Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d4730f6-5c49-37a0-930d-3cada6aec48d.roa
File:                     2d4730f6-5c49-37a0-930d-3cada6aec48d.roa (raw, json)
Hash identifier:          nQoAx9hiZ+LswKJ0qWaWvWpAyqERb2aIilV6pOpeJ7M=
Subject key identifier:   C2:81:92:61:AF:28:6C:13:BF:2E:DB:3D:8E:EB:AC:28:B0:2C:FB:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB2F11ECCF6E2E83316F8A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d4730f6-5c49-37a0-930d-3cada6aec48d.roa
Signing time:             Fri 03 May 2024 01:10:12 +0000
ROA not before:           Fri 03 May 2024 01:10:12 +0000
ROA not after:            Thu 01 Aug 2024 01:10:12 +0000
asID:                     6167
IP address blocks:        72.108.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b2:f1:1e:cc:f6:e2:e8:33:16:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:12 2024 GMT
            Not After : Aug  1 01:10:12 2024 GMT
        Subject: CN=8bbafb0f-6c77-4ddb-bb3d-4c728a397ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:a2:4d:a9:e9:92:64:5a:33:af:df:4a:f4:
                    18:23:e6:d6:65:25:3a:28:4f:4b:7a:0a:57:ed:fe:
                    41:58:8c:02:23:ea:00:a4:21:6a:9b:6d:c3:8a:8e:
                    0f:1e:73:00:5d:21:62:fa:2d:cf:d2:5c:3c:3f:83:
                    7c:4f:a8:44:f2:2a:91:ce:53:b7:32:18:b8:1d:35:
                    9e:93:bf:ac:02:8e:35:44:78:75:51:57:c3:4e:75:
                    c3:fc:de:5b:24:63:ae:86:27:17:39:50:07:da:8e:
                    2b:82:23:a4:9e:b1:27:b0:e6:fb:1d:4f:c1:7f:19:
                    d8:4b:97:f4:ee:49:b6:12:b6:83:67:4e:16:77:84:
                    1f:3e:a4:d7:f1:32:3d:f1:93:5d:f5:4a:e3:1d:bc:
                    05:e8:39:bd:b4:b4:68:c0:80:56:87:04:42:ad:5b:
                    2e:80:67:0a:13:46:e8:72:31:77:d4:3c:90:c9:77:
                    70:8a:86:77:71:9a:7c:6e:d1:d6:c0:4a:9c:94:63:
                    ab:2b:84:6c:15:f2:46:4f:e8:33:64:0a:e4:c4:e4:
                    de:ee:df:3c:c5:eb:d0:7a:35:eb:71:43:f6:5e:9d:
                    b4:95:42:4b:68:67:ec:13:64:aa:75:41:b4:c3:0b:
                    21:a3:20:52:8c:83:6f:4b:22:af:4a:4e:ed:7d:30:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:92:61:AF:28:6C:13:BF:2E:DB:3D:8E:EB:AC:28:B0:2C:FB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d4730f6-5c49-37a0-930d-3cada6aec48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c4:07:5b:3d:1a:e3:ab:30:2f:d5:1a:37:cb:96:ab:b6:78:
         65:40:12:30:80:c2:c1:18:d4:77:47:0f:a0:ba:56:00:d0:14:
         f4:82:06:af:fa:11:3c:26:b2:70:5b:db:ea:2c:c2:78:c7:4e:
         59:2f:e4:cc:8e:bf:5a:f2:0a:b2:f9:58:47:e0:72:41:8c:c6:
         c0:38:00:c1:ab:cc:15:50:9a:7b:7b:e1:5f:22:cc:e1:d4:24:
         8f:a4:de:b3:9a:18:e4:db:8f:e6:5c:79:38:95:e5:c6:a9:7a:
         89:87:e0:80:13:b1:0d:b8:6b:8e:ed:66:c5:ff:8e:78:0d:d3:
         53:87:ca:34:f9:10:b5:4d:29:24:fc:b3:df:6b:13:7f:90:47:
         20:f1:27:78:a8:0c:af:49:da:bf:5c:95:6b:2d:35:fb:ba:32:
         50:2f:ba:ca:32:f3:b0:34:18:9f:43:eb:55:ce:fd:c4:a9:0d:
         8f:a1:fc:71:6c:da:22:73:dd:2e:fa:d6:71:0f:db:3a:01:61:
         c0:44:49:9f:7e:89:f5:12:a5:ef:29:30:1e:f6:a3:13:64:83:
         b2:1a:e8:06:f5:e3:60:b6:3e:68:95:b3:fa:7d:c4:67:14:57:
         00:ad:06:3d:32:e6:b1:89:e4:40:69:04:42:c5:f0:f3:ba:26:
         71:2c:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:24:53 2024 by rpki-client on console-ams.rpki-client.org