Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aa5b70a-69c8-3732-ae55-82b9fd5246d5.roa
File:                     7aa5b70a-69c8-3732-ae55-82b9fd5246d5.roa (raw, json)
Hash identifier:          dM2Oebg+clRk53Qbv+az3f3CXq2p1mWFaIyhixPLphU=
Subject key identifier:   D5:A1:95:1C:15:57:4E:72:10:DE:F2:D6:94:74:20:87:DF:D4:11:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC1269CBECD13F64384B4A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aa5b70a-69c8-3732-ae55-82b9fd5246d5.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.107.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:26:9c:be:cd:13:f6:43:84:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=9ebf21c6-00fa-45eb-a335-c1739f37701e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:e0:d9:14:28:63:21:e5:53:19:22:79:e0:
                    93:79:d2:35:5a:cd:d9:e4:5e:55:2c:82:4e:da:18:
                    3b:63:ce:74:07:42:3d:f5:67:53:1b:62:73:95:06:
                    62:68:cd:a9:91:ee:a3:3c:f9:ac:15:08:8f:71:b2:
                    6c:8a:d1:7f:54:e4:39:8a:82:2d:96:64:57:50:de:
                    7a:a0:d1:e8:64:e0:49:be:03:4d:49:93:05:85:3e:
                    d4:1f:2e:91:c2:06:0b:ed:20:89:4e:f4:7a:25:dd:
                    50:8e:e9:82:1b:34:dd:9c:b2:e6:59:56:e0:0f:13:
                    f9:30:aa:24:10:68:c1:9a:53:28:bb:48:f6:d5:0e:
                    67:c1:35:be:d1:67:fe:a1:cb:c3:ed:41:c1:b9:35:
                    8c:1a:17:ae:59:14:ac:d0:ec:04:2e:08:77:e7:4b:
                    2c:a2:ea:da:87:cb:cb:4e:2f:8c:2d:20:d5:14:dc:
                    8f:5e:57:96:4a:95:82:b9:83:a0:dc:ae:b4:4c:59:
                    7e:17:99:ba:15:4f:66:6c:af:2a:fd:e6:74:d3:cb:
                    86:9b:db:61:19:76:a2:33:64:ab:5e:ac:10:19:e5:
                    95:69:6b:b0:ca:23:4a:d4:61:c5:d3:c5:d4:77:f2:
                    e5:90:78:e9:d6:58:e6:40:36:09:29:f3:33:62:f5:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:95:1C:15:57:4E:72:10:DE:F2:D6:94:74:20:87:DF:D4:11:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aa5b70a-69c8-3732-ae55-82b9fd5246d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:f9:18:69:04:da:c4:2a:cc:94:c8:12:78:9f:35:c2:5d:
         56:12:f0:48:4d:cf:12:f1:1b:b0:1f:23:9c:fb:e0:60:59:c1:
         73:6b:fd:ca:33:10:de:b0:dd:e2:7b:7a:b0:4e:5f:2c:60:2f:
         40:2f:3e:54:d5:39:1a:ff:d7:cc:3d:5d:00:bb:98:74:6a:a1:
         fb:57:b1:49:0d:53:08:42:ae:eb:58:8b:28:bb:ee:5b:b2:07:
         5b:d2:00:a8:56:e4:21:93:e5:2f:5c:61:5d:3b:0c:04:cd:ca:
         85:20:60:0a:40:84:32:00:00:4b:f8:a3:48:44:96:af:8b:c9:
         73:3e:2a:70:64:27:39:45:df:68:15:a4:ff:8e:fd:46:2f:26:
         c6:63:4c:02:34:89:43:0c:2d:54:8c:7c:5e:c2:db:bc:f0:4d:
         b1:4e:bb:60:ae:6c:5e:8d:99:59:52:fc:32:23:b9:91:6b:11:
         91:f7:aa:75:33:19:bb:13:4c:c7:c7:de:14:89:55:be:4c:d1:
         2a:a1:b9:4b:d9:e6:3c:00:b3:f4:e3:fd:0e:8e:6b:c6:85:43:
         9d:1f:be:92:e7:3e:fd:f0:36:b1:bc:80:c0:7a:f7:8d:93:37:
         0b:f0:3d:66:1b:68:11:1c:ce:aa:15:50:91:7f:80:35:fd:1a:
         0c:dc:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:36 2024 by rpki-client on console-ams.rpki-client.org