Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
File:                     888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json)
Hash identifier:          2IPXe+S9N3FgUGSGGfKly0KFGM3LB/prCi3EJeAR4T0=
Subject key identifier:   C2:90:7A:69:6F:C4:87:7E:F1:17:91:2F:15:5B:9C:1D:F6:F9:2F:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB78969FE4817D9ED9D280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.97.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:78:96:9f:e4:81:7d:9e:d9:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=4de840a6-adf7-4c1d-b26b-caa47f55b205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:32:1e:d5:76:71:33:58:77:95:fa:5b:f2:
                    28:b2:58:ed:65:2f:07:c4:4d:c4:34:70:3b:84:16:
                    50:21:89:fe:91:2f:64:f8:42:d0:a4:d0:75:8f:08:
                    d4:cd:1c:17:94:27:0f:81:21:92:b0:71:76:19:b7:
                    b9:a3:4b:4b:4d:f9:78:b4:7b:00:be:32:ee:c7:d8:
                    1a:f1:06:6d:20:55:c0:40:95:a0:ba:39:82:6f:06:
                    de:d6:63:77:42:e9:c0:05:e5:3d:b9:3e:4e:42:e2:
                    1b:34:71:d9:6b:0c:ba:e2:5a:f3:f5:24:e4:50:ca:
                    41:ac:ac:67:eb:91:33:03:20:73:c8:d9:31:f9:bb:
                    9b:36:2b:5d:a5:a3:13:1c:39:60:85:ac:29:97:d9:
                    06:ec:e1:79:74:ca:0a:db:2b:ae:4b:4d:a6:49:fa:
                    dd:9a:d9:4a:4a:16:9f:dd:fa:83:fd:27:dd:95:eb:
                    42:05:a6:5a:d6:1c:f4:71:f7:09:ea:9b:3d:99:1b:
                    38:97:d9:1c:82:7f:61:c6:f1:02:fb:73:4f:50:15:
                    96:cf:23:27:40:49:e1:30:ae:26:9c:bb:7c:67:49:
                    f8:68:eb:48:fc:a0:f8:34:f4:e8:4f:e7:49:4e:6c:
                    b5:83:c4:e9:b5:03:9f:52:7e:b3:4f:02:50:4f:68:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:7A:69:6F:C4:87:7E:F1:17:91:2F:15:5B:9C:1D:F6:F9:2F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:db:0f:ec:55:71:76:54:42:8b:d5:f9:9d:b5:7a:58:09:41:
         56:3f:2e:9e:63:1d:0c:a6:07:97:0c:eb:ec:d4:b3:0d:d9:45:
         8c:fc:67:10:22:18:5b:0e:0a:ad:30:e7:5e:54:69:5c:75:71:
         44:6f:99:b3:17:e7:78:2c:30:67:47:1a:7c:5c:4c:22:7d:2d:
         16:5b:e5:bb:12:22:d3:e2:e3:1f:95:74:2f:49:20:a2:ec:4a:
         b6:a6:2c:8a:97:e7:89:be:d1:04:ce:c9:48:1d:d2:69:14:60:
         41:ab:87:3a:2c:43:38:0b:03:14:46:25:9a:a1:41:ae:ef:a7:
         9c:9f:39:b7:52:0d:b9:4e:1c:d9:47:34:e3:3d:f2:43:1a:6c:
         0a:91:61:af:cc:a7:59:f7:2b:ec:ea:1b:df:a4:1d:7d:e0:b7:
         f1:65:73:34:50:6c:34:a1:0e:de:f5:4b:29:14:f2:0c:99:bf:
         53:90:8a:ea:15:6f:31:52:66:55:5d:ac:fd:c1:32:b6:ec:a4:
         4e:64:ee:94:75:6f:77:cf:28:ec:71:be:2f:c0:bc:d2:4b:81:
         e1:e0:16:95:8a:9c:c4:7e:ae:9f:e5:91:79:73:25:e5:e0:e7:
         fd:22:29:3b:07:87:b9:a7:af:d4:12:47:2d:96:aa:54:43:45:
         22:66:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:41 2024 by rpki-client on console-fra.rpki-client.org