Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/688555f3-7091-3d04-add3-9326ed3a237b.roa
File:                     688555f3-7091-3d04-add3-9326ed3a237b.roa (raw, json)
Hash identifier:          hH3PCBvETErye1hSjHxYfTwk/DHMD6w3sUHZ0s3RZ4s=
Subject key identifier:   72:84:2E:B1:91:05:B5:B2:03:3B:46:E9:23:1B:4A:91:93:1C:DB:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A2EA12A0AC7EA407C3880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/688555f3-7091-3d04-add3-9326ed3a237b.roa
Signing time:             Fri 19 Apr 2024 01:03:48 +0000
ROA not before:           Fri 19 Apr 2024 01:03:48 +0000
ROA not after:            Thu 18 Jul 2024 01:03:48 +0000
asID:                     6167
IP address blocks:        72.96.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:2e:a1:2a:0a:c7:ea:40:7c:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:03:48 2024 GMT
            Not After : Jul 18 01:03:48 2024 GMT
        Subject: CN=0293e5ca-28c0-4efb-86c6-a31d70b8154b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:7f:6e:4b:66:b0:68:94:26:d8:e0:89:5f:
                    c7:ec:62:9d:13:f3:b9:a8:01:0b:1f:ea:26:a2:be:
                    c9:c4:08:a5:cf:04:94:52:9f:6a:c1:7b:11:35:9b:
                    82:98:9f:26:6e:91:55:87:95:21:f1:b6:ca:ce:c3:
                    04:aa:07:96:cb:4a:5e:e3:59:2b:f2:65:8c:7f:6d:
                    f2:41:5c:59:42:0c:8c:2e:30:f0:86:3e:1e:8d:c7:
                    70:de:63:f7:48:7c:9b:bd:55:3d:d5:c6:14:94:2c:
                    3c:e9:ea:15:6a:b8:09:59:40:54:ab:e6:f7:bb:2c:
                    51:4a:b0:44:a8:0b:c0:f5:be:8b:48:62:f6:bd:7f:
                    55:9a:80:2e:04:7d:0b:64:8a:77:ad:1f:41:44:53:
                    5d:7c:11:d8:58:3a:6b:4c:9a:20:11:04:a0:ce:f2:
                    df:ed:9e:99:f0:a1:23:8b:2e:21:93:1f:01:06:a4:
                    1f:f0:6a:0b:f7:8e:49:1f:39:76:16:fc:c8:83:18:
                    28:90:2d:c3:cd:0d:43:eb:5e:db:67:2f:a8:d3:c4:
                    39:f5:b0:15:ed:41:62:e7:f6:3d:c1:63:90:11:7f:
                    e7:73:67:e0:92:96:b4:9f:0d:a1:f3:20:80:15:4b:
                    05:3a:f4:e7:da:8e:30:30:2f:9b:75:8a:4e:b4:61:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:2E:B1:91:05:B5:B2:03:3B:46:E9:23:1B:4A:91:93:1C:DB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/688555f3-7091-3d04-add3-9326ed3a237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:1c:8e:83:f7:4a:91:b2:13:0e:18:11:13:51:12:42:0a:
         12:fa:f2:ac:13:7c:23:23:be:d8:e0:72:21:ca:8e:4f:a3:77:
         42:a7:40:76:f3:b4:a7:3a:28:ba:b6:14:12:34:35:41:f7:62:
         0c:ed:43:e6:0f:79:99:be:d0:5d:a4:76:ac:6f:7a:66:b4:84:
         d1:80:25:4c:12:4f:36:3d:85:df:b9:f5:38:92:2c:fd:82:bb:
         d2:f3:7a:76:f5:31:e3:55:a1:e8:de:8f:c9:c8:a4:a3:dc:cb:
         98:84:7c:0b:a1:48:ac:28:fc:4d:d1:bd:72:26:d1:85:2d:6c:
         ce:73:88:cd:b5:b8:10:c3:95:1a:d8:05:e8:49:5b:da:0e:e3:
         7e:12:f5:5d:5a:2b:99:63:16:e9:cf:68:fa:53:a7:20:8a:02:
         4c:f2:d6:fd:3f:3a:5d:a9:d3:72:9e:c1:91:36:83:99:db:68:
         b9:12:e8:de:f6:7f:6b:05:ce:38:c4:76:47:b6:26:5e:24:6b:
         45:22:23:d6:bd:cc:da:68:fc:2b:c9:f2:c7:53:76:4f:19:b9:
         e3:3d:d6:d5:d1:ce:81:bd:3c:d0:81:55:67:79:52:27:07:70:
         de:8c:0b:4f:a8:e8:26:7a:d4:75:7e:e2:ab:59:c4:93:eb:62:
         e7:4d:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:53:32 2024 by rpki-client on console-ams.rpki-client.org