Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
File:                     35060332-7e9f-3cbe-964f-8702fe08db28.roa (raw, json)
Hash identifier:          AJg8xb2yc77Px7cR42oCU5brzLYp97sVa68WxNnI1FQ=
Subject key identifier:   FF:61:14:B5:CF:A2:86:B0:32:22:F3:2A:74:8C:21:8A:9F:7E:51:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB395FB8E4D16B1DB1870C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa
Signing time:             Fri 03 May 2024 01:11:30 +0000
ROA not before:           Fri 03 May 2024 01:11:30 +0000
ROA not after:            Thu 01 Aug 2024 01:11:30 +0000
asID:                     6167
IP address blocks:        72.108.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:95:fb:8e:4d:16:b1:db:18:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:30 2024 GMT
            Not After : Aug  1 01:11:30 2024 GMT
        Subject: CN=32381272-3f62-43ac-b28d-cc4039cbcacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:02:a3:2d:e1:e7:9d:44:06:82:e8:32:06:
                    ea:43:2c:1c:a1:d5:89:40:ec:4b:b6:33:e3:0f:d0:
                    0a:08:c7:80:ee:f1:65:b8:96:05:32:70:dd:8d:d7:
                    d6:3c:4f:09:1c:dc:c8:27:e9:da:e9:4a:1b:1e:7d:
                    f0:97:4c:fb:a4:81:6b:56:0f:84:6f:47:43:0f:90:
                    1b:07:57:53:00:f6:55:60:40:7c:da:ad:45:33:9a:
                    21:4a:2e:13:93:01:bc:e0:62:c4:f2:38:de:32:03:
                    3a:f4:3b:67:7a:bc:96:ff:33:16:65:1a:ff:20:c4:
                    34:37:69:0a:37:5f:52:6f:43:02:e4:57:9e:66:69:
                    33:bb:d3:72:f3:1a:1a:44:28:98:94:1a:7b:de:4a:
                    25:ef:e8:7a:27:40:d6:28:72:28:2b:cb:94:75:2e:
                    31:18:7c:ca:20:46:d0:b6:28:c0:b4:96:07:1b:b7:
                    a0:fb:db:d9:98:5d:74:b7:26:47:15:de:ad:76:94:
                    79:b9:54:d8:1a:23:ab:4f:a5:1e:9e:fb:4e:e1:f5:
                    7e:75:ea:bd:c2:e4:be:a9:1b:25:b6:3e:cd:d1:5c:
                    3f:cd:2c:60:f6:ba:9a:88:dd:cd:2d:20:7e:f4:b6:
                    ce:8f:73:70:3b:3c:22:32:b9:11:d8:78:4d:f1:21:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:14:B5:CF:A2:86:B0:32:22:F3:2A:74:8C:21:8A:9F:7E:51:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35060332-7e9f-3cbe-964f-8702fe08db28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:f9:df:24:a0:b6:bb:82:20:b9:53:ad:d7:48:42:e0:e1:
         32:23:05:7e:9f:ba:4b:f1:4f:36:3a:26:60:ad:6a:6f:76:bd:
         3e:3e:52:fb:c7:3e:12:cf:c4:7b:d7:a1:30:c0:90:dd:44:99:
         46:f7:f8:e3:e8:db:14:6c:f1:b8:37:ab:7e:f8:95:90:ee:a6:
         96:2c:4c:de:d2:2f:e8:6f:71:de:d3:84:b7:b5:e6:91:9d:49:
         ee:17:ad:e7:8c:eb:78:db:6a:61:5b:98:52:70:53:1a:73:3a:
         ff:21:df:5e:3a:d9:ba:a4:2e:a3:1b:e9:b0:36:71:f5:27:ec:
         dd:b9:75:0e:e8:66:ce:21:e4:ab:e6:94:a2:b0:3b:7d:49:2a:
         b1:78:08:62:bf:37:9f:1f:f1:29:91:32:7a:85:75:87:ce:8a:
         60:5c:b2:0b:88:73:61:84:7f:1e:01:0b:99:20:23:38:27:53:
         fc:af:a4:8d:6d:db:4b:6b:41:ec:c0:c7:28:47:89:b2:2c:6f:
         38:3a:a5:53:0d:87:a4:7a:ef:e2:23:b1:75:97:41:8a:0e:ab:
         40:a6:35:a9:2f:44:c8:40:ba:a3:7c:f0:03:7d:0a:bb:15:e1:
         a7:d3:c6:6d:a4:f4:a6:5b:ca:44:18:f9:54:11:e0:6f:44:16:
         f6:b2:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:16:01 2024 by rpki-client on console-fra.rpki-client.org