Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e8467be-7894-3034-8cd4-725b6e057f30.roa
File:                     9e8467be-7894-3034-8cd4-725b6e057f30.roa (raw, json)
Hash identifier:          7HjP0M93PXC3PhxLN4XKG8xapDMUc5ZfFLsTB0UHMxA=
Subject key identifier:   5C:7F:B7:1B:DB:C5:7C:2C:26:0D:95:57:CE:30:51:32:9F:E5:4F:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B8F50E9D52E7F34E9E7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e8467be-7894-3034-8cd4-725b6e057f30.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        72.90.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:8f:50:e9:d5:2e:7f:34:e9:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=71b91027-1cdb-4659-861b-2f4b5680fbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:89:43:42:02:3a:65:a7:d6:de:bc:32:1b:
                    47:77:45:ed:51:53:ef:76:9a:61:ee:8b:6c:02:49:
                    f8:af:54:2e:91:1c:88:0f:92:7c:3c:6a:e7:06:96:
                    5d:02:26:42:27:d4:a7:9b:0f:eb:9b:d9:e5:5f:4a:
                    05:2a:96:c2:c4:54:8b:47:a9:fb:46:ed:14:b5:ae:
                    29:e9:5c:60:53:1b:a5:2b:59:21:b7:e5:2a:36:61:
                    f3:95:d0:91:ba:c8:69:63:0b:1e:6b:62:cd:0d:f4:
                    2c:10:9b:09:9e:6d:94:ac:23:b6:f3:1e:70:07:21:
                    2d:f9:f0:a9:23:ea:1f:49:42:59:3a:73:98:ab:15:
                    e2:44:cd:43:c8:96:e9:5d:b5:71:18:a6:1c:3c:e6:
                    94:21:99:d6:b1:d2:6c:99:1f:52:36:44:6e:42:bf:
                    9b:0f:d6:00:d3:7d:56:da:56:f6:7f:53:62:95:53:
                    ee:78:79:b3:9b:59:fa:b2:5e:10:fd:aa:6f:c2:9e:
                    cd:d1:30:fc:2f:86:6c:dc:2e:a7:49:b0:8c:fe:46:
                    28:a7:88:f8:fb:57:73:32:0e:4f:49:42:60:7a:d2:
                    f8:c0:49:4d:70:f1:ff:3c:92:c2:b4:7a:ca:3e:9f:
                    6e:9d:08:d4:fb:ef:94:e3:56:a8:f7:1a:96:41:ab:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:B7:1B:DB:C5:7C:2C:26:0D:95:57:CE:30:51:32:9F:E5:4F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e8467be-7894-3034-8cd4-725b6e057f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.90.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:55:fd:a4:3b:b8:e5:43:e4:a2:14:42:8a:f4:ec:ee:44:82:
         07:80:82:d8:95:ce:d6:ed:ac:07:07:08:ee:d5:df:86:e8:c2:
         a7:80:55:15:65:5d:7b:e5:e0:f0:a6:ab:9a:b1:d5:91:db:b6:
         2e:c3:20:65:d1:1b:46:2d:9e:48:76:a1:a3:e9:e2:ec:fb:bf:
         ef:46:73:9c:40:97:56:da:37:70:b5:a7:52:3b:11:4f:48:62:
         23:90:c0:53:bb:1f:7f:11:0a:23:2d:67:e4:94:2f:a0:3f:a0:
         5c:71:50:12:29:c8:02:3e:ff:87:2a:f3:96:d5:52:7b:f7:9f:
         ee:51:71:a4:d2:b2:03:c6:62:75:d2:be:11:1d:fd:cd:bc:a1:
         a4:5b:5f:f4:00:21:68:3d:c4:f5:d7:5f:af:65:b9:cb:26:08:
         8a:92:c4:64:fb:54:c7:8d:e6:7e:ae:90:0f:05:dd:13:ec:39:
         91:88:3b:90:2b:bf:08:a6:c4:9c:19:78:57:31:9b:d2:4a:d1:
         36:0a:81:5f:83:77:52:c0:c8:11:b6:1d:b5:51:f7:36:f7:5c:
         81:88:d2:c8:84:2a:cc:14:21:30:9f:07:94:00:a9:2b:e2:c6:
         ce:2f:1f:1a:c6:7e:57:b5:8d:7a:62:5e:b8:2b:2b:df:5a:e4:
         03:b6:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:45 2024 by rpki-client on console-fra.rpki-client.org