Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5be25719-398c-38c8-bec9-0bf79a1992af.roa
File:                     5be25719-398c-38c8-bec9-0bf79a1992af.roa (raw, json)
Hash identifier:          ZpqG44HN0x+r9Q5b5SwqBEpOBVWZJSJa6AfALayJHbo=
Subject key identifier:   DB:BD:82:8C:CF:2D:4D:B7:4E:16:CF:9E:C0:69:B5:D0:B0:F5:E0:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979AA1E78464648006B9E080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5be25719-398c-38c8-bec9-0bf79a1992af.roa
Signing time:             Fri 19 Apr 2024 01:04:42 +0000
ROA not before:           Fri 19 Apr 2024 01:04:42 +0000
ROA not after:            Thu 18 Jul 2024 01:04:42 +0000
asID:                     6167
IP address blocks:        72.105.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:a1:e7:84:64:64:80:06:b9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:04:42 2024 GMT
            Not After : Jul 18 01:04:42 2024 GMT
        Subject: CN=6fc39637-9935-4d72-8662-49d9169907e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:5a:6e:69:da:b1:e2:9a:ab:7e:cc:77:10:
                    cd:14:2c:17:cc:99:28:3d:27:d0:4a:e3:3d:bd:9d:
                    22:95:d3:3f:76:fe:69:0b:13:23:cf:06:63:72:e1:
                    3e:80:82:56:e9:92:65:b9:4f:de:7e:3d:b1:2d:e8:
                    31:50:26:c1:cf:c4:8d:13:82:91:dd:f2:11:d5:4d:
                    9b:81:8b:bf:64:ec:de:13:4b:6f:23:be:87:95:a7:
                    96:53:d3:9d:5f:0e:50:44:f0:4c:01:df:2a:4b:ae:
                    73:9d:a3:62:ae:ca:3e:4f:73:0f:15:76:09:5a:0f:
                    b0:99:59:9f:79:a0:7e:1c:2b:03:c9:f0:76:65:2b:
                    e6:a6:c7:e5:0d:ce:da:ef:90:c2:17:24:a6:a4:4d:
                    df:1a:ca:52:33:f6:c6:f5:39:97:66:a0:c9:3b:38:
                    42:0f:6c:fd:7c:b4:3b:0d:7b:cd:7f:03:35:a0:3b:
                    6e:b9:ff:5f:59:6d:bc:8e:f7:d5:09:cb:a3:71:28:
                    32:ca:7f:da:30:59:e3:2b:17:36:53:72:2f:ac:8f:
                    1e:c0:40:3a:28:87:e7:f8:94:27:09:28:10:e6:47:
                    cc:89:fb:e1:af:97:62:2e:7c:dd:d9:2c:f7:b2:0f:
                    0f:97:63:7f:f5:05:3b:c5:17:c7:f8:ab:ff:a1:38:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:82:8C:CF:2D:4D:B7:4E:16:CF:9E:C0:69:B5:D0:B0:F5:E0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5be25719-398c-38c8-bec9-0bf79a1992af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:68:5d:e6:a0:b6:b8:a5:1b:e3:32:ac:b7:33:8f:8d:af:
         40:57:ad:41:bf:24:bb:f9:c1:dc:12:4d:bb:f6:aa:22:77:20:
         77:56:56:ef:b4:a0:ce:c9:f0:ed:14:a0:b6:92:fe:e8:7f:52:
         35:a6:4a:94:a3:04:d5:e4:f5:1d:c5:13:7b:1c:4a:76:87:8c:
         16:6e:d0:d1:b0:24:74:ea:b6:18:92:74:08:70:c0:42:bb:a9:
         7f:39:7a:f5:ec:c6:5e:19:13:19:83:9b:db:bf:ae:01:6d:74:
         58:53:84:16:c0:65:29:b4:fa:e9:75:fe:b2:ae:39:11:e3:b1:
         10:79:b8:a2:8e:50:6d:5e:24:17:c8:ed:31:0f:c7:42:84:85:
         ec:31:ee:0c:3a:36:3c:48:5b:03:61:cf:ae:1c:ca:e0:d2:98:
         47:8f:c4:a1:97:f8:60:ac:da:37:89:67:c1:d7:b9:20:bf:5e:
         4f:89:0a:75:97:c3:40:9f:65:7e:27:88:37:e2:32:a3:cc:f3:
         49:dd:24:73:0a:d9:67:b2:89:c8:b3:5f:3e:ef:61:69:b0:5d:
         95:3d:1c:62:90:a1:52:82:24:f3:8d:1f:05:b2:93:5f:46:d1:
         e9:83:82:b9:a5:72:ff:08:d0:76:eb:6f:63:41:52:c2:09:aa:
         07:9a:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:54:44 2024 by rpki-client on console-fra.rpki-client.org