Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5293e62-1820-3097-aadb-17f6952ff758.roa
File:                     c5293e62-1820-3097-aadb-17f6952ff758.roa (raw, json)
Hash identifier:          Du+ENQGF9Ka3FsWvEHySUTiAHJuuRseAhIfSuSWl7h0=
Subject key identifier:   BA:53:D4:C2:F0:C4:EC:90:80:A2:82:80:D0:5F:1A:FD:83:D4:49:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB83AF3897F951BF1EDAF8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5293e62-1820-3097-aadb-17f6952ff758.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.106.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:83:af:38:97:f9:51:bf:1e:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=356cd076-f059-4204-a1c4-7044ba06bbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:39:04:f5:06:ca:24:fb:5b:32:e0:94:c9:
                    27:ca:e1:bf:f0:73:18:d2:f4:74:47:7e:b9:5b:df:
                    f1:b6:fa:91:f7:47:d2:dc:e2:92:47:e3:ba:f7:43:
                    af:9e:35:14:c6:83:4e:dd:9a:d7:e0:8d:26:ae:55:
                    d3:52:2a:71:24:f2:9c:df:9d:9d:be:69:05:8f:f1:
                    e8:04:1b:cb:2b:74:a3:d6:c9:f8:8a:19:c1:0e:c1:
                    10:a1:67:c6:d3:9a:b9:8b:38:80:10:a7:96:1b:30:
                    72:41:34:94:b8:0e:a6:3d:91:97:af:19:7c:79:91:
                    99:7a:ea:bf:a7:4b:8c:56:6a:ff:e8:a3:62:6d:24:
                    73:b3:03:75:52:98:c4:ae:cf:a7:84:a4:50:d0:83:
                    98:1e:d8:76:d3:d3:32:16:88:80:09:9b:2e:30:1c:
                    c2:c8:6c:86:83:09:6f:36:d2:11:04:fe:65:d2:a3:
                    7a:e0:56:0f:e7:94:ea:9a:05:c6:7b:31:d1:cf:64:
                    d3:f3:5a:77:9c:ae:fe:55:11:c3:44:8c:15:a2:2f:
                    f3:57:86:e7:39:d7:1e:62:b6:fc:84:fc:78:51:40:
                    91:ba:cc:04:c7:d5:6f:08:0f:84:49:a2:86:bd:7e:
                    be:78:63:f6:c6:0e:3d:1d:cd:03:9a:04:3d:34:73:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:53:D4:C2:F0:C4:EC:90:80:A2:82:80:D0:5F:1A:FD:83:D4:49:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c5293e62-1820-3097-aadb-17f6952ff758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:22:2b:b2:f1:5a:a7:eb:b8:50:c3:4c:a0:0b:8f:cc:f9:31:
         d9:6f:c5:26:a8:c0:0b:bc:a1:5f:e1:b9:72:95:e7:82:1d:cc:
         38:f4:82:ac:05:e2:b1:fa:06:ed:bb:a2:71:56:cd:d6:9a:52:
         f4:90:05:88:49:83:7a:98:44:7a:d5:68:d1:f8:c2:d4:3a:6a:
         d6:19:44:2a:b8:71:d9:5d:51:a3:c5:12:08:87:cb:41:fd:27:
         89:70:76:96:f8:7d:df:9a:91:ec:56:62:fe:10:2e:c7:40:c5:
         c3:65:19:49:c1:e1:93:9c:41:11:a4:6e:03:8a:d9:54:55:51:
         2e:78:2b:93:4b:8d:a5:d3:2d:dc:ed:19:ea:7a:f3:39:1c:f4:
         f1:f2:34:48:55:49:79:71:4f:ec:99:6c:93:3d:9b:50:9f:1f:
         f2:60:c1:2d:0e:c4:fb:ef:92:d5:62:45:63:e4:c7:c0:d8:fd:
         5f:3a:31:c0:70:6c:5f:7f:df:09:8e:82:d9:06:26:23:d3:eb:
         3e:cf:48:0c:64:a6:6a:5d:68:b2:0f:25:0e:04:0c:7e:88:80:
         1a:78:86:51:ff:71:1b:e8:69:63:3a:21:72:a5:f7:df:3e:74:
         ea:24:d3:42:95:31:0b:ad:f5:95:ca:35:e5:08:f5:18:67:45:
         7e:42:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:48 2024 by rpki-client on console-ams.rpki-client.org