Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcec63db-9daa-34b5-8b51-fb914140ce22.roa
File:                     bcec63db-9daa-34b5-8b51-fb914140ce22.roa (raw, json)
Hash identifier:          VCgm/yuhKUutRvtVkjq8pH7lQw88RmNrMm/FEpS/eR8=
Subject key identifier:   16:C5:2B:47:9A:F9:A6:CA:3F:14:8C:52:07:9F:B3:37:4C:0E:A2:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB7AF2051AC0A853E4CD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcec63db-9daa-34b5-8b51-fb914140ce22.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.105.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:7a:f2:05:1a:c0:a8:53:e4:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=4c561c4e-5775-42ea-9909-10e82d804d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:c2:fc:11:08:46:7b:2a:d8:b3:26:02:70:
                    83:d9:92:f4:a9:19:bb:10:e5:dc:bc:4f:3b:0f:ec:
                    bd:0f:65:eb:a2:90:24:68:97:64:a3:42:8b:d9:32:
                    d1:d9:ac:7b:4c:97:af:31:f3:02:ea:61:88:d7:c7:
                    03:d0:46:46:1d:f5:0e:ee:92:79:02:5e:bd:1c:05:
                    54:4f:c0:a2:41:c6:ec:41:cc:75:9e:d0:2a:97:4b:
                    33:a2:d8:47:73:d7:62:b8:ed:bd:d9:64:cd:db:2e:
                    c8:7a:a7:51:40:6f:88:c9:ed:36:81:56:90:22:0b:
                    9c:0f:42:fe:0f:2d:90:75:00:52:33:54:1d:2a:3f:
                    d0:b5:a4:1c:1f:66:b9:ef:9f:c2:31:2e:db:2b:6f:
                    80:a2:7b:a8:a6:35:45:fd:57:bf:a5:b3:4c:48:46:
                    28:b7:28:6c:b3:eb:ad:73:62:b1:c7:79:67:35:3c:
                    95:7d:9b:f6:69:7d:dd:4b:06:16:db:4b:b4:8a:a7:
                    77:df:af:6c:b3:73:52:d5:49:2d:c0:ce:43:6f:60:
                    ff:2b:9e:12:c0:40:47:9e:8b:d6:0a:33:80:1c:8e:
                    5d:96:de:3b:dd:04:d7:a2:ef:20:75:36:19:25:90:
                    a1:9c:2d:a9:37:b0:bf:d6:ad:75:a9:f4:cc:64:a3:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C5:2B:47:9A:F9:A6:CA:3F:14:8C:52:07:9F:B3:37:4C:0E:A2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcec63db-9daa-34b5-8b51-fb914140ce22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:83:f1:c4:72:20:2e:8d:45:b9:ed:53:8c:75:78:90:24:38:
         0c:6d:8f:63:87:99:7b:07:0a:7b:42:eb:49:b1:ff:46:b7:a1:
         f5:e3:c1:30:f4:95:f7:57:2b:32:5d:30:ff:21:c2:46:85:de:
         df:fd:67:1f:ee:a7:fd:96:19:83:af:54:74:0f:bf:03:6c:db:
         da:d4:e8:06:9e:5e:f9:90:d4:fb:49:22:06:b7:68:c2:de:15:
         1d:1c:bc:be:f7:c2:89:54:70:8d:37:d5:3d:38:7c:9a:ed:fe:
         93:9c:ae:d4:19:4e:f4:44:bd:b5:0c:fd:f0:6a:80:2a:c9:2b:
         5d:ae:2e:54:6a:cc:0f:e1:20:12:0f:69:50:2a:b6:e7:c3:a6:
         2f:fb:21:6e:08:a6:a2:e6:fa:bd:ae:57:33:7c:80:7c:86:5e:
         4b:b2:69:54:58:82:62:92:87:27:91:b7:f7:d5:98:fc:10:b3:
         2c:ed:b4:04:13:44:3a:3c:64:ea:e5:73:bd:d1:a1:38:69:d6:
         60:ed:3f:4d:88:29:68:92:21:14:20:ed:93:f6:2b:ea:60:5b:
         6a:1d:aa:3c:4c:84:e5:0f:a6:6e:5e:26:d8:65:8c:58:e2:79:
         07:25:37:bb:65:a5:99:3a:0b:72:40:14:85:17:0d:5c:38:13:
         78:99:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:47 2024 by rpki-client on console-ams.rpki-client.org