Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/623177dc-6600-3764-86b0-c33c15cd69de.roa
File:                     623177dc-6600-3764-86b0-c33c15cd69de.roa (raw, json)
Hash identifier:          vVMBeNh5eR+PGq5T3eAGPXWEuy63nvA6uw2tKgYhIJ4=
Subject key identifier:   14:01:33:79:0D:6B:33:0D:EA:8B:F9:F4:1F:4F:B2:AC:2B:F4:91:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A809C9554DC0EF0660EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/623177dc-6600-3764-86b0-c33c15cd69de.roa
Signing time:             Fri 19 Apr 2024 01:04:26 +0000
ROA not before:           Fri 19 Apr 2024 01:04:26 +0000
ROA not after:            Thu 18 Jul 2024 01:04:26 +0000
asID:                     6167
IP address blocks:        72.104.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:80:9c:95:54:dc:0e:f0:66:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:04:26 2024 GMT
            Not After : Jul 18 01:04:26 2024 GMT
        Subject: CN=85e37a5a-f760-4d8e-b002-9d5f1f9add3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:13:48:7d:26:83:04:35:05:12:e9:4a:72:
                    e3:6f:00:4e:46:cc:4c:a1:9d:51:8b:a4:59:e2:36:
                    ad:90:2d:79:89:8e:dc:f0:b2:59:70:27:69:2f:90:
                    86:c5:c3:6f:cc:4e:25:22:60:f8:79:0a:6e:61:43:
                    42:51:9e:21:8d:48:a7:6a:28:a7:5c:73:d0:eb:22:
                    15:7f:54:b0:57:5f:dd:d7:62:2a:cf:30:46:b0:10:
                    a4:41:e9:63:25:41:4d:eb:36:f9:56:79:c3:7d:cc:
                    3a:2a:54:da:45:ea:3f:12:b3:a5:97:cc:de:55:0e:
                    a4:ae:ac:44:57:7d:a0:63:c8:79:82:61:31:13:df:
                    81:81:41:0a:d1:17:2b:fe:84:ae:05:1e:ab:f0:4d:
                    6b:03:f1:8b:e9:77:b2:cc:13:90:ba:e5:c2:f9:75:
                    08:5c:25:af:28:d9:1b:f4:61:ad:b0:85:4e:27:fc:
                    fe:f9:2a:48:25:26:1c:f3:d7:f4:b0:bb:cf:97:ec:
                    33:53:92:1d:c8:e4:c4:1a:9d:1a:cd:ab:27:2e:12:
                    17:a3:3c:76:22:aa:8e:91:fe:fc:e7:32:4a:e9:d2:
                    44:d2:da:83:c9:28:41:37:04:4a:e7:47:c2:42:aa:
                    35:fb:e0:22:e5:16:9f:02:ab:39:d0:c3:a8:1e:87:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:33:79:0D:6B:33:0D:EA:8B:F9:F4:1F:4F:B2:AC:2B:F4:91:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/623177dc-6600-3764-86b0-c33c15cd69de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:1a:eb:76:bc:50:64:86:b9:01:e0:be:25:44:46:5f:8e:
         1a:33:32:64:a8:bc:2d:fc:48:fd:d2:9b:af:1a:d4:8f:40:19:
         70:ca:b6:5e:44:ed:54:c2:20:f7:12:b5:9b:f2:df:fb:e9:b3:
         bc:2e:37:e3:a4:f6:23:cb:74:aa:ea:82:c1:ae:bb:f5:2e:e9:
         65:4f:22:0a:ce:29:d2:42:a4:2b:d8:fa:0c:b8:81:88:44:c6:
         6e:4d:50:aa:19:62:42:30:09:59:f9:af:d1:fc:11:4c:c5:35:
         96:67:34:de:97:19:22:38:f8:33:10:dd:01:81:56:89:a5:13:
         b6:89:68:a6:b5:c3:a0:0d:dc:9b:26:65:7b:3e:6e:98:48:c6:
         9f:ac:f0:4b:0a:98:69:2b:44:91:23:c9:38:59:af:96:f1:4a:
         15:f6:cb:8d:af:08:8f:71:95:f6:c9:7f:1d:a5:31:b2:a9:55:
         81:b7:ef:5b:79:4c:49:04:c4:1d:5e:14:f3:94:b4:59:db:ba:
         88:b7:cd:5d:d7:83:c8:b6:41:c2:3d:ec:86:1b:40:72:d2:01:
         d5:09:bb:e3:f5:a1:12:33:fd:50:5a:40:3d:b9:c6:90:3b:44:
         e6:8c:f6:2e:93:3e:4e:e2:ff:ec:88:b9:41:e3:d4:90:7a:15:
         7d:a1:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:14:17 2024 by rpki-client on console-ams.rpki-client.org