Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa
File:                     95b587f1-4d49-3edc-9113-693a27695af4.roa (raw, json)
Hash identifier:          ghyftGAfItbLEEQsW21O6lLmLQWDUQlCh+p6KbNA3Sk=
Subject key identifier:   EF:5E:4D:E7:9B:D7:1B:D1:A3:AC:78:C3:36:B1:98:90:1F:35:B2:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979AB7DC90627B066CA54D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa
Signing time:             Fri 19 Apr 2024 01:04:52 +0000
ROA not before:           Fri 19 Apr 2024 01:04:52 +0000
ROA not after:            Thu 18 Jul 2024 01:04:52 +0000
asID:                     6167
IP address blocks:        72.106.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:b7:dc:90:62:7b:06:6c:a5:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:04:52 2024 GMT
            Not After : Jul 18 01:04:52 2024 GMT
        Subject: CN=d0531df5-c4ea-4a80-9720-8f095b30df0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:6f:aa:62:27:65:fb:4c:ea:d4:26:b4:d7:
                    bc:34:da:6b:32:63:4f:b8:61:cc:02:87:ad:cb:3f:
                    74:f1:0e:bf:28:c9:1f:0c:00:8f:cb:7a:1c:14:ee:
                    09:22:dd:fc:9a:64:de:f9:84:00:35:1c:71:3e:8b:
                    1c:41:9d:85:35:7b:1b:54:fa:48:9d:96:95:d7:73:
                    f0:3d:d8:3d:36:df:38:1d:49:17:ac:ae:bd:a3:19:
                    37:c7:9d:d4:b5:d6:75:4e:72:5f:9a:cc:2c:0c:24:
                    56:be:68:65:27:2e:98:ef:96:9c:a5:91:d7:70:3b:
                    96:ba:7e:be:9a:35:a2:eb:8f:38:59:15:2d:d1:c7:
                    06:2c:09:e7:34:57:8b:44:be:98:e3:77:06:f3:fb:
                    ce:b4:f5:c8:f0:08:95:b2:8c:65:64:37:a7:1c:71:
                    68:26:03:6c:3a:67:ef:7c:d8:1d:a7:72:f7:b9:86:
                    3f:b9:ad:c2:14:96:58:95:65:76:93:66:a3:b0:09:
                    f5:38:49:9b:c3:39:40:5d:70:f7:11:a0:13:ef:2d:
                    e3:6e:19:6e:c5:f1:4b:ab:90:63:0e:e0:32:0a:cc:
                    bf:70:db:e3:1d:c1:8f:01:ed:8b:c7:00:9c:63:b8:
                    36:ab:1f:50:f1:84:81:81:c5:7f:cd:20:62:a2:2e:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:4D:E7:9B:D7:1B:D1:A3:AC:78:C3:36:B1:98:90:1F:35:B2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:83:e5:8c:11:cd:57:53:58:95:40:42:61:4e:d8:6f:49:5c:
         9f:3c:e2:c9:9d:d0:18:d6:97:08:80:e0:e3:16:88:ed:30:79:
         f2:28:ef:a2:f7:50:ce:29:58:17:9b:8f:54:ae:ac:ed:47:83:
         95:66:80:e9:5a:fa:13:e7:95:6b:f4:41:93:66:07:dc:82:0e:
         0f:eb:1b:e4:65:46:51:31:ec:a0:06:7a:6e:a2:18:81:a6:61:
         08:35:72:52:d8:ed:ef:12:cd:ce:d2:7f:c7:1f:2c:fd:2e:fb:
         28:87:4e:60:88:f2:dc:5e:04:6c:1f:56:c3:74:96:ca:59:ac:
         36:5a:c7:96:f4:16:fc:db:bf:1c:49:1e:e7:16:ca:86:a6:14:
         f5:fb:32:5d:ed:15:fb:e1:65:e3:5e:e1:b9:c6:f5:4d:06:ef:
         bc:b6:6d:ac:a4:37:eb:09:53:a0:db:36:04:68:fb:7d:21:9f:
         51:bd:06:40:3a:06:d1:48:e1:21:7b:c9:dd:d6:11:08:32:da:
         bc:01:a1:aa:eb:a6:89:c2:ff:52:5b:07:c9:fd:f0:ac:19:ad:
         b1:f1:a4:5c:c0:ac:1c:f6:90:df:84:75:c5:9a:a8:46:6e:60:
         bb:e7:9d:40:53:6f:36:7a:a0:58:da:bc:cc:d6:0e:01:97:3c:
         94:f8:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:54:11 2024 by rpki-client on console-fra.rpki-client.org