Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
File:                     767dcc9f-4d41-3dc2-8c16-517741247519.roa (raw, json)
Hash identifier:          NgQKSDI5x29KosfVe0OdXEaoqRjnMITLcBbtadgX4IQ=
Subject key identifier:   28:CF:1E:7F:35:9B:A3:E0:64:1A:27:60:02:B6:A0:85:A3:96:6C:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB303145BA52F232902DB68
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
Signing time:             Fri 03 May 2024 01:10:21 +0000
ROA not before:           Fri 03 May 2024 01:10:21 +0000
ROA not after:            Thu 01 Aug 2024 01:10:21 +0000
asID:                     6167
IP address blocks:        72.108.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:03:14:5b:a5:2f:23:29:02:db:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:21 2024 GMT
            Not After : Aug  1 01:10:21 2024 GMT
        Subject: CN=6fc35c98-d046-4d7a-a246-e86319b687fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:03:ff:89:ad:53:bc:95:46:6e:33:de:29:
                    9f:da:71:95:ab:fe:30:53:79:ff:e4:95:1c:9a:85:
                    cb:b9:7c:28:45:c6:19:c2:d6:c4:31:5b:ca:42:ee:
                    16:79:c6:e8:53:fc:2f:69:21:e7:26:f8:7b:21:2c:
                    ea:87:2f:fa:f7:25:d6:c8:4f:98:35:d5:83:c4:c3:
                    0d:b5:67:06:44:0c:ee:50:9d:9d:f4:c4:95:ad:6f:
                    af:43:28:cb:25:a4:55:f5:33:f4:24:47:a5:cb:b0:
                    6c:9b:c7:46:ad:b4:0a:a6:b8:85:6e:db:ae:4c:d5:
                    55:91:ef:33:69:16:3f:ff:a5:dd:ad:fa:41:9f:04:
                    bf:32:51:02:0b:38:96:08:3f:9e:85:83:69:1d:a1:
                    fb:69:75:98:1b:26:fc:c1:ec:1e:cc:fc:0f:5d:3f:
                    54:6d:cd:60:35:c5:9a:fc:bd:29:6e:b0:6f:78:e4:
                    6d:f1:ac:87:5d:c0:41:85:3d:d4:e1:0c:68:33:81:
                    6d:ad:15:3c:96:b2:85:9d:5f:cd:b6:88:5e:fc:df:
                    70:c0:cc:72:37:dd:ce:e7:02:3a:03:a5:e5:46:c7:
                    ca:31:88:ed:bc:f4:62:37:f4:06:99:47:42:3f:0d:
                    99:ae:df:31:91:78:8c:22:11:d6:60:ae:95:61:4d:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:1E:7F:35:9B:A3:E0:64:1A:27:60:02:B6:A0:85:A3:96:6C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:1d:05:65:db:c1:f7:cd:7d:26:29:00:50:98:bf:97:5d:
         df:b6:f2:98:c3:79:e7:11:8d:27:7c:1b:41:c3:63:b5:ee:d0:
         15:24:69:0e:67:a8:14:1a:3f:90:f3:6d:e1:a6:aa:0a:4c:30:
         81:f9:57:e6:71:c1:9d:34:38:d2:91:2e:2d:14:af:62:32:ca:
         93:62:80:06:6a:12:bc:5f:ff:2d:48:17:a9:df:4a:8c:1a:26:
         78:38:56:ac:2b:3f:6c:60:b2:4e:28:94:23:53:ce:3a:2b:31:
         10:e7:55:69:bf:f5:5f:cd:d1:2a:1a:e6:27:22:ce:65:61:fc:
         be:87:0e:88:27:5c:29:bf:49:53:41:d9:05:d0:f0:fb:50:af:
         98:a2:39:f5:00:a5:83:ee:0e:5e:93:78:5d:10:2b:91:fb:11:
         9d:d1:65:3e:d8:54:14:b2:52:a3:c6:08:23:09:7f:1d:4f:ae:
         a2:1a:9f:ec:ca:d8:fa:c2:79:f2:20:06:b4:16:37:9f:97:dd:
         c1:2e:45:df:9d:84:74:a2:c2:81:5a:4f:21:57:00:53:bc:c3:
         9f:17:2e:cf:b9:ee:e1:a7:9f:14:37:3d:cd:59:fe:1d:f8:a6:
         5c:58:8a:88:cb:77:8f:fa:5e:1e:26:20:e9:b9:31:d5:a4:b1:
         d5:4c:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:37 2024 by rpki-client on console-fra.rpki-client.org