Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9081c24b-380a-34e6-b789-c2a51b26260e.roa
File:                     9081c24b-380a-34e6-b789-c2a51b26260e.roa (raw, json)
Hash identifier:          OXONF0Kdztj7ikIuykcE+U8W1BrSrFpZtsurb6qye+M=
Subject key identifier:   EF:6A:BD:B9:F7:D6:8A:F2:CD:5C:A9:CA:25:A5:DA:21:44:91:51:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB7E53330DE00513BB6280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9081c24b-380a-34e6-b789-c2a51b26260e.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.103.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:7e:53:33:0d:e0:05:13:bb:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=65ccac7c-169a-4951-b194-1e8f71aee3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:60:34:93:63:ba:8f:bb:ce:20:81:87:e7:
                    e6:2b:7d:cc:69:1a:91:07:87:31:74:ac:a9:83:a9:
                    d1:28:db:a0:b4:2a:01:ed:7f:3f:49:79:a3:63:47:
                    90:ae:7c:33:a1:03:c4:05:cc:33:88:55:bc:93:b8:
                    72:70:e4:cd:44:4d:71:a8:5c:1f:ff:9c:00:54:02:
                    d5:f1:50:0e:cf:c8:fd:a5:07:95:a4:98:cf:ff:16:
                    dd:97:a5:41:0c:60:d6:48:b8:d4:13:ab:a0:12:ef:
                    ce:7e:5b:a5:aa:37:c4:95:21:2d:9a:9f:9e:50:9d:
                    cc:e4:38:e6:99:07:02:e9:97:c3:72:19:3d:bf:0c:
                    eb:a5:e0:5d:ba:87:b9:06:08:03:77:91:d8:7c:ba:
                    c1:d7:12:36:01:dc:4c:4c:43:92:b7:7b:15:72:bf:
                    cd:af:db:80:3d:6c:2f:76:0a:e1:a7:2b:74:82:22:
                    3e:33:43:df:e3:70:7a:1e:6a:6c:28:fd:b8:b1:16:
                    65:86:d6:ba:0a:b6:85:32:19:d5:ec:3f:da:22:fe:
                    eb:9e:01:f1:0b:21:b3:ec:f9:15:bc:56:5d:f5:03:
                    45:e0:e2:6e:ed:f8:ec:03:55:17:70:94:bb:5f:26:
                    6c:42:49:91:04:03:77:93:9f:77:43:3f:1d:13:b5:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:BD:B9:F7:D6:8A:F2:CD:5C:A9:CA:25:A5:DA:21:44:91:51:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9081c24b-380a-34e6-b789-c2a51b26260e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1d:2d:cb:84:71:77:dd:c0:bc:25:6e:8d:88:10:e1:24:50:
         be:a2:1e:46:7a:7c:1a:6e:b9:fe:a0:0d:e3:c7:aa:06:29:dc:
         75:21:ef:9e:aa:ba:39:a6:33:68:a1:ff:85:22:d9:aa:3d:df:
         c9:59:e5:d4:01:7a:32:c7:49:ab:ed:32:e6:0d:65:b9:37:21:
         43:d5:b8:ae:ff:bb:4a:97:83:ba:47:39:fa:b7:ec:fd:42:41:
         6a:09:0e:a7:f2:c8:70:a0:53:84:09:1f:5e:94:b8:0c:67:34:
         6e:9d:bf:9a:21:a6:a3:71:c3:45:72:40:d5:4b:0c:c9:b7:73:
         8e:b6:47:11:a1:e6:a5:d0:08:f6:4e:15:88:21:db:81:a4:76:
         e8:b5:12:9c:fe:94:8a:3f:7e:0d:53:c7:94:16:e2:c9:0d:76:
         62:b8:fd:12:63:ab:91:72:e0:d7:f0:6a:19:fe:f3:04:ef:39:
         48:57:d1:da:91:e7:f3:c4:11:67:8c:2e:68:2b:ba:cf:79:45:
         db:bf:e0:4f:e4:77:3f:53:6a:ac:60:0a:a6:9e:34:8d:0d:65:
         1c:2e:ef:03:0c:25:f7:98:77:6f:ed:b7:bf:6a:e9:98:11:ed:
         f6:64:26:bb:bb:86:67:66:97:58:05:c6:d1:fe:7c:7a:71:26:
         06:1d:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:42 2024 by rpki-client on console-fra.rpki-client.org