Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/817330ab-2739-3705-a7e3-54e07be99538.roa
File:                     817330ab-2739-3705-a7e3-54e07be99538.roa (raw, json)
Hash identifier:          KO0jv0dhtkJ1TInWSQaqrWD08oZm+KvWOlnsyB1Q+4g=
Subject key identifier:   7F:A3:81:FB:91:0B:25:48:4F:D5:82:FF:00:66:8D:7A:4B:1A:41:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC118918C5297ED356CDF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/817330ab-2739-3705-a7e3-54e07be99538.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:18:91:8c:52:97:ed:35:6c:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=a96c1cc4-dae2-46c2-8c4b-ac01e4cd84ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:db:57:2b:ed:e5:01:2b:e6:7c:c2:56:71:
                    b1:7d:94:77:c6:ed:57:55:f2:9f:1d:65:bd:d0:6a:
                    f0:a5:29:00:5e:9e:d8:e0:ea:24:c0:82:7c:59:17:
                    e4:ed:9c:38:55:5e:6d:bf:c4:b9:b5:eb:a6:4b:6b:
                    ac:fe:8f:db:e8:85:3a:85:53:48:43:9a:1a:5c:3f:
                    9d:30:44:ee:f8:75:45:5d:a7:dd:27:7b:56:29:ad:
                    e1:43:89:7f:c1:c7:92:0e:a6:2f:94:22:f7:b8:b5:
                    71:d9:65:61:b7:ba:68:52:92:75:05:2b:67:f4:f2:
                    76:d0:38:56:3e:df:45:f3:f5:5b:73:27:9d:e0:db:
                    31:55:84:a9:9b:42:d3:99:b6:75:b2:03:16:63:d1:
                    be:b3:91:4a:48:5a:4f:26:55:06:0f:85:bc:2a:5f:
                    83:87:40:27:37:f7:92:8d:0d:b2:19:39:47:d2:89:
                    65:7a:65:77:2f:bd:68:75:15:65:fc:31:8c:7c:f3:
                    1d:64:42:37:23:a1:46:e2:cc:b9:36:f1:0a:56:4f:
                    2e:cc:78:40:9b:17:84:0a:a5:7a:78:4c:07:99:33:
                    e1:28:65:8b:8e:e7:8b:6f:73:28:2b:23:b8:cc:45:
                    36:c5:f1:b9:1b:9e:4a:e1:0b:9c:1a:d4:63:49:e0:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A3:81:FB:91:0B:25:48:4F:D5:82:FF:00:66:8D:7A:4B:1A:41:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/817330ab-2739-3705-a7e3-54e07be99538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:87:ce:99:ea:69:fe:e5:a5:d4:af:d8:d1:f5:a7:2f:d9:
         4f:f0:41:fe:a7:31:e3:b3:fa:aa:63:ae:ac:68:5b:42:e2:97:
         f2:10:f4:60:1c:6f:2d:7a:9b:2c:97:77:b1:07:0a:7d:ad:85:
         f1:0d:c4:04:f6:2c:54:b1:78:7d:f8:49:9f:b8:39:92:d7:0c:
         5d:0d:3d:37:fd:4e:98:2e:aa:36:c6:91:d9:47:fc:95:2c:e2:
         8a:47:10:fc:1f:03:51:6d:bb:b1:40:ca:a3:50:4d:32:44:2d:
         f6:cc:fb:32:eb:64:c4:c0:6f:d8:d6:f8:92:9f:93:18:98:97:
         3c:7c:38:e0:4a:07:e6:cb:ee:9c:2b:bc:20:fe:00:66:05:9e:
         af:d3:59:09:17:1d:4b:1a:fc:98:50:20:1c:e9:2e:a6:58:a2:
         51:ff:25:69:e5:fe:00:5a:d3:e4:51:f4:5c:24:e2:0f:20:7a:
         be:fc:0b:9e:7a:4f:b4:d2:3e:bf:a7:06:9f:ce:13:49:9c:51:
         a6:c0:c7:2a:6a:92:a3:56:05:f9:5f:1c:ee:49:a8:db:5f:65:
         0a:96:7c:5a:3f:cf:a3:32:bb:da:03:82:36:fd:00:1d:7f:92:
         f3:f7:9c:3d:ac:3a:67:46:00:69:2e:b6:32:32:df:0f:2f:db:
         3c:52:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:36 2024 by rpki-client on console-ams.rpki-client.org