Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bf74eed-be19-377b-82cf-009b2e125334.roa
File:                     7bf74eed-be19-377b-82cf-009b2e125334.roa (raw, json)
Hash identifier:          dRK3zRz3+1YWLGtB7g57j5kjgcJteSujhl20f493lPY=
Subject key identifier:   21:FC:F9:61:79:60:88:F0:E3:3D:F7:25:0A:55:C5:B6:E5:22:D2:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC11764B11C8FDA138B2C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bf74eed-be19-377b-82cf-009b2e125334.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:17:64:b1:1c:8f:da:13:8b:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=f645dcc5-a41a-4591-880a-f6b320a7f7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:5a:2c:31:40:6c:09:93:73:be:cf:52:d7:
                    02:9b:5c:d4:bf:0f:47:15:8e:66:0e:4d:d2:58:42:
                    5a:20:c9:f1:02:06:7b:15:5b:97:d3:31:65:34:39:
                    6b:fd:13:09:c2:ca:18:b6:ca:81:42:41:95:b1:83:
                    e3:d8:8b:00:8f:54:0d:68:0a:f2:8e:8c:7e:ae:b9:
                    17:0f:18:4f:6f:5f:af:c2:88:84:01:3d:33:04:7a:
                    15:0e:26:6a:17:a2:e4:6d:dc:05:31:38:96:68:14:
                    ae:36:c2:ec:c3:14:df:71:54:be:8b:7b:54:9d:46:
                    0d:b5:ad:a1:fa:6f:87:15:86:7d:f1:01:f9:97:a1:
                    4c:2b:30:7e:93:22:b9:79:a8:d2:df:5c:b0:ae:f3:
                    2c:ca:bf:05:59:9b:70:40:a5:96:94:4a:62:c3:b2:
                    49:ea:c7:1e:f5:4b:33:aa:3a:30:28:96:9c:9e:6e:
                    42:c8:cc:23:d5:35:ee:8b:6c:ec:82:23:52:45:10:
                    aa:0b:08:4d:96:a4:57:3f:f1:2e:7d:c1:05:94:ab:
                    7f:6c:50:30:bf:b4:92:64:73:d2:0c:fb:4f:ed:80:
                    90:a7:cd:98:25:e1:6e:91:c5:63:57:99:3d:b0:96:
                    f1:94:9e:d0:53:95:a2:38:7f:8a:c9:be:44:f9:5c:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:F9:61:79:60:88:F0:E3:3D:F7:25:0A:55:C5:B6:E5:22:D2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bf74eed-be19-377b-82cf-009b2e125334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:a1:eb:29:51:85:39:d3:53:03:74:ec:d8:c5:8d:5b:3a:
         0d:ea:6b:99:4d:25:e4:bc:2b:d3:4b:8f:11:c7:04:60:32:35:
         7d:0f:89:4e:8a:ed:4d:ab:76:f3:ae:07:7e:51:71:37:d6:63:
         f3:d0:9e:3d:86:8a:da:dc:0c:f3:34:dd:07:80:76:1a:29:0c:
         68:e7:fb:8c:a8:03:1e:32:96:15:ef:3e:62:fb:fc:00:97:46:
         63:99:89:1d:1f:be:eb:d4:a2:07:2c:d1:fd:80:24:bc:36:c6:
         8b:48:f5:99:78:08:a4:76:82:94:18:d1:bc:7d:95:fe:af:12:
         f8:0a:f8:ef:af:d3:62:bb:32:af:05:8f:fe:48:de:95:e5:9e:
         b5:61:59:ca:a8:ea:5a:9a:c7:3a:36:12:4b:8b:ab:1e:aa:0f:
         d5:65:c2:b6:75:8b:b9:9a:16:6a:b1:ec:59:9b:1a:fb:f0:3d:
         76:87:0c:c1:b4:20:58:cd:bc:2c:ee:d4:a1:db:6a:55:e2:c5:
         14:5b:fb:7e:3f:2c:ab:a6:e9:63:f3:27:d6:22:8e:ec:7a:67:
         e5:c4:4b:a5:db:c6:04:97:b2:35:e1:c2:f8:7c:7f:7b:cf:3a:
         90:59:2d:cf:05:a2:0c:72:b7:a3:e1:2d:22:8e:34:cf:84:ca:
         a3:f1:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:39 2024 by rpki-client on console-fra.rpki-client.org