Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2329fe43-985c-3e19-8217-dae1f9cf9a27.roa
File:                     2329fe43-985c-3e19-8217-dae1f9cf9a27.roa (raw, json)
Hash identifier:          +X+GqHW1tumaKBm63YU/rCHoLEKs2luUWBUckHqAMJk=
Subject key identifier:   84:C6:A6:36:87:1A:4B:94:64:AD:5C:E1:3A:9A:71:28:2E:9C:72:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845840DD5F31994B09206D26AE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2329fe43-985c-3e19-8217-dae1f9cf9a27.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     0
IP address blocks:        208.221.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d5:f3:19:94:b0:92:06:d2:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=4d23bded-f16c-4304-a36b-89a9f323a8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:f7:7b:56:2a:1d:39:de:29:20:b8:de:8b:
                    f5:f5:d0:53:87:8a:8f:65:ff:2c:47:d8:9e:fb:b7:
                    a0:3b:d7:98:a8:dd:19:66:1a:c6:64:e2:8b:44:13:
                    90:05:33:ac:67:c1:98:a5:85:3a:cb:89:f8:41:bc:
                    35:3b:5a:36:fe:85:f4:cc:e0:a5:3b:17:23:ee:6d:
                    11:2d:46:47:d0:80:a1:f0:b3:72:18:72:81:ab:97:
                    1c:a8:b0:3a:f4:a9:2c:ad:91:cb:1b:14:f1:5d:52:
                    96:5c:08:b1:f5:51:f4:dc:de:ee:07:e1:3a:7a:01:
                    8d:62:e9:82:a6:63:e6:c4:6f:22:03:7a:3a:39:17:
                    4e:fb:9d:d5:37:8d:00:55:95:49:fe:53:ea:b3:61:
                    97:4d:a5:42:b2:48:02:1c:95:90:f5:33:1a:a6:1f:
                    f1:21:df:0a:61:ed:e6:06:ba:18:f4:80:3d:b2:52:
                    56:ea:54:83:72:0c:ee:d2:ee:2b:62:f1:78:f4:70:
                    39:25:9c:07:ef:ef:ff:36:7e:cf:3b:8a:55:ff:4d:
                    38:25:b6:b4:cc:8f:4f:14:93:cf:c6:3c:7d:bb:54:
                    62:f6:a5:91:e2:82:61:6d:4f:e9:72:c8:3c:b6:8f:
                    c1:3a:b8:1f:7a:1b:89:2d:9e:42:ec:24:78:b6:ef:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C6:A6:36:87:1A:4B:94:64:AD:5C:E1:3A:9A:71:28:2E:9C:72:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2329fe43-985c-3e19-8217-dae1f9cf9a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.221.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:17:4b:a4:6c:90:ad:eb:9f:26:c0:f4:67:9b:ba:5c:63:
         14:26:9f:10:bf:71:3c:31:4b:dd:97:d9:00:10:95:41:ff:3b:
         41:62:f0:68:2d:39:50:49:b3:3d:8f:6a:4d:ab:94:35:05:1a:
         8f:32:d8:58:c1:f5:d7:90:13:33:c0:12:9c:37:4b:63:a6:41:
         30:68:56:70:94:2d:45:f7:a8:b3:fc:17:63:15:2a:eb:4e:4c:
         e3:a5:cd:72:0c:15:97:9f:74:7d:ff:74:d2:2f:15:55:fd:9d:
         a1:e4:0e:1b:fd:5d:a2:5e:ad:d0:3d:95:95:b6:46:ee:da:bd:
         76:f1:a3:09:0b:88:0b:b7:91:07:cb:ba:ca:89:30:f2:4f:2c:
         44:8e:37:62:ad:14:e7:5d:9a:44:27:16:c4:dd:68:c8:9b:67:
         25:db:24:15:99:cc:33:ba:81:37:6b:ba:39:a7:98:f8:57:50:
         98:85:79:c6:eb:00:5a:ec:82:af:9d:6d:0d:85:52:cd:9b:0a:
         3b:86:f2:f4:5c:74:09:70:75:20:15:34:3a:21:b5:c1:80:f6:
         36:3b:04:72:58:52:4e:d9:09:b5:27:54:b4:12:53:47:a9:90:
         69:18:8b:ba:90:b4:56:79:ec:88:2c:01:70:af:74:5c:ac:ad:
         b4:72:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:17:12 2024 by rpki-client on console-ams.rpki-client.org