Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1f03f3-ea8c-33d5-a181-0a46a086f108.roa
File:                     6f1f03f3-ea8c-33d5-a181-0a46a086f108.roa (raw, json)
Hash identifier:          AFJROHn4pol1HmJeiaY0y1bjxBl3XEP8Q7DsWKrCSqw=
Subject key identifier:   35:5B:A3:50:A2:0B:BA:F1:E4:D2:44:57:62:29:4E:D7:EB:7D:96:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB7EF20709F5F04B2780C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1f03f3-ea8c-33d5-a181-0a46a086f108.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:7e:f2:07:09:f5:f0:4b:27:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=7f9862f0-69a6-4533-bb21-df1421a808ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:04:b3:c8:bc:d1:b6:68:08:9d:33:03:63:
                    68:f8:fc:56:25:7f:e1:0d:0a:bb:e0:12:07:82:a7:
                    11:4b:c0:23:c4:bb:f2:2c:b1:18:1b:a4:79:a7:ee:
                    5e:2c:e0:03:6e:e0:f6:59:3f:01:e0:30:b7:bd:29:
                    44:8e:9a:c0:d8:7c:fd:47:a8:df:1d:bb:4e:d5:f5:
                    0b:45:cd:d7:34:31:32:63:b8:b4:3f:8e:f9:c3:0b:
                    fc:f7:06:9f:a3:30:09:e4:61:e6:fd:a9:13:0a:6e:
                    b6:c1:b6:b8:9e:4d:fb:62:9f:11:88:48:58:1e:6c:
                    7e:95:5f:f5:b6:14:79:b7:22:fb:c6:91:ac:a8:ae:
                    5d:7b:4d:3c:a9:1d:30:c2:2b:27:2e:4a:d4:4e:df:
                    af:7f:4b:70:83:0d:1e:91:7d:89:2f:c0:f7:10:57:
                    50:d5:5b:8b:44:66:ab:ff:16:d6:a6:fe:c0:b3:03:
                    16:9d:63:02:df:34:12:55:8c:b2:60:41:53:2a:05:
                    b8:b1:26:58:70:d3:3a:0b:b7:eb:cd:02:f0:f7:0e:
                    83:4f:de:62:5d:7c:6e:8f:1e:80:d6:45:ca:7d:42:
                    ec:61:9c:e7:13:4b:8d:1c:f6:8e:9e:22:7c:3e:ed:
                    14:d3:61:b4:ce:c2:eb:89:7f:fc:0f:93:fc:3a:ee:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:A3:50:A2:0B:BA:F1:E4:D2:44:57:62:29:4E:D7:EB:7D:96:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1f03f3-ea8c-33d5-a181-0a46a086f108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:e9:fe:2d:a3:47:f4:a6:79:e2:21:25:8d:bc:81:93:d1:
         22:f1:32:3d:b4:f2:a3:81:1b:3c:a9:35:da:26:f4:dd:6f:fb:
         f5:99:ea:e6:51:73:13:fb:1f:8b:ff:de:7e:f9:43:73:5d:2a:
         7f:d2:56:f8:5f:ec:92:55:4e:54:0e:3d:06:9b:c1:82:0c:b1:
         e3:98:26:07:4a:8d:47:6c:c6:ec:5f:ff:a9:0c:e6:52:73:7d:
         3b:17:75:09:9b:db:cd:dd:b3:8d:ef:bd:48:c6:54:e4:93:bf:
         fb:f0:e7:fe:78:60:30:2c:c0:0e:db:3e:5d:a0:cd:00:12:de:
         f3:bc:c3:4c:d9:f9:4a:07:79:c9:c2:f9:57:bc:3e:3f:86:91:
         3c:54:89:11:10:d8:dc:af:f8:9a:00:62:2c:d0:7b:6f:0b:2e:
         98:26:d4:71:b4:14:79:22:53:5d:2e:d0:b7:d4:5a:ea:0c:c0:
         27:22:e4:2c:28:05:b0:4e:bb:c5:02:b4:6f:7b:13:27:9a:fd:
         df:1f:80:52:f8:9e:17:1f:62:31:2f:68:2b:f0:99:89:fb:84:
         cf:98:c6:5c:cf:09:d7:ad:21:7b:8e:8f:b1:00:35:d0:1c:b2:
         c3:63:4f:5e:06:9c:8f:5e:66:0a:20:0a:c6:81:78:0a:47:50:
         8a:f4:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:36 2024 by rpki-client on console-fra.rpki-client.org