Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa
File:                     21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json)
Hash identifier:          pKwVkfakvMCwjGw+2SnF/PNvImyYZWSXt0UckUzwXXI=
Subject key identifier:   F3:16:56:E3:35:07:8B:31:23:39:4F:8D:F6:B4:38:43:1D:C6:79:FC
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F43285845A6F36978C39E51E14F021F00
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     3300
IP address blocks:        72.29.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:69:78:c3:9e:51:e1:4f:02:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=6e2a4425-b887-41d3-abff-f36606911bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:77:96:5e:63:19:82:8c:b0:61:58:d1:2d:
                    18:c2:56:40:05:3f:94:67:b3:da:9a:d4:40:0a:b1:
                    41:8f:4f:5f:aa:f7:1c:c8:a1:a6:e0:93:cb:0a:4e:
                    b0:39:bb:28:61:d0:8d:75:77:2f:51:2e:48:7b:21:
                    c3:1d:61:04:b6:06:dc:99:72:7a:81:08:e9:21:60:
                    e7:f2:eb:43:6a:56:d5:9d:6a:08:8b:8e:c0:85:f7:
                    dd:a0:f0:1d:c2:26:77:6f:86:4a:80:d4:c7:63:c4:
                    e3:da:b1:90:85:2f:7b:7b:ce:75:b7:b8:73:f3:73:
                    d4:70:48:8e:b2:64:13:b3:01:d3:74:ac:a8:18:7e:
                    65:a1:76:8c:8f:ed:8d:42:2f:3b:73:c5:cc:48:70:
                    65:75:cb:8d:26:c9:1f:b7:d6:43:80:28:c9:a4:99:
                    ed:7d:2d:18:a2:dc:0b:fb:8e:a5:fd:9b:8a:d4:d9:
                    d2:4a:22:80:50:03:88:75:7f:03:5f:cc:2f:e6:73:
                    42:50:ac:38:d3:2b:01:eb:6a:cf:aa:f9:82:b8:d8:
                    77:61:e6:87:a7:e7:26:71:81:76:1e:1a:ac:f0:25:
                    e8:4f:ad:29:47:2d:03:bc:30:d3:e2:64:49:ef:ac:
                    b0:3f:6c:a2:d9:f6:ce:27:e9:44:3f:b2:e7:0a:3f:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:56:E3:35:07:8B:31:23:39:4F:8D:F6:B4:38:43:1D:C6:79:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:4f:69:bf:03:6d:f3:8b:57:c6:8a:37:ad:17:ef:1a:1a:
         37:f1:c3:1b:90:f0:3f:66:85:e3:06:41:09:60:94:3c:de:21:
         1f:ed:b9:ee:b3:a6:17:2f:c9:bf:e7:93:b6:7c:bf:bb:d2:49:
         98:5e:c6:70:85:b3:54:89:1d:0e:d9:2c:41:6c:dc:51:a1:41:
         1a:02:d6:88:3f:b3:83:53:19:1a:51:04:ee:00:bf:ee:c1:aa:
         1c:0d:f7:0b:00:76:75:db:61:b6:58:5a:1b:48:b2:20:0e:3b:
         56:ba:98:62:5a:34:6a:20:29:0c:dc:a6:a1:c6:e7:79:c2:76:
         04:4b:a8:50:4b:9f:ae:70:d3:e1:6a:bc:31:7a:c6:fc:82:b5:
         ff:d5:3d:86:21:b4:19:ef:fd:98:9d:94:e1:8b:42:37:86:6c:
         a3:a1:f2:eb:06:88:42:d0:dd:65:1d:ae:4d:ae:f8:45:8d:35:
         2d:bd:85:c0:fc:a1:c8:40:32:05:8e:f1:2f:e8:a9:c5:63:a3:
         ae:3d:da:2b:b1:a5:83:b7:80:10:63:0d:94:13:23:46:ed:3b:
         7b:1c:0c:75:11:67:ba:39:54:76:ae:2c:d0:4e:fb:95:73:12:
         f7:ec:17:6b:39:fc:da:a5:8a:30:6b:d8:6b:16:a0:03:5f:e2:
         34:ae:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:15 2024 by rpki-client on console-ams.rpki-client.org