Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34b27eec-6369-3df5-b86c-a0c9c0bbb21e.roa
File:                     34b27eec-6369-3df5-b86c-a0c9c0bbb21e.roa (raw, json)
Hash identifier:          5NlFT7o6wpLdxPboegJF3MfP8RpAkLhVDLOR81QgYO8=
Subject key identifier:   B6:1A:D5:82:96:90:ED:19:F3:4A:95:7A:9D:E7:93:BC:AB:F6:A1:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC12394FEFCE59FCF4CB140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34b27eec-6369-3df5-b86c-a0c9c0bbb21e.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.97.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:23:94:fe:fc:e5:9f:cf:4c:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=565d21ac-57cc-4f09-9147-8a9d95ea6f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:13:b0:b5:24:e6:ce:a8:4f:e2:bf:91:c3:bc:
                    35:a5:35:78:0a:56:4f:b4:8d:fb:ba:74:a3:97:fb:
                    ff:dc:ed:26:6c:e8:3a:51:47:b9:70:71:7d:e9:b2:
                    5c:16:54:4c:b4:16:a6:be:c7:fd:64:e6:1a:47:09:
                    df:05:90:d0:6e:9a:ca:7b:6f:cd:d5:f6:7d:68:66:
                    b1:4d:52:43:1b:4c:02:4b:39:08:2f:71:92:c3:ba:
                    a4:da:1c:95:01:2a:cc:82:67:6c:ee:0d:a9:00:74:
                    4d:4f:6c:77:5f:a3:f3:a3:88:e3:6c:4e:28:f0:3b:
                    8f:76:d0:4a:f9:8b:eb:69:58:1c:4c:16:9b:14:a3:
                    69:4d:6f:5f:fc:e1:fa:f0:41:e9:99:06:de:03:47:
                    c0:c5:01:95:ab:f8:c4:cc:a6:b2:e0:dd:e6:01:09:
                    b9:b7:03:3e:8d:6f:7d:d4:8c:f8:82:d2:ef:ac:5c:
                    33:7d:11:76:7d:18:ef:52:d8:a9:e1:fb:ce:fb:2a:
                    9f:95:71:31:ee:e8:c2:27:91:e4:90:fb:bc:a7:86:
                    90:57:dd:20:b0:17:1a:dc:cf:f3:1c:01:a6:94:92:
                    ee:40:1c:bf:fa:66:6b:1a:ce:6f:c3:44:44:8c:27:
                    26:9d:01:29:02:67:35:2b:04:7d:54:1c:35:74:a7:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1A:D5:82:96:90:ED:19:F3:4A:95:7A:9D:E7:93:BC:AB:F6:A1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34b27eec-6369-3df5-b86c-a0c9c0bbb21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:76:5a:5a:a5:6b:7f:a8:c0:b8:62:04:16:ea:42:d6:34:65:
         8c:49:d9:c6:e1:8b:7a:37:09:6f:95:8f:14:20:ea:ca:3f:f2:
         b9:da:11:8f:d6:b6:7f:28:60:fc:56:23:0c:b1:f4:29:31:18:
         04:f9:74:e4:bb:be:02:05:4a:a7:40:f3:d8:67:68:00:f8:f7:
         ab:8c:c8:36:a5:7f:85:dc:45:39:72:5d:b6:42:d6:64:40:1f:
         87:29:0a:70:2b:14:e9:89:8a:c5:b5:4a:f6:da:10:d7:9d:5d:
         f0:50:1d:85:12:51:47:99:79:70:6c:ac:ef:ca:eb:c1:c6:3e:
         c1:e6:bc:ad:75:78:99:cf:5b:45:a5:41:78:e0:c7:f1:aa:56:
         8a:99:ba:33:9e:f0:15:66:7b:dd:1c:d8:fb:11:fc:50:35:3a:
         32:f8:bb:1d:f0:57:ef:b9:e4:95:0d:f4:91:f1:0d:a1:6a:d5:
         60:22:0d:c2:29:9a:cf:27:8f:4f:26:3a:b8:81:58:78:47:23:
         92:e1:04:c5:12:73:17:47:50:86:13:c6:e0:91:11:30:52:54:
         fc:32:9c:93:8c:91:0f:17:86:78:0e:41:1b:d4:b4:93:0a:1b:
         13:d1:e4:e0:d3:c4:60:fc:35:83:2b:2e:3d:a2:4c:8b:9c:0c:
         9b:8f:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:24 2024 by rpki-client on console-fra.rpki-client.org