Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa
File:                     a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa (raw, json)
Hash identifier:          Fva94YRNdknYfYTBsEIgO3fgphdLjp+VUWXM9bDckSk=
Subject key identifier:   0C:B5:B1:E2:81:A6:D1:64:A2:1B:CC:2A:1C:0A:8D:89:F1:3D:E7:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A2D12B2349DDFDD646C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa
Signing time:             Fri 19 Apr 2024 01:03:47 +0000
ROA not before:           Fri 19 Apr 2024 01:03:47 +0000
ROA not after:            Thu 18 Jul 2024 01:03:47 +0000
asID:                     6167
IP address blocks:        72.96.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:2d:12:b2:34:9d:df:dd:64:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:03:47 2024 GMT
            Not After : Jul 18 01:03:47 2024 GMT
        Subject: CN=5e315017-1af6-4939-a77f-2e922b14ee34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:90:19:09:a4:8d:a4:06:bf:44:e1:15:6b:
                    1a:79:dc:a1:d4:ab:d5:37:40:bd:00:d2:f9:a0:99:
                    0e:b1:b8:22:42:39:d1:90:ef:cd:fd:21:76:06:18:
                    cd:e0:17:ba:a5:9f:bd:4d:24:ac:c5:02:d1:a3:b0:
                    d2:41:40:4a:67:c2:51:41:56:15:c9:6c:0c:85:f9:
                    87:f6:49:6d:11:2b:7f:78:cf:d6:33:d5:b2:97:7e:
                    ab:70:68:66:17:01:89:1f:18:74:eb:c4:a9:19:5d:
                    fe:aa:ef:49:d7:57:39:35:a5:d2:ed:18:fd:f2:dd:
                    17:94:a5:ba:e4:45:8a:b0:53:8c:77:31:6a:68:9a:
                    99:90:05:06:f8:1d:f8:8d:6c:cc:33:1d:f9:82:9c:
                    df:5f:87:25:8c:f8:6f:4a:7a:bb:df:4a:11:9a:77:
                    99:10:c6:41:89:3e:cb:b4:d0:a0:32:25:56:53:b2:
                    a6:9b:fa:57:c0:1d:ab:46:14:d8:87:19:20:22:38:
                    cf:36:f8:e0:20:8b:5e:87:5f:2d:b3:68:da:2a:21:
                    64:e3:c6:a4:45:7f:3e:f1:98:fd:a6:9c:29:a9:a1:
                    99:d2:16:6b:a3:f2:e3:ff:81:0c:52:32:8a:ec:84:
                    81:15:9b:e3:bc:89:74:a4:0e:ca:8a:b6:f8:e0:50:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B5:B1:E2:81:A6:D1:64:A2:1B:CC:2A:1C:0A:8D:89:F1:3D:E7:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a98bbc45-31c8-3046-bdc8-f33d7dc7b8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:d3:d4:d0:a3:f5:3f:50:ca:66:68:e0:67:1c:05:f6:67:
         45:00:5f:cb:b9:63:0d:7f:22:d3:cb:d2:cd:e0:7d:1c:1d:17:
         03:64:e1:90:2c:1d:41:21:e4:f2:98:a7:38:cb:15:f5:f8:c0:
         3c:d5:16:27:cd:a5:4c:84:7e:4f:ee:7c:a8:7a:c7:f1:af:ef:
         9f:a2:a4:b3:81:35:87:ac:05:42:38:48:7a:81:fb:99:97:83:
         03:be:22:5c:6e:fc:6e:47:b3:44:98:b5:b5:6a:69:55:c2:cd:
         81:ca:ed:d0:43:f5:a1:6a:46:0f:ad:80:99:cb:0f:41:e1:1d:
         0b:3c:24:81:4d:5c:c8:65:d1:3a:40:b9:d4:42:f5:c9:39:59:
         00:0b:30:51:fe:2b:70:02:e8:05:b8:f3:38:0f:d6:58:20:b7:
         4a:75:77:ee:af:c7:57:f7:bf:85:56:80:41:c1:c3:52:e0:58:
         58:cf:a4:7f:94:bf:8c:2f:a3:12:49:e1:9f:b1:f0:03:49:ac:
         2d:4d:fc:05:01:4f:64:f8:7a:68:01:f8:4d:d2:db:12:c8:67:
         44:88:a0:b4:35:e5:e7:85:cf:2a:d9:b5:1c:64:04:0e:cf:d0:
         a0:ba:43:0f:72:6e:e5:d7:4b:a4:a5:f1:0b:58:a9:9c:a6:2c:
         65:bb:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:17:23 2024 by rpki-client on console-ams.rpki-client.org