Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62dd8fb5-1ef7-3fef-a328-bd53cdb0e832.roa
File:                     62dd8fb5-1ef7-3fef-a328-bd53cdb0e832.roa (raw, json)
Hash identifier:          /5Qt+Ua0Nc5GmjoBnVM2ZLhyUvDhfBPxj3m4xYuvl44=
Subject key identifier:   FB:74:B3:92:23:4F:7F:05:9B:8D:8A:3A:7D:68:B0:87:D9:E5:42:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC122F7CF90F1D371E99980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62dd8fb5-1ef7-3fef-a328-bd53cdb0e832.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.102.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:22:f7:cf:90:f1:d3:71:e9:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=d9e076c4-e497-458a-a0d3-352ce0e4ccd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:63:9f:ed:c8:88:f6:34:a7:4a:b8:c9:6e:
                    c6:bb:56:3e:67:6b:3b:20:22:21:23:8a:ff:d7:f1:
                    69:3d:62:f3:ea:02:96:a4:08:76:46:45:38:46:61:
                    67:05:8f:73:cd:11:1b:9a:8d:4a:fc:50:f2:d6:26:
                    0f:4f:cd:3a:ce:9e:bc:b4:42:fe:e3:1e:52:36:e4:
                    5e:61:6c:b2:c4:26:5e:c2:b9:af:8f:61:2c:24:d9:
                    fe:ed:36:3e:f4:00:7d:13:36:2e:7f:19:df:1e:3b:
                    fe:db:05:b5:9b:6b:44:09:51:9d:42:c7:bb:1e:21:
                    d1:d8:86:4a:60:df:09:91:a7:29:ee:03:62:44:6b:
                    20:81:00:31:0a:a9:e8:d9:22:b1:99:f6:83:69:fa:
                    55:96:9b:87:e4:03:84:37:07:8e:7b:5a:f9:0a:ba:
                    b5:c9:38:3d:f3:5d:b0:c0:0a:37:e2:e9:23:69:73:
                    c0:df:8d:c5:c9:24:16:d9:54:2c:41:89:d0:81:11:
                    21:90:ad:01:dc:34:78:e3:56:c7:ba:44:6a:c6:fd:
                    1f:10:c4:80:1a:0d:16:3b:c0:fc:e6:3f:fa:15:74:
                    c7:36:f1:97:e3:23:e2:e8:7a:7b:4c:f7:9b:b6:3e:
                    bc:d2:14:0c:7e:95:d7:6a:c8:ab:1e:a2:52:c9:c4:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:74:B3:92:23:4F:7F:05:9B:8D:8A:3A:7D:68:B0:87:D9:E5:42:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62dd8fb5-1ef7-3fef-a328-bd53cdb0e832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:40:bc:45:1b:6a:0d:a2:d5:f5:8f:db:66:55:83:aa:99:88:
         24:9f:e8:36:d5:ec:fd:f0:f0:b8:20:71:dc:ab:e2:23:8d:ff:
         41:1a:fa:21:42:eb:d9:74:1e:58:3d:f8:16:4c:af:7c:4d:6b:
         f6:03:68:12:5c:67:54:e1:95:71:9d:4f:92:1d:28:90:57:41:
         f4:8c:30:bb:4d:bf:e0:a7:28:c2:99:3d:05:1d:bd:1b:44:4c:
         7f:1c:11:56:7a:e2:4a:9e:98:7a:bc:9e:33:da:92:49:e1:3e:
         10:40:97:21:b9:32:2b:81:c3:75:96:00:80:5b:7f:3a:af:6e:
         b5:12:e8:2a:5f:a6:98:7f:f6:75:b9:4e:f3:47:73:93:ba:73:
         83:ad:d8:48:99:70:fe:95:58:ff:97:6b:58:75:d4:85:41:21:
         55:4e:86:fd:76:0a:72:ff:29:59:0f:57:ce:73:14:1b:6b:f9:
         5a:dc:be:4d:07:ad:9d:0a:18:4d:36:df:de:c5:0c:aa:40:66:
         44:6a:25:1e:59:6a:0b:d8:7f:dd:53:6b:cb:c1:c9:59:e3:65:
         66:0f:88:7d:b4:a2:7f:fe:a1:86:7f:3c:86:bd:69:f7:47:11:
         b1:4b:27:8b:1e:51:0b:58:3d:a4:e6:54:dd:73:e8:5a:8b:91:
         97:39:4e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:29 2024 by rpki-client on console-ams.rpki-client.org