Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab317ac5-2bbe-3754-9684-dd30545773cb.roa
File:                     ab317ac5-2bbe-3754-9684-dd30545773cb.roa (raw, json)
Hash identifier:          0Iu6exPYRqjl+teVTAATNED3nqI1B/8Mgr62ORkj6Tc=
Subject key identifier:   E8:3D:CE:EC:EB:7E:42:41:C4:A0:1E:B2:29:9A:5D:39:AF:93:8D:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB318EDC624710BF81E1200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab317ac5-2bbe-3754-9684-dd30545773cb.roa
Signing time:             Fri 03 May 2024 01:10:31 +0000
ROA not before:           Fri 03 May 2024 01:10:31 +0000
ROA not after:            Thu 01 Aug 2024 01:10:31 +0000
asID:                     6167
IP address blocks:        72.102.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:18:ed:c6:24:71:0b:f8:1e:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:10:31 2024 GMT
            Not After : Aug  1 01:10:31 2024 GMT
        Subject: CN=8fe2ce20-8f19-47c1-8a50-32ee360e7ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:ff:70:1a:cd:91:fe:3c:ca:12:d2:5a:5f:
                    c5:5b:e6:7d:69:18:73:03:36:bf:66:11:43:f5:58:
                    a2:17:aa:83:96:12:ec:5d:24:0c:ce:fb:db:0b:1a:
                    57:ce:e9:00:60:2d:27:35:02:82:2f:ad:88:a3:54:
                    a9:e6:09:7c:0c:77:db:37:27:0e:8e:08:69:d7:7f:
                    7b:ea:47:5f:6b:2f:dd:9f:d4:39:a4:76:15:1d:26:
                    f4:22:fe:43:d0:6d:ce:4f:84:ca:60:e2:fa:a6:28:
                    2f:61:50:7a:ef:1d:7a:77:ba:9e:4c:11:53:a4:27:
                    56:61:4d:d7:78:ea:3b:15:11:c2:8c:8a:16:a8:97:
                    7d:5f:06:99:8b:f7:22:e5:c1:ee:ac:e2:ce:e6:6e:
                    65:67:95:a7:a7:dc:23:28:c8:17:56:52:bd:d0:47:
                    32:f7:8c:aa:71:2b:3b:7a:ec:cd:0e:48:e2:48:0b:
                    28:d1:b5:50:06:b2:4f:94:9b:c1:ea:3a:be:69:6b:
                    1d:67:ef:96:7a:b2:b7:5a:da:de:1c:d0:08:3f:c8:
                    ee:9c:a5:7a:61:02:39:73:c3:4c:0c:43:6c:7c:7a:
                    2e:00:8c:cf:62:6f:e7:65:a9:f9:5a:28:33:6e:a0:
                    93:05:ae:7f:e9:a2:32:cc:c4:c0:1a:12:bc:1a:ac:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3D:CE:EC:EB:7E:42:41:C4:A0:1E:B2:29:9A:5D:39:AF:93:8D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ab317ac5-2bbe-3754-9684-dd30545773cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:73:27:50:c8:7c:73:de:12:e8:80:dc:2a:02:ee:94:61:
         fc:6f:70:7c:e4:dd:ea:39:d0:5f:95:e9:76:ef:12:f4:62:cd:
         3a:7c:b4:b1:ae:44:2b:19:fa:37:16:31:35:a3:de:ea:8f:f9:
         e3:5d:d2:76:d3:40:28:9b:3b:cc:99:28:0b:c6:eb:80:cd:39:
         1c:08:55:df:10:ff:c7:61:f9:6e:da:29:fe:f3:3d:55:7a:2b:
         05:a8:1b:58:72:69:2e:fa:5e:2e:d8:54:2d:a5:2d:59:5e:a8:
         03:3f:e8:8b:bf:f5:68:ba:1b:2b:67:d7:f3:83:67:15:58:23:
         e1:12:e2:62:1f:91:49:16:1d:2d:8a:83:6f:41:bd:13:ff:43:
         63:33:8a:5b:ec:17:ac:9a:5b:87:17:95:d4:ab:a4:41:0e:f3:
         68:47:4e:df:c0:8b:20:20:a6:8d:61:02:6b:06:6a:84:49:f0:
         54:dd:23:60:9b:45:50:21:a6:79:fd:79:95:17:fe:cc:6e:74:
         5c:19:b5:d8:1e:ef:95:9e:62:47:1d:8b:6f:fb:e9:52:b4:a3:
         9e:cb:e0:c2:ea:34:22:01:ce:dd:57:72:5b:4d:51:1c:47:11:
         da:11:33:32:03:29:85:25:62:6d:c9:25:b7:b5:9b:12:af:76:
         4e:21:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:40 2024 by rpki-client on console-fra.rpki-client.org