Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3645431-ffd8-3567-b447-689d65efd01d.roa
File:                     b3645431-ffd8-3567-b447-689d65efd01d.roa (raw, json)
Hash identifier:          I5KnM7jye6uMQLi3H/h1Zp+9bTAngGAX9DTVi4eCXME=
Subject key identifier:   94:1C:4F:99:8D:66:9D:51:16:39:9C:66:6A:53:33:A8:C1:DB:C8:EF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B93A94CC406B6A4A28368
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3645431-ffd8-3567-b447-689d65efd01d.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        72.94.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:93:a9:4c:c4:06:b6:a4:a2:83:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=eb56e951-c011-45e8-9152-6893658d0727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:f1:f4:39:c1:36:0d:14:e9:c1:9e:cb:c5:
                    3d:0b:36:c6:ac:21:e6:fc:94:c9:5e:82:66:fd:95:
                    a8:f2:cc:a0:31:fb:81:7e:c1:a7:58:28:da:6b:7c:
                    98:97:c3:b0:05:2e:5c:45:de:01:9c:67:8e:64:2d:
                    25:cc:1c:89:de:a5:bf:d2:38:b8:6d:4e:3c:26:d3:
                    8d:f9:6d:ce:0a:1c:59:03:7c:6d:d7:4f:16:77:63:
                    72:a4:8d:eb:38:47:28:bb:73:20:a4:69:60:5e:c7:
                    ee:09:86:70:3f:93:13:d5:39:cc:59:72:0c:59:45:
                    a1:63:6f:a7:1f:af:d4:82:6f:8b:4e:cb:cd:76:d3:
                    96:3b:d3:d9:cb:da:29:14:82:5d:b0:25:b9:bf:39:
                    8e:7e:51:85:60:22:5e:54:75:47:4f:b0:5a:73:90:
                    c9:25:70:c6:5e:15:a9:4b:e2:3a:ec:13:67:9c:52:
                    24:72:78:c6:e2:5b:d4:3d:05:bd:e8:10:2b:b0:d1:
                    2b:d1:1a:64:51:73:e1:69:04:c0:b5:9f:bb:ce:5b:
                    22:d0:20:39:44:0a:bf:ed:70:0a:6d:e9:79:7a:83:
                    c4:c5:c8:19:62:74:50:4b:b6:91:d1:7f:df:3a:d2:
                    9d:ab:00:9a:06:3b:d8:18:ca:bd:a1:cd:f6:08:88:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:4F:99:8D:66:9D:51:16:39:9C:66:6A:53:33:A8:C1:DB:C8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3645431-ffd8-3567-b447-689d65efd01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cf:46:c5:e9:75:e7:e7:53:36:a5:2e:75:ec:7b:c6:a1:6a:
         da:a4:82:86:f1:62:cc:bd:d3:a7:72:c9:2a:56:c2:7d:b4:5c:
         24:de:7b:e6:cc:c4:f5:7b:0e:ed:8b:b5:03:57:c4:ce:d5:9c:
         b9:4a:09:a1:0e:bd:3f:0a:fc:4f:e6:8d:23:e2:0c:4b:d7:1d:
         63:9a:02:04:e5:db:fb:09:01:45:06:07:af:7a:0b:cf:c8:f2:
         9e:2e:d3:fa:38:2e:72:17:00:31:52:86:f9:bd:78:e6:9f:b1:
         96:fe:39:fe:8a:f4:8d:21:f9:1a:96:7f:25:48:fb:49:7c:b2:
         c2:8f:d3:5c:fc:fe:25:ee:b2:3b:6b:19:57:af:78:da:f9:5e:
         ec:b3:14:9a:6f:e0:69:11:87:22:59:bb:d0:63:d4:5e:96:aa:
         c3:47:b9:c3:ce:17:ab:12:a2:10:0b:79:ee:60:e2:4c:a7:41:
         15:fe:e6:d7:97:46:8a:f2:34:a0:8c:cc:51:fd:85:a1:bc:c1:
         e3:7e:07:0d:2f:06:46:f7:e6:62:4e:6f:d1:63:13:dd:ac:86:
         af:c4:76:ee:0a:e3:bc:c3:8d:64:aa:6b:03:8f:6a:7b:17:90:
         21:d3:d6:13:f4:c7:0b:d1:7e:59:50:ef:a5:e6:d4:1d:0b:5c:
         3e:89:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:49 2024 by rpki-client on console-fra.rpki-client.org