Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa
File:                     922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa (raw, json)
Hash identifier:          t+j1lhah2rNyTUa0XGwWHjssVQA4POo9VIHpoywWpEs=
Subject key identifier:   C2:D0:3D:ED:C6:A0:E7:43:4C:C0:97:96:98:9E:F7:A1:89:B2:BC:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB3469466BD5AA595AE2600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa
Signing time:             Fri 03 May 2024 01:10:53 +0000
ROA not before:           Fri 03 May 2024 01:10:53 +0000
ROA not after:            Thu 01 Aug 2024 01:10:53 +0000
asID:                     6167
IP address blocks:        72.103.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:46:94:66:bd:5a:a5:95:ae:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:53 2024 GMT
            Not After : Aug  1 01:10:53 2024 GMT
        Subject: CN=0334ef0b-8abb-400a-904e-af284ac8ce5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:06:8e:a5:64:a7:33:6c:7c:3c:64:2b:06:
                    c7:2f:78:d6:57:14:0b:f9:83:91:55:c1:5c:18:c8:
                    f2:47:4c:a9:4a:b2:ed:fd:7a:28:da:81:f5:4c:03:
                    ea:6f:69:20:2d:8c:45:48:be:dc:de:d6:2a:72:3c:
                    07:12:6d:96:7e:cf:e0:f7:2f:ac:35:0f:a7:1a:9c:
                    a2:94:35:ed:ba:64:cb:23:00:2e:f0:b7:8b:16:7f:
                    18:06:fc:f3:56:b5:59:c1:4c:61:b7:79:9f:e0:9e:
                    e6:88:c8:02:aa:31:3e:bd:a3:48:dc:43:00:5e:53:
                    43:3c:7a:29:0b:12:7c:87:98:d9:92:83:4a:63:57:
                    67:16:f6:ce:aa:c0:0f:8b:65:37:5f:41:1b:d5:c9:
                    76:ab:cd:79:96:5a:68:7b:a0:e7:a3:c3:04:71:21:
                    89:c8:d4:5c:7f:83:06:c3:ba:3d:52:0c:1c:e1:43:
                    c6:c4:2a:29:83:04:8b:c7:a2:f4:08:71:ed:59:74:
                    8a:1f:ae:60:eb:b6:49:a4:81:bd:42:99:d3:85:8f:
                    e4:33:0a:8d:fe:34:9c:e8:cb:3a:48:52:e5:ce:8d:
                    3d:4f:b3:fd:17:65:73:cc:5a:b5:64:9c:e5:66:17:
                    f1:80:c7:a9:a4:1e:55:24:ee:90:e4:89:84:48:e5:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D0:3D:ED:C6:A0:E7:43:4C:C0:97:96:98:9E:F7:A1:89:B2:BC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/922ccc3b-9f20-3c70-95d5-c6d6d0cf2d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:db:95:1d:9f:a8:6b:cb:9c:25:60:46:82:f0:ec:94:e6:1c:
         b9:c3:cb:78:e2:50:c2:91:ef:1d:99:97:3b:4d:30:97:5b:6d:
         47:75:bc:3c:6d:cb:bd:f5:66:06:54:34:55:8d:32:fb:b9:43:
         ba:5a:3e:37:38:75:37:24:e3:26:0b:ba:9b:07:20:3a:8a:b2:
         33:e5:10:11:45:8c:36:1c:f4:db:38:ee:3e:bd:80:b5:72:d6:
         93:d0:17:f2:b7:41:62:d5:db:3f:33:49:b4:92:2e:bf:8d:ff:
         4d:aa:4e:d4:05:83:5f:fd:d4:b3:e3:fd:87:5d:1e:39:4c:8c:
         f3:99:40:fd:25:09:20:bc:4b:54:a4:0b:19:3e:de:5f:a6:d8:
         ca:be:ad:6c:93:47:64:fe:c1:e6:6b:ce:b7:59:ec:de:e3:fb:
         59:a8:1b:3d:c3:52:be:c9:2a:5c:bd:86:d8:8c:98:12:0b:14:
         17:48:a4:f3:0d:85:8d:aa:d6:21:56:fc:32:64:66:a0:84:45:
         2a:8a:af:c5:2a:75:5d:c7:fb:02:f4:65:5a:85:3b:18:3d:13:
         1b:f9:a6:56:48:3f:d8:c8:37:62:2d:06:88:a0:59:fc:17:46:
         e9:58:3f:08:1a:5d:7c:75:2e:c8:b3:30:03:73:36:53:25:5e:
         ae:80:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:38 2024 by rpki-client on console-fra.rpki-client.org