Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
File:                     4a52b50e-f663-35cc-b050-67dcd5392302.roa (raw, json)
Hash identifier:          5khHtVNY7MKdnOnStDKOl1Ze+Il++aew/E/VT9T/I4E=
Subject key identifier:   8A:77:33:A6:C0:95:D6:22:2F:0C:D2:72:C6:46:4B:1E:75:BF:8B:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DE95E58FDD87B7191CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        72.83.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:e9:5e:58:fd:d8:7b:71:91:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=e6eb3560-712b-4191-8363-9ae8921cbf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:37:1d:68:52:91:a4:04:14:ef:8f:85:d6:
                    7c:95:a1:5d:fb:86:fc:71:c5:b4:34:7e:9c:cb:90:
                    90:df:7e:b5:55:86:d9:4a:29:0c:f4:c1:0d:36:4b:
                    56:62:c6:e6:48:18:07:1f:2d:50:5c:32:a4:97:d9:
                    a1:cb:46:14:87:cd:23:9b:83:8a:bc:b9:d6:4a:8d:
                    48:c5:e4:54:2c:c7:2f:5e:2f:06:e2:99:71:f2:0c:
                    93:5b:a6:81:67:02:e4:63:c1:d3:54:ae:73:57:26:
                    b1:49:3e:6b:89:5e:15:6d:bb:1a:16:34:e6:01:c1:
                    1c:7d:dd:c1:2e:0b:59:06:d8:ed:b1:a1:50:47:67:
                    56:70:50:6c:24:aa:60:0e:a8:7b:ea:6f:c3:2f:bd:
                    09:b2:4f:06:83:4a:e8:69:fd:64:7a:4c:05:9d:fd:
                    c2:76:12:56:39:06:5d:73:47:75:75:96:52:8b:67:
                    09:7c:d1:96:a5:d4:b9:b7:b2:fe:06:c3:a0:e4:40:
                    bc:94:25:7c:04:a8:33:6d:77:8e:ab:a6:9f:79:9a:
                    fd:53:08:8f:17:e1:af:06:f1:c9:24:06:a8:51:a5:
                    b6:36:db:45:7d:58:45:05:a2:cc:e4:ec:88:cb:8a:
                    33:aa:b3:3f:2c:66:71:e0:4b:67:4e:11:04:19:ae:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:77:33:A6:C0:95:D6:22:2F:0C:D2:72:C6:46:4B:1E:75:BF:8B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4a52b50e-f663-35cc-b050-67dcd5392302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:08:fd:ce:1f:b8:4c:13:01:69:b9:b1:d2:55:f8:34:84:16:
         a3:3e:f8:91:73:9c:c2:3c:cf:81:5a:f6:52:6e:37:7e:1e:68:
         ec:93:dd:cc:eb:12:16:19:c6:b7:7d:30:50:60:c7:21:57:4f:
         77:d8:0f:f8:e1:72:74:8b:38:8a:79:0f:af:3c:fb:3a:ae:64:
         b9:88:55:3f:83:30:a7:e1:2e:e7:e6:82:a2:3b:7b:30:3a:fe:
         da:37:c5:0b:1a:e1:be:e4:4d:6a:cf:f8:0a:d7:77:f6:c7:f1:
         c5:f9:42:18:d1:0f:f9:33:af:ab:1d:3e:7c:63:65:2b:10:40:
         0f:62:3c:60:92:f8:81:e1:88:76:d5:0b:0c:5e:31:bd:c2:59:
         9b:6b:6f:ea:87:b2:48:39:64:f3:01:0f:49:3c:e0:ac:a7:40:
         ac:24:2f:aa:dc:fa:2a:47:a5:da:19:51:7f:6a:44:c9:82:65:
         b8:58:d3:6f:38:68:45:0c:45:70:e4:39:bf:1f:3e:a4:e0:51:
         d3:10:08:d4:e2:9c:6a:51:5c:cf:48:13:9d:7c:09:ce:c1:4b:
         f8:59:dc:02:58:72:35:d8:d7:ed:0d:07:05:12:c9:7a:98:b5:
         4a:97:1b:3c:b8:5c:ae:6c:df:83:be:14:c4:8c:62:b1:da:c6:
         42:c2:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:33:22 2024 by rpki-client on console-fra.rpki-client.org