Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
File:                     c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json)
Hash identifier:          t4Udf/Z8gNwXsqG2upDCkWsvO+Qh1Gq5UCwzvqzyZAU=
Subject key identifier:   27:26:54:AB:1B:23:D2:FE:5C:98:7F:9A:6C:89:2A:F2:20:98:FF:0D
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F432858456C531BBBBDD3F939CBB61800
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1b:bb:bd:d3:f9:39:cb:b6:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=59480998-a489-4413-bfbe-70d5318ef8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:37:0d:eb:81:f0:e9:23:bd:c3:f8:73:6b:
                    b2:fd:29:0d:88:a8:2d:37:72:96:f7:c7:af:59:e4:
                    70:3e:d1:6b:9b:0a:5e:28:46:99:16:03:3a:90:9c:
                    b5:1b:3c:b7:66:1f:bf:bf:bb:de:dd:97:c1:f5:06:
                    df:df:8f:1f:76:b4:39:f7:11:8b:ba:08:46:c2:6f:
                    c4:83:87:26:4a:4e:96:3b:ab:52:e2:3b:bf:e5:52:
                    26:0b:53:26:ea:76:85:3b:a7:d8:69:ab:42:8c:6f:
                    2b:e5:f2:61:b8:9a:88:d7:b7:c4:f4:3b:50:32:a9:
                    ad:be:d6:34:24:22:e7:4c:e9:de:e9:72:48:fa:0a:
                    74:c7:6b:7b:18:fc:4b:2c:b7:6d:f0:15:a6:ea:bd:
                    d0:1c:a2:19:d5:84:65:73:d0:32:7b:77:5a:ae:06:
                    95:ca:26:92:57:8d:b7:7e:77:f8:27:c5:99:15:b5:
                    d6:93:20:1e:a1:dd:44:78:70:80:f7:93:82:e7:16:
                    7d:5f:80:e3:76:b8:fd:c4:e1:0b:94:04:19:11:97:
                    8f:1f:bf:a8:25:fb:6c:f6:c7:c1:98:18:84:b2:75:
                    aa:37:c5:c9:7d:df:49:63:bf:09:06:ed:6a:14:7f:
                    51:cc:39:0b:da:1d:59:89:5b:6b:a5:11:52:d1:67:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:26:54:AB:1B:23:D2:FE:5C:98:7F:9A:6C:89:2A:F2:20:98:FF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:56:52:2b:6f:55:fa:9a:55:b4:f0:11:33:8d:35:c0:70:a2:
         7f:f3:c7:2c:82:8f:da:10:69:45:d9:ca:f7:0c:17:e8:bc:86:
         ee:3a:37:00:7e:43:98:bd:50:83:d9:c0:21:e2:99:2a:78:25:
         7e:ac:1b:cf:5f:33:99:1f:6a:f1:b0:ef:ca:ab:b9:e9:8d:dd:
         e7:fc:34:6e:f6:59:61:ee:fb:4b:27:52:58:ac:a2:36:81:05:
         01:ab:92:a2:aa:85:90:d1:89:0f:1c:7c:68:09:bf:b5:90:c4:
         86:6b:06:8d:f5:c9:fb:a1:56:81:99:fe:57:26:d8:70:48:8a:
         48:1e:d2:81:70:e5:72:3b:e7:a7:30:72:b2:30:27:51:57:dd:
         4f:f9:6a:97:62:ca:b5:b0:58:c8:66:e3:4f:2b:ed:c0:08:bd:
         65:ac:e3:68:29:7f:33:17:66:d9:27:4b:9d:ff:48:86:48:3c:
         73:57:26:04:42:fa:41:77:1c:9b:e4:aa:2f:c1:93:51:9b:ac:
         c2:35:a7:f7:27:eb:46:69:e6:81:bc:b4:53:55:88:e4:f5:50:
         74:e7:9d:d2:42:6c:2c:01:61:0f:d6:2a:86:a9:1c:ad:5c:cf:
         83:91:9a:01:0b:2b:72:f3:4e:68:df:7b:3f:d3:a7:cb:f3:ff:
         eb:13:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:20 2024 by rpki-client on console-fra.rpki-client.org