Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa
File:                     08c7fe30-f46e-3d87-bbed-69071caf4413.roa (raw, json)
Hash identifier:          9IzEL/uNUI+VEXUG/5H8z48Twcrsjwqy+5r94Jn37F4=
Subject key identifier:   80:3E:EE:52:41:15:2F:0F:22:69:B0:0F:E4:3C:65:6C:ED:AE:EA:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D67AC4FFAA1F26C08180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        72.68.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d6:7a:c4:ff:aa:1f:26:c0:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=9081fb38-efa0-4fd7-a9ba-dba956b7906d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:55:ab:83:a1:0a:b5:94:68:f9:ae:4b:1c:e1:
                    22:0c:ed:34:5d:4a:bb:d9:bd:66:88:81:4b:c4:d4:
                    44:a7:50:ec:42:f8:29:ee:1c:62:99:86:86:cc:e1:
                    b9:9b:37:95:ad:5d:cf:e2:50:f6:c6:14:40:81:da:
                    15:ef:fc:d8:3f:71:f4:48:47:69:39:ee:53:78:9e:
                    c5:15:da:3e:e4:5d:1b:a3:92:a4:08:db:5a:7c:4c:
                    68:fa:05:8c:76:5e:ed:62:8b:ff:fc:aa:f5:91:05:
                    bf:f4:1c:df:cb:5f:c5:61:4b:c2:2d:bb:ee:f6:3b:
                    fd:f2:2f:05:d2:cd:21:4a:ce:80:4b:70:88:cf:f8:
                    8a:92:e6:14:e3:36:8b:96:3d:13:ae:0b:1c:2d:37:
                    f5:2f:fd:4f:17:4f:e0:80:7c:e9:ae:80:13:b2:0f:
                    e0:58:ae:74:cc:d4:20:cc:ad:e3:03:90:a5:b2:df:
                    64:91:56:e5:c7:d6:70:6c:45:75:02:77:db:b3:52:
                    60:6e:3e:28:7a:c7:db:a4:9d:13:2d:8e:b6:d4:6b:
                    3d:e5:c9:86:20:b6:69:6c:69:09:b8:c4:4d:e3:61:
                    98:f2:ad:7a:77:38:32:c8:3a:79:43:a4:ea:2e:c3:
                    d2:2d:f2:11:14:4c:e5:c9:36:31:13:a1:55:85:f3:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:EE:52:41:15:2F:0F:22:69:B0:0F:E4:3C:65:6C:ED:AE:EA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.68.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:92:c9:1c:24:9e:4c:3d:77:cf:06:ba:8d:2a:40:4d:c8:
         65:4f:4c:02:39:23:bd:f3:e8:5b:b7:29:97:62:62:f4:cd:67:
         78:95:1c:e9:01:2e:25:c8:bb:d5:db:c9:de:91:46:8c:fe:62:
         ce:ea:4f:38:6c:43:bd:82:21:20:40:3d:ea:9d:e0:b2:f2:2e:
         39:d7:6b:11:76:b2:de:cc:a8:86:6d:df:96:77:3b:73:56:84:
         75:93:a7:19:d7:62:ad:bd:40:fa:8e:d0:ca:f9:75:dd:18:e5:
         5c:7e:73:12:f9:34:7c:5e:b2:bc:98:38:b5:9e:25:04:60:f8:
         8e:ce:d1:02:1f:ac:85:37:21:db:74:d5:c1:8f:7f:1a:1d:13:
         5a:bb:84:a5:87:ce:0f:bb:fe:45:db:ee:87:33:9d:50:c8:29:
         35:b1:4d:25:6e:09:59:91:86:d0:09:99:a6:4e:3f:f0:35:e4:
         26:62:0d:87:92:20:15:38:0c:66:32:e7:83:88:e2:c6:19:ca:
         ec:3f:fb:5c:02:c3:67:ef:62:a1:31:48:6f:48:f7:9f:81:9d:
         40:99:f0:04:27:7e:63:ec:20:3d:0c:72:42:81:e8:95:05:32:
         4d:d4:d0:92:5e:5e:6e:ee:e8:61:db:c0:7a:58:bf:8c:fc:84:
         e1:0f:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:10 2024 by rpki-client on console-ams.rpki-client.org