Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/72c0a167-03d2-390e-afe7-bb96dba29704.roa
File:                     72c0a167-03d2-390e-afe7-bb96dba29704.roa (raw, json)
Hash identifier:          QCZiDTBUhegkyxu7AyEutQrjqjpvgpsaes+zfJ6wvL4=
Subject key identifier:   DC:DE:9F:9F:C8:11:EA:3A:34:CD:03:B6:6D:D0:C5:4D:62:92:93:29
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F432858475EA616D512F2150BFE3AE2FA
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/72c0a167-03d2-390e-afe7-bb96dba29704.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     401199
IP address blocks:        203.11.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:16:d5:12:f2:15:0b:fe:3a:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=806c8593-b3ea-4d1a-8c48-b52b4939facd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:08:25:83:6b:f0:cb:56:b2:79:5a:20:18:
                    a8:7e:62:6b:2c:3c:80:c0:61:fa:e3:c8:32:13:6d:
                    e9:2d:74:40:ba:f4:db:f0:06:7c:14:7f:bc:8c:a5:
                    c1:2d:15:03:66:c2:a1:ac:f9:f3:76:17:f8:3f:8a:
                    08:63:11:73:03:3d:e9:2f:48:46:dd:4d:5f:a6:9b:
                    85:ca:d3:e2:16:24:29:76:b8:b9:a1:5a:24:e7:ae:
                    de:28:17:fa:fa:8d:ed:7f:2c:54:fb:4f:7e:46:5a:
                    17:51:e3:63:f7:3b:dc:e4:6a:3c:78:fc:be:96:ba:
                    0b:f6:b5:4a:af:b2:2f:07:3f:e1:fa:72:74:b8:ea:
                    ce:03:c1:e7:da:60:da:21:ed:39:61:d4:98:a5:23:
                    6a:0d:92:15:63:18:25:f5:14:19:7d:eb:7b:53:e3:
                    29:be:8c:fb:9a:fc:4e:2b:f8:c0:3a:3e:f9:4b:d7:
                    eb:1a:50:27:73:9f:23:b9:c1:a2:af:40:30:da:dc:
                    a1:48:63:ee:f5:1c:09:8a:c1:ff:db:11:4d:f7:3f:
                    6f:1b:af:c3:72:09:76:3d:a2:40:75:cf:6d:f5:8e:
                    2b:35:bb:63:15:de:12:6c:2c:72:e7:37:cf:9e:44:
                    fe:cf:42:e1:cd:30:0e:a4:af:1d:83:3d:fe:a2:58:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DE:9F:9F:C8:11:EA:3A:34:CD:03:B6:6D:D0:C5:4D:62:92:93:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/72c0a167-03d2-390e-afe7-bb96dba29704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.11.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:49:f8:7f:54:53:88:ec:bf:93:80:c1:a9:72:a6:5c:d0:01:
         44:e9:26:40:a7:58:a9:5f:4e:09:e9:10:28:5d:c3:f5:7b:d9:
         ad:98:55:87:06:3a:b6:b2:d2:5b:5e:76:8e:06:5a:84:27:eb:
         f7:1a:38:b8:eb:83:ff:3b:61:c2:a1:c5:17:69:df:4d:2d:bc:
         e3:40:ab:43:84:3a:33:b1:b3:10:ea:c1:ee:f5:e6:40:21:2b:
         f5:ec:3b:cb:76:01:30:77:9f:80:e9:f8:46:e5:a5:ec:0f:9d:
         3d:c2:19:0e:72:c6:52:c3:aa:63:48:3d:53:d2:4d:80:79:18:
         cc:a5:bb:41:ac:7d:be:42:d6:12:a2:e0:b7:f5:5c:48:fa:9e:
         d2:95:c6:0b:e5:d1:96:1a:b7:4f:94:73:3f:3e:d5:aa:21:cb:
         a8:c2:d2:0c:6e:05:f3:81:ab:53:e9:e5:5c:e5:bd:fc:d5:1b:
         55:24:de:f4:2b:48:f9:44:aa:9b:e4:0c:cb:68:3b:1e:9b:dc:
         fa:b4:f9:18:c1:4a:b8:42:ee:da:e0:53:90:7e:f2:fb:24:bd:
         9f:0b:e7:7c:eb:21:65:19:b2:72:fa:0d:cc:8d:63:d2:df:ea:
         a2:3d:3e:6d:1d:99:d9:10:a8:7e:57:a9:bf:4a:90:23:62:da:
         2a:e1:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:37 2024 by rpki-client on console-fra.rpki-client.org