Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa
File:                     9bee539c-0054-392c-9ac9-97ce6a432743.roa (raw, json)
Hash identifier:          vk4Ov4NzSxuJnaNWLwa2KzDZzzuOZnk3jXfPUXZFEck=
Subject key identifier:   30:49:E2:EC:9E:2E:88:96:C1:87:09:31:3B:AE:F4:35:B2:88:1A:08
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584535E29DFB334971049EAAE600
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        72.163.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9d:fb:33:49:71:04:9e:aa:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=f752ec97-d8de-49b5-aef0-cd33060b7f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:ad:1e:03:aa:5e:61:88:61:5e:80:b4:97:
                    f7:d5:1b:1b:97:8b:38:96:12:17:32:07:b6:bf:2a:
                    3a:3a:88:85:83:43:98:dd:09:aa:b0:a0:3d:61:f4:
                    ab:ab:c3:e5:a9:9a:49:e4:ac:fb:51:7f:17:a9:8f:
                    2e:31:80:cf:dc:08:39:b4:89:86:45:93:30:e0:b1:
                    84:d9:1f:18:e8:db:bc:5b:db:4f:0b:23:88:08:06:
                    cb:ff:a9:b3:f5:12:3f:f5:0a:3e:e7:04:4e:c5:ca:
                    f5:2f:bb:1f:d3:f8:3a:5b:2c:04:9d:ca:86:46:29:
                    c2:3c:b8:bd:ec:5c:1c:31:69:70:e6:51:72:bd:e0:
                    fc:a1:dc:fc:e7:94:82:c7:4f:05:07:5a:ce:56:13:
                    ca:f3:78:b7:02:ed:dd:02:f8:2c:e3:4d:a2:e9:07:
                    da:58:3f:b6:d3:7a:22:e5:9c:aa:80:fe:17:c1:23:
                    3d:cd:da:99:23:50:be:80:61:11:d9:fa:84:76:24:
                    9c:52:b7:e1:64:9d:41:57:2f:f7:0f:dc:42:17:6f:
                    9f:90:c8:c1:18:69:23:09:04:d6:3f:e8:d6:e1:92:
                    3e:7a:32:48:71:8a:e1:44:71:47:cc:dd:0b:ff:f9:
                    b3:01:33:46:a3:10:1d:73:df:14:44:45:ba:2a:73:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:49:E2:EC:9E:2E:88:96:C1:87:09:31:3B:AE:F4:35:B2:88:1A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/9bee539c-0054-392c-9ac9-97ce6a432743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:66:67:64:65:8d:25:f8:e6:d4:bc:4e:00:98:5d:3c:71:54:
         f5:07:d6:24:d4:25:1c:32:fb:d8:ae:e7:f0:c4:a4:00:dd:fc:
         01:6b:24:95:bb:43:b6:f7:0d:4b:61:2d:a2:24:4f:15:a6:4f:
         3a:e8:30:52:0a:f6:68:e2:58:71:72:04:8a:5b:fd:df:ee:a7:
         47:73:a2:dd:0b:ca:66:b3:0d:2a:15:06:d5:2b:6d:fe:17:7f:
         77:43:50:05:a3:72:27:6d:82:e9:2c:ad:19:b8:83:55:fe:4a:
         e3:3e:8c:72:17:16:74:3a:0c:e5:5f:ec:55:05:3d:7b:65:01:
         2c:2d:d0:c3:bf:22:3c:2d:34:81:77:df:22:9f:8d:3c:a7:3e:
         0c:bd:52:e1:3d:d1:a7:01:c3:23:fe:29:31:7d:13:bc:d9:42:
         3f:e1:96:29:80:5c:90:80:8e:4c:1a:f9:55:46:25:09:f7:9e:
         15:43:b4:56:7f:7a:ed:34:00:c2:b4:39:ea:db:55:3f:72:6a:
         e3:91:f4:9a:ac:4f:51:42:5d:b6:6f:0e:ec:09:65:a3:ea:38:
         39:c0:a9:da:55:43:a0:3f:e4:31:d8:a9:95:98:8f:4b:fd:38:
         f4:b6:97:2a:96:15:fb:2f:3a:7d:86:32:77:1d:4b:45:96:89:
         19:49:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:20:43 2024 by rpki-client on console-ams.rpki-client.org