Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
File:                     6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa (raw, json)
Hash identifier:          qRSXSQ3jX2Nw+FgKoMSAz+rCokXFGvnIEGzACjrwARM=
Subject key identifier:   C2:E1:EA:C1:EA:5F:45:A1:97:0D:82:BF:3A:F3:3B:43:07:B5:61:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8CF84C78E06CFD967C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        72.92.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8c:f8:4c:78:e0:6c:fd:96:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=773ba6fa-0803-4fd6-9ee2-b717a118a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:ab:4d:b2:8d:17:6f:c7:e9:2b:ff:0e:67:
                    f0:c8:13:92:81:50:bf:80:c3:42:03:02:ae:18:fa:
                    3b:bf:5c:21:e3:d8:c0:2e:6c:84:2b:2a:dc:e1:f0:
                    1a:79:7c:f3:4e:ec:63:88:4d:6a:8f:30:03:ca:2b:
                    bb:d3:6f:c7:34:5a:11:d0:68:d8:94:6a:a8:d3:77:
                    a9:df:4c:a3:24:d5:32:2a:e1:0b:da:ea:ca:3b:b3:
                    d0:a2:49:6d:4e:7e:42:06:9e:b0:59:d0:7c:78:af:
                    94:92:5c:b2:1c:3c:e0:d3:71:ab:dc:72:08:22:31:
                    7d:32:80:4b:cd:01:4f:22:b5:3c:40:0a:50:21:42:
                    45:f9:39:76:b3:6d:34:10:53:3d:d9:cc:53:d9:c8:
                    74:f3:2e:ce:18:65:f2:73:9b:e4:8d:78:2c:fc:73:
                    f3:2c:1a:55:b1:a9:04:78:0d:60:89:39:11:0f:81:
                    fb:a9:c3:98:66:a7:6b:58:5a:7c:43:cc:1c:f9:b0:
                    72:a0:ea:80:7c:0c:12:c1:ee:7d:a8:f1:b7:eb:f8:
                    6c:3e:82:12:fc:8c:dd:07:59:b9:8f:25:49:5b:49:
                    58:9d:5c:fb:7b:d3:95:23:e7:5a:9e:15:3b:bf:02:
                    bd:e2:0a:f8:4c:ff:bd:44:b7:ea:9e:aa:02:c8:4b:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:EA:C1:EA:5F:45:A1:97:0D:82:BF:3A:F3:3B:43:07:B5:61:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.92.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:3b:8f:ea:52:bd:65:b6:82:91:bd:6a:14:cd:c1:69:6b:
         6f:63:a7:f2:e7:5f:5f:5c:00:c5:0d:f5:b1:8b:25:08:d2:93:
         ec:b6:bc:e6:fa:05:b2:8e:20:97:59:a6:e6:f7:1e:f6:ba:ea:
         a0:ac:68:94:d1:19:ab:c3:ab:d3:c1:11:19:fa:64:67:79:23:
         33:76:6f:55:8b:91:74:aa:4b:f6:44:7f:aa:fd:9f:fe:dc:d0:
         af:e0:4e:35:74:5a:e0:12:37:7c:a6:2a:90:d7:ad:bc:84:d5:
         e9:a0:f3:10:d5:de:56:fd:ec:57:4c:fb:58:12:85:86:9f:5c:
         e7:91:48:5a:01:e2:ee:02:71:05:0f:3f:1b:02:6b:a3:89:69:
         99:32:44:3c:ca:38:d4:19:9b:06:58:90:e1:5a:27:fc:67:b6:
         4b:a4:76:25:fb:6c:12:66:4c:fc:4d:03:45:e3:06:3a:48:ef:
         b7:7f:d1:11:b1:77:2b:f8:3c:2b:da:0f:ce:a1:8d:a0:75:a4:
         ef:99:7a:0a:33:7f:01:34:4a:df:9a:a4:23:e2:d1:43:a0:b9:
         7b:59:64:c8:b4:30:22:9e:12:45:8b:5e:ed:dd:67:03:2e:0f:
         60:62:9c:a6:ce:65:68:ab:8c:62:66:5a:56:02:bc:cc:72:5f:
         01:1f:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:31 2024 by rpki-client on console-ams.rpki-client.org