Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b9edfa1-5b74-3de5-95e9-63272c863941.roa
File:                     9b9edfa1-5b74-3de5-95e9-63272c863941.roa (raw, json)
Hash identifier:          4Ae3H8NJXPRvqoXLEFGkDIgdGbaU00l0orS1/O2V4R4=
Subject key identifier:   CB:71:0E:9B:69:EF:19:BD:C1:48:6D:1F:48:9C:47:A8:B5:2C:4A:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC11A2224BD61AD88B93C60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b9edfa1-5b74-3de5-95e9-63272c863941.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.102.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:1a:22:24:bd:61:ad:88:b9:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=dda317e3-a9fc-4ce0-97ae-fdfccb063417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:a5:9b:e1:05:03:dd:65:a6:0e:30:70:ca:
                    ca:92:0e:c8:51:6d:c2:c9:7b:f1:9d:41:16:f7:cf:
                    5b:f8:ae:0f:d8:95:1c:8e:dd:a6:46:e3:1d:d5:74:
                    e5:78:10:01:2b:8d:d2:ed:d2:ec:d9:cc:75:39:42:
                    e2:20:4d:3d:4b:4b:3e:db:a8:15:27:c7:bd:55:89:
                    e2:48:85:d8:28:28:ac:d3:01:79:14:ea:a1:bf:c4:
                    5a:b8:cb:91:97:2e:79:07:be:66:16:88:d8:d6:33:
                    84:ff:ed:6b:3e:e1:ff:ff:9d:c3:2f:aa:02:d6:90:
                    26:7b:4f:a6:eb:24:ff:01:1d:24:40:d5:d2:17:da:
                    9d:c3:4f:69:97:0e:6c:ea:f0:3c:06:08:c4:f3:80:
                    95:2e:bd:66:e3:df:45:45:70:f2:b5:17:f6:41:04:
                    24:c1:a2:aa:27:fb:05:c3:a7:a2:b3:51:02:37:20:
                    f2:94:a0:bd:71:dc:6f:08:80:5a:04:b5:65:0e:39:
                    cd:e9:7c:f0:b4:25:26:09:98:5d:20:c1:ad:77:e0:
                    69:d9:d4:c3:37:8e:b2:d9:86:e8:66:23:21:ca:a4:
                    c6:54:f3:5c:07:20:f4:0b:85:25:1b:0c:0f:27:a8:
                    4b:0c:cb:fe:48:54:78:58:b1:3c:2a:f3:e7:62:f7:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:0E:9B:69:EF:19:BD:C1:48:6D:1F:48:9C:47:A8:B5:2C:4A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b9edfa1-5b74-3de5-95e9-63272c863941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:1a:2b:e8:d4:5f:06:eb:4c:75:1c:ff:47:8c:7f:4d:11:
         79:d3:f8:26:87:48:d3:ec:46:ab:e0:30:9b:40:4a:24:c8:8c:
         7b:78:01:cf:23:c4:66:8e:5c:db:32:5b:0f:a9:09:0a:af:47:
         48:ec:52:31:1d:3c:6f:f4:8f:83:6e:da:21:33:38:96:e0:01:
         d9:d2:43:b9:cc:1c:0b:59:8c:ec:38:c5:91:80:ee:8b:14:18:
         88:ef:c8:99:e9:b6:44:81:20:da:f0:2e:06:43:0b:d0:9e:d8:
         d4:3f:31:a6:cc:f5:64:c0:e0:3b:32:ee:0e:eb:e8:d3:5d:8a:
         db:38:c7:91:3c:7d:c9:64:4f:d9:d7:3f:4d:e5:3f:a9:01:0f:
         05:b2:32:72:be:1d:d5:11:b7:09:70:6b:e0:ee:fd:50:2d:e3:
         36:30:92:cd:72:51:81:cd:a0:0d:dd:84:6c:8b:d9:9a:4c:d0:
         cf:68:ed:6f:15:61:db:8c:2c:18:04:3b:43:1f:71:f1:3b:35:
         e6:e7:ca:e3:4b:7a:ec:38:a7:5b:c3:9f:7b:58:02:be:c7:4b:
         b4:d9:de:75:09:13:40:83:a7:4f:6d:bf:80:dc:25:24:d5:94:
         d0:bd:35:6b:6c:ac:75:61:11:85:c6:d2:f2:b3:89:51:7f:d7:
         24:c6:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org