Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c53a5a7-0265-3572-b37c-342911672eb0.roa
File:                     4c53a5a7-0265-3572-b37c-342911672eb0.roa (raw, json)
Hash identifier:          1Yve9HKJnUImcNUhK/ldDcOkaFgwE+5LH6Ul893C5AA=
Subject key identifier:   36:DA:E1:F3:C6:25:36:60:A2:25:32:D9:3C:C9:65:EB:EA:52:2C:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB32601CDEF99470D555500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c53a5a7-0265-3572-b37c-342911672eb0.roa
Signing time:             Fri 03 May 2024 01:10:37 +0000
ROA not before:           Fri 03 May 2024 01:10:37 +0000
ROA not after:            Thu 01 Aug 2024 01:10:37 +0000
asID:                     6167
IP address blocks:        72.102.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:26:01:cd:ef:99:47:0d:55:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:37 2024 GMT
            Not After : Aug  1 01:10:37 2024 GMT
        Subject: CN=9bc0dd88-b41d-4a99-adf7-9ca739c47129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:ea:d7:3c:47:b1:d7:b1:08:30:86:29:9b:
                    e0:d9:d1:db:2c:c8:20:60:d0:00:ea:c0:cb:28:9a:
                    d3:a1:7c:10:35:ce:40:5b:f8:89:7a:d9:34:c6:07:
                    53:63:3f:45:10:eb:16:c9:ca:e1:b4:ba:75:c7:e9:
                    5d:22:bf:2d:50:3b:6c:1d:32:c6:c7:8e:7c:69:d7:
                    6f:a9:1a:f6:42:d8:51:28:36:7a:0d:bc:c1:e1:0c:
                    57:38:ec:f6:24:6c:b3:ba:46:40:81:19:74:a4:7b:
                    83:23:90:80:e0:50:68:fa:d1:0c:7c:68:05:9d:48:
                    99:bb:38:8c:ea:91:1d:20:4e:ff:13:89:a7:95:8b:
                    05:b9:e8:fb:ff:85:07:64:33:10:e4:91:bb:df:d9:
                    36:79:09:35:37:09:c6:77:07:17:55:43:c0:40:7c:
                    cb:79:5d:6e:7f:d5:b6:b8:35:d9:1f:9e:ef:0d:69:
                    f1:c5:5b:ab:6f:fa:19:22:c0:f3:5b:23:b3:73:34:
                    89:f7:5c:c3:1f:20:6a:d6:b5:80:71:3d:55:5d:2f:
                    03:21:05:c7:31:54:04:8d:fc:b6:f1:d3:45:f1:f4:
                    17:2a:fa:69:0e:08:52:92:dd:02:93:44:da:bb:79:
                    72:43:1b:9d:4a:c4:b7:20:a5:64:72:c4:b6:f5:22:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:E1:F3:C6:25:36:60:A2:25:32:D9:3C:C9:65:EB:EA:52:2C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c53a5a7-0265-3572-b37c-342911672eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:d4:e9:a0:a4:5c:fb:9d:63:1f:2f:38:5e:49:9f:eb:4a:
         90:1b:29:25:b7:d3:e1:68:7c:bd:7f:6c:d5:cd:e5:77:d7:48:
         0d:a4:df:fb:78:0a:a4:dd:6b:29:e5:48:f9:50:72:bc:cd:af:
         96:fd:28:e3:14:ad:12:f2:6d:8e:9f:a3:e0:ee:8c:92:f7:87:
         62:d3:56:17:8c:cb:67:4f:9e:a2:90:77:fe:f8:06:b7:8a:3d:
         3b:90:f3:12:a1:2a:37:24:b9:c4:d9:14:ab:83:d7:11:4c:63:
         dd:cc:b0:5b:4f:0f:ac:25:72:ee:8d:16:4a:95:4a:17:d6:a4:
         00:12:c1:77:81:fe:42:33:8b:db:d3:60:8a:60:e6:c1:5f:68:
         2d:6b:c6:58:f4:5a:60:a2:fe:81:06:3b:45:f4:ca:8a:df:d4:
         49:ec:02:e8:50:c7:4d:db:24:de:bf:34:dc:d5:f9:73:fa:5e:
         46:c2:fe:4e:90:a1:60:23:89:20:e2:c9:d2:2f:01:0c:86:dc:
         45:46:c1:0e:9f:85:24:6f:62:33:58:0f:42:54:01:63:9a:c7:
         f1:ed:ac:cf:fa:29:6e:f9:a4:e7:88:95:98:80:32:bf:27:29:
         d7:12:4f:01:89:07:53:d3:a8:fc:1b:94:2c:2f:6f:b2:69:a6:
         2f:2a:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:35 2024 by rpki-client on console-fra.rpki-client.org