Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa
File:                     2f7d2626-4199-3dd4-8286-283337f7fe2d.roa (raw, json)
Hash identifier:          kBazWwt/42XtCcLcuMhqLJSKZq/5vrmUYA+JeY12KqA=
Subject key identifier:   8A:22:2A:B8:6C:5F:54:77:5B:D0:C9:75:0A:AE:B3:4E:B1:2E:C9:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B31147FC7B0B04E2C000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        72.69.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b3:11:47:fc:7b:0b:04:e2:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=5488f15c-8504-4d98-a073-b833d91a4ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:77:03:9e:a9:52:99:4d:4c:2a:ee:2b:51:41:
                    20:d2:d0:dc:12:e9:bc:48:c2:e8:ec:a7:a3:1d:eb:
                    f6:c3:3c:6a:b1:64:fb:8c:ce:7d:11:8b:4c:eb:1f:
                    98:22:f9:ca:49:c8:2e:be:42:46:d8:d8:ab:8c:01:
                    d6:29:5f:0a:2e:0c:5c:5e:cb:3d:68:0b:c7:c6:50:
                    5d:88:35:05:ec:74:ac:86:12:9b:77:2d:2e:1e:7c:
                    31:3c:63:3f:15:6a:38:7d:55:85:5b:e6:fa:7d:63:
                    c3:86:01:2f:13:fe:31:82:ba:c0:b0:99:78:4b:db:
                    64:9f:7d:33:d5:ff:5e:7a:3b:7e:b7:52:87:ba:c0:
                    b8:97:61:c1:a0:32:80:24:a5:21:fe:99:a4:da:59:
                    04:00:42:b7:70:91:0e:13:15:58:2a:c4:3c:d9:1b:
                    ba:53:fe:43:7d:df:4d:93:20:e8:08:f5:27:0a:86:
                    a5:97:fd:81:64:83:d6:08:ee:24:b3:1a:26:30:f4:
                    72:df:d0:2b:1e:cc:7c:ce:29:98:22:a9:ad:18:a5:
                    88:81:23:07:d0:8a:2f:eb:5d:0b:3f:7c:09:2b:35:
                    f8:1b:83:7e:f3:8e:c0:62:e0:05:ec:a5:8c:6f:85:
                    67:b8:c4:aa:0c:1a:60:08:9d:4d:6b:fd:34:e5:5b:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:2A:B8:6C:5F:54:77:5B:D0:C9:75:0A:AE:B3:4E:B1:2E:C9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f7d2626-4199-3dd4-8286-283337f7fe2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:dc:94:8f:72:8d:67:a1:43:e0:06:8b:e8:f9:49:89:f8:
         05:33:56:92:ff:dd:ce:cc:49:24:82:b1:4a:b8:28:19:67:32:
         b6:b1:a4:89:18:e4:31:f0:bb:f8:ac:8f:7e:90:cb:dc:58:b4:
         a1:bd:70:bd:05:12:8f:e3:02:31:dc:70:97:4e:a6:b0:fc:fa:
         9e:53:4a:1b:4b:7f:70:7c:56:44:ba:21:3b:e9:e5:e7:1a:dd:
         2d:42:75:52:2d:0e:65:7e:7a:62:16:4a:02:c0:c4:bc:6b:81:
         38:35:9f:d5:18:ff:2d:89:32:55:7f:f2:08:de:91:7d:8e:ce:
         8a:a1:c8:62:7d:8b:d8:7b:0e:46:8f:51:0c:84:c9:ea:47:6d:
         90:0b:07:c9:aa:ac:a3:78:05:90:79:d8:58:8c:bf:b3:51:e6:
         61:f8:dc:8e:11:6c:21:03:03:89:33:82:85:c8:48:f8:4f:3c:
         79:f1:bd:cd:68:b1:3b:72:d2:e4:31:3c:f3:7a:2b:3f:12:17:
         04:a3:b4:a0:0e:ad:07:cc:0e:b0:79:e3:1e:66:20:3a:0a:f3:
         cf:1f:96:a8:f1:25:fd:aa:3c:98:70:18:6b:74:bf:6c:c1:c3:
         55:72:23:d4:30:38:51:a1:12:ec:0b:b5:d8:e1:48:c7:45:3d:
         cc:d9:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:32:23 2024 by rpki-client on console-ams.rpki-client.org