Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/77bdecdc-5fd8-3c9f-bdc5-042106b94496.roa
File:                     77bdecdc-5fd8-3c9f-bdc5-042106b94496.roa (raw, json)
Hash identifier:          PbI9jZFehxrAC+pr33QX4w9rUXuuOGSWLHnQqqn+FBQ=
Subject key identifier:   9F:5B:36:2E:01:51:5F:C0:83:8A:C7:7A:3A:97:39:B6:B8:65:CF:22
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858474F4B72A5571F1DF739467960
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/77bdecdc-5fd8-3c9f-bdc5-042106b94496.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     9304
IP address blocks:        128.1.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:72:a5:57:1f:1d:f7:39:46:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=f92c7f02-d9cb-4f96-8793-bed6ea27d444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:2d:8d:03:1f:19:dd:9e:2f:65:00:6e:de:
                    c4:71:7d:b1:74:2f:dc:c0:5d:f9:16:0b:17:f1:72:
                    3e:21:7c:1c:e1:2c:00:6a:d2:27:5c:52:75:b1:5a:
                    6c:b9:de:80:44:36:d2:c5:84:38:03:2e:ba:a2:4f:
                    92:d0:2c:78:6f:9a:1a:7f:7a:81:31:c2:99:85:1c:
                    22:72:df:f0:a3:79:d3:f5:6f:be:4f:48:bc:3a:e0:
                    6c:91:74:12:c4:bf:30:2b:9e:99:06:b4:be:64:4f:
                    b8:db:e8:06:85:45:25:c3:92:09:c6:c7:16:49:fe:
                    95:c5:88:26:f9:75:b0:84:c6:24:25:e7:63:0a:59:
                    7d:b5:72:d1:cf:2c:7b:56:86:d6:14:40:75:b4:f4:
                    d5:2d:fd:bb:88:b0:6c:91:1c:4c:c7:2d:a2:67:40:
                    40:7d:9c:eb:60:7e:c7:e5:07:94:02:a2:37:0e:f9:
                    33:ae:64:73:00:8d:59:21:2d:dc:2b:f1:ed:e2:06:
                    0d:21:ce:9a:ab:b7:95:be:a6:b5:35:09:ea:4d:1b:
                    e6:ce:88:ab:05:f6:fe:6b:f3:5b:84:1d:cf:6b:18:
                    00:df:1c:50:82:f3:58:c8:58:8e:7d:58:b1:13:1c:
                    4d:2e:66:41:b1:63:d0:0f:08:ec:9b:8f:93:2e:1d:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:36:2E:01:51:5F:C0:83:8A:C7:7A:3A:97:39:B6:B8:65:CF:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/77bdecdc-5fd8-3c9f-bdc5-042106b94496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:7d:6a:ba:72:0f:8f:56:df:45:f5:a2:88:21:69:25:9d:
         79:43:31:f7:64:0b:99:ab:b7:3b:3c:d3:c1:c7:80:5d:d6:c0:
         97:69:f7:80:54:f9:f6:0a:01:76:03:88:76:81:20:ea:12:bf:
         6d:06:56:3c:15:3b:bc:8e:2d:9b:1f:1f:6f:d0:f1:bb:e3:44:
         48:0b:43:52:d2:89:46:2c:66:83:06:96:69:44:f6:24:b9:aa:
         17:06:66:e2:f8:f9:72:b2:a1:01:fc:08:6d:4a:e0:f6:a4:c4:
         57:05:2b:42:96:49:0d:2a:41:6c:d6:d0:7a:81:50:96:02:17:
         9f:1f:52:88:11:b6:bf:5b:5d:16:b7:43:01:b2:84:c1:73:cf:
         3e:e7:c7:b2:f2:f7:0f:b4:0f:d1:f9:d4:8f:18:96:56:f5:56:
         77:c1:e9:b1:92:be:d9:69:3c:6d:ef:08:d4:b8:30:b2:25:df:
         94:a9:3a:37:24:c5:d5:9b:60:4c:a7:80:17:ec:1f:67:b1:da:
         c4:de:6e:d0:18:d2:e7:e3:11:3b:8c:33:26:c4:c9:02:6f:87:
         76:22:fc:d5:90:f4:89:f0:cc:6f:94:8c:68:6d:f3:40:af:23:
         48:bf:4c:af:a6:b9:a6:36:89:ea:14:99:52:b5:9e:eb:14:a4:
         8e:2b:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:28 2024 by rpki-client on console-fra.rpki-client.org