Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
File:                     3c653d29-3ae2-334a-a734-b80722690ac3.roa (raw, json)
Hash identifier:          kwl5MjThrMbt9A1Rc6KaEtH+wAUuYh+a18KfHUkjM7k=
Subject key identifier:   23:C5:B4:84:AB:62:2B:98:60:FF:55:1B:8E:DB:4A:80:06:1F:48:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A6ABE57A9A2D4304C2680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa
Signing time:             Fri 19 Apr 2024 01:04:16 +0000
ROA not before:           Fri 19 Apr 2024 01:04:16 +0000
ROA not after:            Thu 18 Jul 2024 01:04:16 +0000
asID:                     6167
IP address blocks:        72.104.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:6a:be:57:a9:a2:d4:30:4c:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:04:16 2024 GMT
            Not After : Jul 18 01:04:16 2024 GMT
        Subject: CN=392c7452-f69c-4092-be88-9d486207bc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:de:7e:34:dc:4d:bb:49:b5:9d:00:ba:8b:
                    46:5f:e6:a4:77:41:d4:c4:07:ca:48:4d:31:b8:1c:
                    a4:8a:92:f5:12:1a:bc:c0:cd:d3:29:87:95:42:2e:
                    5b:2b:53:83:21:d1:20:cc:55:82:ab:10:a3:35:70:
                    b1:bf:3a:f6:9e:0e:4c:21:6c:3c:3f:c0:c9:79:a9:
                    cd:c9:98:0e:8b:6e:28:0e:b6:9c:b8:69:97:c1:d3:
                    ca:40:5f:1b:5a:8d:9f:1d:ac:8f:6e:03:8e:49:43:
                    79:b1:f0:3f:9c:3c:8e:a8:cb:c7:c5:b5:5a:48:8f:
                    61:6b:15:87:93:c0:77:8c:58:27:75:fb:f4:8f:be:
                    22:85:39:c9:4c:9c:19:a5:94:ff:ce:a1:78:46:a2:
                    f0:60:18:02:c9:e9:35:bd:aa:75:32:2c:ce:2b:ce:
                    25:d8:aa:54:2e:85:97:35:6e:db:dd:7c:d3:e1:88:
                    91:73:db:b2:30:df:61:a1:43:12:a6:0b:df:3a:dd:
                    bd:18:c9:54:7f:d5:d3:98:31:2d:37:4d:50:e2:aa:
                    78:37:18:24:38:c4:bb:d1:d0:f4:a9:cb:ca:b1:bf:
                    1b:34:1f:d0:b7:5d:75:5b:fc:5c:fc:e3:3f:81:a2:
                    16:35:68:2d:5a:a7:d7:3a:44:97:b5:89:cd:f3:18:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:B4:84:AB:62:2B:98:60:FF:55:1B:8E:DB:4A:80:06:1F:48:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c653d29-3ae2-334a-a734-b80722690ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:06:22:c3:78:ed:8e:a8:d5:4f:60:74:b1:fa:6e:ce:da:
         08:93:e4:4f:0f:d9:91:85:bb:9a:bc:93:5c:00:18:76:0f:1c:
         76:5d:ad:2e:40:03:f5:25:00:4b:68:0c:42:4f:a7:99:c3:20:
         99:9b:b5:e1:52:70:f8:1e:6d:73:f3:98:18:32:2a:a6:3a:19:
         e6:d9:e9:bd:04:5d:35:c3:1a:e7:13:e2:34:e9:03:8d:e8:f6:
         e9:e5:23:72:cb:cd:cf:c0:65:00:df:eb:fe:48:99:58:36:40:
         60:42:05:dc:5b:00:be:26:27:7f:67:e4:c4:3d:c5:d6:b4:66:
         db:f4:a9:c5:6f:9a:39:0d:9b:7b:68:48:ec:e7:08:26:f4:d0:
         e1:f7:39:14:73:28:b0:5a:31:e9:cb:96:80:ef:1f:9a:ad:39:
         59:33:fe:41:34:25:cf:3a:dc:2f:0d:8d:4a:49:f5:29:89:ee:
         e7:a6:a6:91:87:d9:e0:6a:85:76:c8:97:1d:89:13:68:e7:1f:
         bb:d8:20:e4:bd:db:91:bb:b1:5e:b7:d4:05:d2:b4:6a:ec:29:
         55:fe:21:88:84:07:61:07:13:10:dc:47:33:c5:9e:b6:8d:8d:
         fe:c6:92:ef:d8:32:d7:15:b1:74:06:fc:50:94:9a:8b:38:32:
         94:d2:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:14:13 2024 by rpki-client on console-ams.rpki-client.org