Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8538c793-bd16-37c7-8622-c91b6aa0e8db.roa
File:                     8538c793-bd16-37c7-8622-c91b6aa0e8db.roa (raw, json)
Hash identifier:          NRhwyh4xGLPWOYctJX3xvcPL+RpgJAPjOdkNIXmKPPQ=
Subject key identifier:   EF:CE:A5:88:8A:43:A3:16:6E:8B:8E:DA:39:83:9B:66:5B:81:9A:79
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E70605231AE16D6BC29C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8538c793-bd16-37c7-8622-c91b6aa0e8db.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     23525
IP address blocks:        72.43.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:70:60:52:31:ae:16:d6:bc:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=ff895935-4727-4ac2-a941-547a9d97af5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:34:2a:5a:c3:73:29:4c:02:e3:d3:7d:da:
                    46:15:31:13:c8:ae:28:a6:84:34:b0:8a:38:36:5d:
                    1d:db:50:5d:16:92:50:82:50:a9:ff:66:49:d3:62:
                    b9:e6:b7:36:49:7d:62:92:ec:2a:3f:a7:64:21:9e:
                    77:78:23:8e:35:64:fc:d6:7b:fe:2c:71:39:4e:c4:
                    8a:ee:cb:c7:5f:06:cb:96:b9:b1:df:50:be:7f:49:
                    93:5b:4a:58:f6:4e:35:4f:68:c9:80:df:a1:a3:98:
                    38:2f:34:be:c2:ba:5f:e0:2d:c9:48:6e:33:36:e2:
                    e1:db:93:63:d8:c6:71:d1:70:46:ce:c2:b6:c2:3c:
                    9a:66:ad:58:ea:1e:e3:81:c2:8d:fd:1b:1b:3e:ee:
                    1e:99:e3:5e:68:8a:28:dc:71:88:91:7c:79:8e:5f:
                    16:03:28:2a:f8:ca:79:e6:65:2e:e9:00:f1:f4:0f:
                    79:c4:10:d6:c5:a0:d2:84:9b:4a:a3:6b:b6:79:71:
                    bb:b7:e7:14:76:4b:d4:a6:88:b9:1e:fa:4e:77:78:
                    2c:e4:ed:00:bb:69:c8:cd:3c:bf:df:60:a2:eb:7f:
                    c2:bb:e2:51:98:4f:00:01:89:df:eb:5e:8f:a8:53:
                    09:71:1f:18:c6:6c:e5:03:f9:8a:12:a8:d6:ac:43:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:A5:88:8A:43:A3:16:6E:8B:8E:DA:39:83:9B:66:5B:81:9A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8538c793-bd16-37c7-8622-c91b6aa0e8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.43.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:21:9c:c1:e7:8c:3c:af:62:cf:22:46:a9:61:46:e7:91:
         75:2d:96:7a:ac:67:42:59:7e:e5:cf:db:e9:7d:9a:5e:24:62:
         b3:70:fa:e9:b1:1a:57:6d:fb:0d:e9:37:19:8c:bd:56:f4:94:
         d4:52:38:09:fe:92:72:99:7c:1a:e2:ce:4e:5c:4d:14:b5:af:
         2d:0f:3e:3e:86:d8:2b:91:9d:7a:23:5f:63:99:92:d6:ce:90:
         ca:15:13:69:1f:1b:f2:fb:c5:bb:74:a4:37:ec:35:f0:0c:e3:
         d5:43:83:5b:7c:01:e6:d5:15:17:4a:33:a6:9f:a8:3c:9a:90:
         d4:bc:d8:aa:0a:c4:c6:db:24:2e:d1:f0:96:50:3d:32:ad:6e:
         a8:fc:dc:36:2a:4c:c3:f2:47:e9:fb:ba:d6:79:a9:d2:f4:ac:
         32:86:a0:8d:51:47:eb:b2:13:3a:da:20:4e:97:9d:1c:4a:5e:
         3c:cb:cb:24:bb:b2:0c:f7:9d:e2:3a:92:34:24:96:0f:70:cd:
         9c:69:29:6a:fa:ac:42:da:47:ec:58:8d:e8:d4:5e:41:e5:0a:
         dc:cf:57:6a:91:9e:3e:cb:80:fb:05:c7:35:bd:63:69:92:14:
         51:9f:7a:ac:61:e1:c6:9f:fa:06:27:6d:cb:6b:ea:2b:c7:1e:
         da:5d:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:04 2024 by rpki-client on console-ams.rpki-client.org