AEB14676CEB880
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     64124
IP address blocks:        76.72.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:19:17:37:ae:b1:46:76:ce:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=6d28c537-6700-4b87-8afd-0db1cc06f268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:65:41:b0:2c:21:68:e5:de:dc:70:7e:d9:
                    07:5a:43:f9:c8:f5:cf:bf:f2:ce:db:82:40:ee:94:
                    72:fe:aa:6a:8c:93:4d:55:d5:b2:dc:57:a0:e8:05:
                    55:43:bb:01:40:59:d9:68:45:7d:c8:ca:0a:99:d2:
                    1c:55:1b:aa:e7:99:cc:32:18:8e:c7:c9:01:23:4d:
                    b4:8e:4a:8a:de:2f:6b:73:fd:00:ac:30:15:51:0c:
                    a7:25:8e:e6:13:1f:1b:9c:ea:01:bb:5a:eb:31:4d:
                    9b:5b:8d:85:99:19:95:3d:b4:ea:16:9f:6f:40:c0:
                    e1:b4:1c:77:2e:e5:1d:b4:d5:3a:30:d1:0e:91:96:
                    6f:45:04:5c:57:0e:1c:da:b7:5b:e3:34:08:33:27:
                    d2:27:5c:a0:44:98:63:cc:76:7f:b1:5f:6f:4a:ff:
                    61:01:ff:3a:e5:7d:07:c3:24:08:79:79:05:e8:53:
                    63:34:9f:94:6f:02:f3:f7:d6:d7:56:cf:66:e3:42:
                    61:01:e9:26:12:4a:b8:e5:44:f3:d2:b2:59:f7:00:
                    83:df:be:2a:90:f1:16:64:7f:b6:2b:c3:86:c4:3b:
                    7a:77:27:3a:d9:46:91:02:58:38:db:ec:e5:52:68:
                    49:11:a3:ba:46:16:0f:a9:1b:42:f2:04:4c:84:7f:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:83:1B:73:3B:3C:06:D4:AB:9F:CC:25:16:36:4A:ED:9B:85:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/eb4568a8-40ad-37cf-a378-b31fd5aeb9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4a:95:58:94:da:b2:ce:25:08:61:12:aa:8f:fe:ad:e1:82:
         0c:0a:59:77:45:dc:7f:ac:b2:1b:d8:0d:8c:ed:46:f0:4c:80:
         79:88:94:5b:42:63:81:46:61:16:96:bf:6b:e8:12:86:0f:38:
         95:cf:cf:6e:a0:93:bb:ba:f6:16:12:61:50:49:16:aa:b5:55:
         db:2d:23:9f:86:58:f6:1d:6a:30:69:6f:2a:a9:08:9a:52:70:
         27:ec:52:64:57:33:18:ca:eb:63:04:05:ad:0b:db:ad:cd:7e:
         1a:00:f1:63:fe:43:0d:81:81:8e:b5:f3:bb:b5:04:68:a8:1d:
         11:40:02:06:80:d1:fb:d7:76:e2:ab:74:16:8d:f8:62:95:44:
         83:73:2c:16:a4:54:a6:26:1d:71:34:ea:d2:40:a0:6d:c8:f0:
         09:a5:ef:02:40:60:7b:8f:57:08:4e:2f:ae:35:3e:14:32:20:
         6b:ee:ff:c5:d8:b5:8d:c6:df:c8:01:74:38:2e:12:4c:49:4e:
         c0:d7:21:dc:3b:79:21:39:85:c8:30:56:1d:86:34:94:4a:8c:
         44:f7:ad:35:ec:6d:5d:d7:1a:32:0a:f5:3a:80:02:05:20:03:
         77:64:0a:9e:91:4d:fd:fb:74:4d:54:26:1c:52:15:6f:4e:14:
         be:16:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:17 2024 by rpki-client on console-ams.rpki-client.org