Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbc4fdb3-7fdb-3b76-9da1-3fbb9d89353b.roa
File:                     bbc4fdb3-7fdb-3b76-9da1-3fbb9d89353b.roa (raw, json)
Hash identifier:          QLdWX0DGsw348Mh+HQgFn7Qq1fmmNGio4I2YZgGhgqU=
Subject key identifier:   55:12:66:C0:8E:DE:35:3A:00:B3:BE:8E:8A:69:B9:01:B7:2B:6E:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC117EA952298A678EFCFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbc4fdb3-7fdb-3b76-9da1-3fbb9d89353b.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:17:ea:95:22:98:a6:78:ef:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=fec9cd88-25d9-4685-b348-14096b768d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:6a:9f:0e:ab:20:42:59:a2:56:e1:3d:4b:
                    da:55:ba:f5:61:63:b6:1c:50:7c:33:ab:6f:91:2e:
                    e6:62:d7:66:0f:f7:96:4d:d5:85:90:ec:de:b4:ad:
                    73:e6:7a:4b:46:9b:2f:0e:f8:42:43:16:59:80:65:
                    bc:4f:30:04:f4:1e:a7:68:7d:3f:fb:9b:0a:b7:53:
                    29:bc:72:10:08:e1:f1:ac:c2:e7:3d:cc:7a:1b:5d:
                    2b:55:e9:e5:cb:6a:92:55:b5:85:9b:6c:fc:d4:3d:
                    17:e9:5e:f8:4e:a7:16:47:9d:ea:48:4b:77:26:8e:
                    a7:0d:c9:bc:28:93:00:eb:db:da:9b:b9:2d:11:8e:
                    ea:54:5f:a1:36:e9:82:91:b6:97:8c:0e:66:3a:54:
                    97:fa:ee:a5:8c:f5:24:4b:48:64:00:0a:ef:1c:fa:
                    55:a1:e0:94:f0:86:af:c0:22:b8:c4:3a:8b:2d:ce:
                    c1:ef:72:36:39:8e:42:25:f0:8c:2d:bc:c3:05:8e:
                    0b:19:09:3d:51:bd:d5:80:4f:c6:b1:1a:25:02:ab:
                    bb:7a:8e:d4:09:9a:dc:79:cf:1f:22:9a:ba:fd:b3:
                    e9:6c:41:52:78:11:85:1a:21:ec:11:83:b3:4c:32:
                    44:01:b7:3b:b1:7f:d5:1f:43:db:fc:2a:96:48:de:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:66:C0:8E:DE:35:3A:00:B3:BE:8E:8A:69:B9:01:B7:2B:6E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbc4fdb3-7fdb-3b76-9da1-3fbb9d89353b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:22:19:03:75:92:f6:b7:fc:a1:4e:0f:b5:03:17:6d:65:40:
         3c:fd:03:b2:c3:dd:76:00:da:f1:c2:f8:16:68:79:01:c4:78:
         de:0e:bc:c5:0e:c2:ad:b3:1f:a1:de:c0:aa:61:6f:df:6a:bb:
         b7:ff:dd:55:b7:9f:b7:2f:4f:b6:b4:55:12:0f:16:5e:5c:d4:
         97:fc:b7:82:92:72:9d:ad:fe:5f:3b:1e:f8:11:61:1f:c5:ec:
         8a:00:af:1d:09:e0:62:48:ac:e9:ca:89:de:ed:dc:7f:cc:75:
         65:c5:62:c2:47:ab:1a:06:2d:38:00:e6:73:12:bd:89:26:6b:
         53:bb:3b:0f:9e:fb:65:18:90:c5:b0:ba:db:a5:5a:90:73:68:
         ca:6f:32:2b:ba:1a:e2:42:cb:d4:91:7f:40:d4:de:23:4e:e8:
         30:bd:a0:05:e3:53:cd:da:d6:be:dd:32:a0:3f:ec:ca:d8:63:
         22:9e:26:00:d5:1d:e3:92:52:aa:86:2c:be:c8:6d:bd:1f:9c:
         e9:90:db:32:9b:9a:06:20:63:2b:5a:d5:e6:09:9a:26:fc:b2:
         f1:90:53:af:e0:7c:5e:e6:6f:6c:75:20:01:94:12:90:15:07:
         0f:6a:2b:4e:46:48:f6:dd:7f:fe:cb:fa:fa:bb:a6:ba:71:f9:
         c0:04:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:51 2024 by rpki-client on console-fra.rpki-client.org