Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
File:                     2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa (raw, json)
Hash identifier:          WcDDn9gh2yIsUd41luwE1BFaMQQvoTEZCwasu7vX9SU=
Subject key identifier:   4C:47:92:1C:E8:28:CF:1C:82:10:D9:4F:52:60:75:81:03:B2:5F:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE1266C8A608A772B9E60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        72.72.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e1:26:6c:8a:60:8a:77:2b:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=9c2e9580-641c-46c4-b3e9-84a5d542b0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:97:6d:3d:2b:b6:4f:70:fb:e6:a2:db:08:
                    e0:97:02:74:7f:c3:dc:cf:fe:81:1f:68:a8:da:0b:
                    2b:07:d8:c9:70:2b:71:eb:a8:b5:ae:87:d7:0b:5b:
                    9e:9e:f8:b3:e5:64:46:d1:3e:b7:04:65:ae:56:35:
                    7c:0f:87:f9:d8:1e:23:a0:59:43:9a:39:9a:e9:77:
                    d9:a0:6f:40:7f:c3:3e:b8:34:42:ca:5d:cf:07:fc:
                    30:d6:97:ae:10:d9:57:62:59:dc:53:37:03:70:c3:
                    40:6b:35:a0:10:04:19:d6:26:d7:00:95:0d:6a:86:
                    0a:0c:57:7f:55:e7:c7:1e:24:4d:d7:74:9d:66:e0:
                    2e:a7:80:93:5c:2b:9d:5c:8c:3a:9d:b0:44:f5:e1:
                    82:9a:a1:10:60:5f:5a:9e:dd:58:bf:61:06:25:0c:
                    2e:71:56:82:3f:8b:ea:44:19:49:41:8d:18:7d:25:
                    a7:77:3b:ef:a1:20:bb:36:06:34:b4:fd:e7:99:cc:
                    5b:b4:8f:34:37:87:8d:63:f0:a4:b3:3f:8d:7a:c3:
                    69:23:17:48:cd:a4:9a:22:d3:ac:74:b1:93:89:ac:
                    10:06:2e:0e:8b:1b:01:06:66:f2:1b:f4:b6:6a:d5:
                    9c:02:64:86:f8:c2:05:9a:5b:9a:12:a2:43:68:d6:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:47:92:1C:E8:28:CF:1C:82:10:D9:4F:52:60:75:81:03:B2:5F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7dea5e-afd0-3fea-b8a6-524b2212ee24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.72.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:37:56:1b:f9:fa:3b:a1:cf:fa:55:f4:f5:f7:80:aa:ff:
         25:d1:0b:08:16:12:37:5d:db:05:b1:87:bf:36:e3:34:c6:bb:
         34:b0:b3:18:70:11:50:cd:2f:90:08:5e:bb:67:71:29:98:09:
         a8:8d:24:80:d4:c2:5f:aa:e5:41:9f:45:78:3e:3b:dc:68:d5:
         a3:cd:4b:a8:02:04:0b:2f:e9:cf:cc:57:e9:8a:b9:b0:e0:ba:
         be:cc:39:74:15:e8:f2:ad:23:93:37:9b:02:18:28:86:3d:f1:
         2a:97:e4:82:e3:19:e1:43:f8:c9:27:cf:02:a3:5b:d8:c3:62:
         94:b3:cb:80:74:8e:a5:f3:55:e8:fc:2f:d1:0f:58:1e:2d:34:
         1c:11:5a:22:41:1e:73:39:26:96:ae:e0:ce:25:b1:f7:2e:8b:
         35:52:e8:53:60:85:07:be:e9:01:e0:03:f3:49:27:83:9e:b9:
         c7:3b:4f:bf:28:d8:b4:9a:92:be:de:4a:27:73:31:94:28:e9:
         55:ae:be:04:51:9b:a6:43:db:3e:d7:09:18:52:f8:09:f2:8a:
         b7:fb:63:a3:2c:3c:6f:f4:c2:26:9f:20:fc:ce:1b:75:f4:55:
         e6:34:5f:cb:b4:b4:24:83:a5:ee:3d:12:fd:e9:7e:6b:53:33:
         de:29:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:23 2024 by rpki-client on console-ams.rpki-client.org