Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa
File:                     4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa (raw, json)
Hash identifier:          LHAA+G7bjtU6ZHzuWjWsla84u8slJ0Fybi5vgwPycWw=
Subject key identifier:   1E:A7:4F:CB:0C:04:E2:94:DD:0B:D9:8E:C6:E1:E4:CA:1B:6D:B9:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB78865E26A841161A3CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.97.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:78:86:5e:26:a8:41:16:1a:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=a831146f-e3a8-4767-a294-9a4ec2eb0d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:48:52:45:d1:55:66:4a:b0:2c:b0:c5:3d:
                    8e:50:d7:0a:e6:ba:0d:b0:4c:b2:a2:91:c0:00:dd:
                    f7:1d:ce:4b:1d:e2:6b:68:bc:ef:ea:1f:78:25:24:
                    07:f8:93:73:b3:25:26:ac:f8:3d:23:23:a3:3a:a1:
                    d9:fe:1e:7a:13:f8:fd:49:a6:9b:e5:58:f0:3c:0f:
                    9e:b3:a6:d2:20:25:47:57:51:ba:67:95:90:e0:93:
                    24:6e:96:27:f8:d8:cb:a7:51:6f:3e:b0:1f:4c:6d:
                    55:28:b3:54:ec:f0:c1:be:41:db:2b:52:cc:88:80:
                    f5:46:5f:a3:f2:8e:51:9a:fc:4c:75:66:db:a4:63:
                    a6:f6:33:11:e5:47:54:ca:97:54:8c:97:be:be:05:
                    43:1f:b8:0f:8c:63:15:44:4e:39:dd:14:c6:12:3c:
                    72:6c:65:3c:ce:3f:c8:b4:f1:e6:85:a5:2a:cc:9f:
                    16:16:8b:0f:0a:df:2d:26:9e:92:52:74:ad:07:f2:
                    f3:27:2a:73:f7:0e:e4:fd:11:0a:34:88:7a:b9:aa:
                    8f:65:9c:3d:c8:a2:e1:c1:c4:e9:db:d7:5a:42:63:
                    16:3d:55:e8:32:6d:3e:e2:6e:32:3b:ec:87:46:04:
                    54:cc:ce:95:8b:85:cb:0d:82:5d:5b:3c:47:60:ba:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:4F:CB:0C:04:E2:94:DD:0B:D9:8E:C6:E1:E4:CA:1B:6D:B9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ae5ab6b-522c-3178-b042-d11cc3cdc19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:32:d2:bc:c8:0b:28:31:29:c2:d9:a9:9a:32:5c:84:0c:
         cf:e2:7f:43:e3:5d:e6:0d:ae:f1:8d:3f:02:e0:56:c3:65:40:
         f7:2d:08:ab:30:f0:c6:a0:b6:d4:4b:e1:04:58:72:ed:dd:2e:
         b1:eb:91:2c:50:79:9c:49:5e:9a:ef:4c:7e:e6:84:28:ab:90:
         03:1d:15:f5:bb:9f:05:c2:b7:cd:4e:b9:a2:b3:64:f1:ec:48:
         c4:4b:0a:94:bd:f7:2a:de:bc:42:61:85:5e:af:ce:fe:ec:ed:
         14:1c:c6:0e:83:ba:97:39:38:0e:04:eb:2c:ba:60:1d:64:1a:
         52:8d:28:a7:90:7e:d2:d7:c0:7e:c3:7a:4f:c0:66:d7:a2:85:
         96:68:7a:a8:0a:65:30:ae:48:09:61:2b:80:01:bf:5a:89:69:
         01:d2:16:59:4d:5c:c9:c8:c6:1e:7d:fd:eb:c2:c0:c5:f4:c2:
         d3:4e:5d:7f:30:35:f1:40:44:fc:a6:7d:25:5f:34:0f:01:46:
         4e:a9:a2:95:f9:67:f1:49:1f:06:88:2c:2a:f9:f0:4e:a6:c7:
         50:ce:f4:a5:1c:5e:88:e4:92:cc:b5:7b:0a:c6:13:80:5a:61:
         d4:76:a9:9b:55:3d:d1:47:2f:41:fa:c9:19:28:91:2b:32:9b:
         cb:ed:aa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:29 2024 by rpki-client on console-fra.rpki-client.org