Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa
File:                     821b4c9f-d1f4-39de-bddb-539d083748cb.roa (raw, json)
Hash identifier:          hlvyE1kXDgPqVKBZhSIATMFY97KUj03NwZftfB5QfvQ=
Subject key identifier:   B4:92:C7:04:B1:23:33:07:D2:2D:6B:04:4F:6A:F4:61:B6:55:95:41
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F432858456C530F24689C43C34B9D51C0
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        72.1.44.0/23 maxlen: 23
                          72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0f:24:68:9c:43:c3:4b:9d:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=70b5bb47-c2a0-401c-a32f-79e05ed7f156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:85:1e:1a:3a:43:4f:29:47:b2:03:fe:fc:
                    c8:a2:0e:f5:b9:1a:b6:b2:1c:a1:dd:13:a0:ee:c4:
                    ab:3b:be:e2:ef:53:bc:bc:1b:22:53:24:4d:9d:a9:
                    0e:2b:9d:0c:a9:73:2f:ca:27:e2:0b:ba:c6:60:06:
                    9a:63:67:8b:a7:ce:ae:c2:bd:85:c8:1c:24:f7:27:
                    f7:40:b9:52:1d:8e:63:6f:84:3c:38:70:06:e3:55:
                    67:87:eb:30:25:e8:3c:c7:c3:79:1f:76:b3:3f:19:
                    0e:5e:8c:4e:27:0c:3d:41:1b:d0:53:05:fd:d1:ba:
                    7f:49:88:1f:69:ff:dc:cd:bc:f4:e9:29:56:45:0e:
                    7d:57:76:81:fd:d8:f4:12:be:07:e1:cb:c1:7c:f6:
                    61:b1:1d:51:5e:a9:6e:44:30:04:f8:78:7c:d5:bb:
                    55:3e:5e:1d:8c:5c:28:ea:f4:71:72:a1:11:f3:28:
                    7d:45:f8:ae:82:70:b7:7b:d7:35:1b:37:43:cf:9a:
                    11:8f:2b:3d:29:c2:e5:eb:57:22:b4:0f:71:7a:bc:
                    b2:66:a4:4b:c6:0e:2a:ff:7b:43:3d:b7:49:2f:60:
                    5c:91:ee:2c:13:5b:b1:8f:ba:ad:5a:87:27:94:f4:
                    76:1b:7e:a7:f3:17:dc:c0:36:b4:46:f2:97:36:3e:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:92:C7:04:B1:23:33:07:D2:2D:6B:04:4F:6A:F4:61:B6:55:95:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:cf:9e:f4:3c:ef:7a:cc:de:d4:58:91:6a:f8:10:f8:a2:
         39:c1:09:f6:fa:5c:79:fd:3f:ec:a6:f6:70:7d:f1:64:57:91:
         16:12:ea:fb:74:3f:06:cf:e2:cc:00:df:3e:62:7f:ec:5f:a8:
         da:bb:fd:ff:2b:bf:37:c9:d7:20:d5:45:c7:f5:67:a8:74:4f:
         0b:b1:a7:f4:67:c4:e4:ec:e5:72:a5:d3:23:98:9a:f3:fa:51:
         17:33:8a:6e:4b:70:67:5c:56:47:0a:d5:e4:77:1f:5c:6f:9f:
         5a:bd:00:f9:b4:d6:26:83:f2:8a:a8:a3:9d:fe:32:60:d3:80:
         5b:60:79:c5:95:b2:c1:2a:5d:16:7a:54:4a:c9:a0:ca:21:b6:
         11:63:83:d9:cb:60:51:11:a0:fe:92:d6:ea:b1:f1:1d:0e:82:
         f4:04:72:37:27:28:16:ca:bb:2f:03:39:03:e9:ad:d3:74:11:
         f4:0c:68:8f:fc:95:e8:e0:f3:a4:66:80:16:2b:d7:9e:fe:f8:
         ee:16:ab:df:02:62:0d:b2:e4:23:4f:7a:84:d5:dc:ef:25:e2:
         5d:81:e9:75:8b:f7:e3:0f:f8:cb:4f:b1:99:50:43:2f:c6:8c:
         05:42:40:11:12:be:7f:2d:a8:4a:c4:b7:fc:7b:e6:ba:5b:df:
         be:a6:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:20 2024 by rpki-client on console-fra.rpki-client.org