Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6ae4724-da96-33c7-8248-d399d0c63d4c.roa
File:                     c6ae4724-da96-33c7-8248-d399d0c63d4c.roa (raw, json)
Hash identifier:          aah3KkC1COF5ysN3306LvpgqpAOZhoJX6ZkdMASKj1I=
Subject key identifier:   21:01:70:FD:AD:0C:3B:39:4F:7E:86:37:81:EE:88:85:35:02:BD:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A3BD52675FADFDBDA5C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6ae4724-da96-33c7-8248-d399d0c63d4c.roa
Signing time:             Fri 19 Apr 2024 01:03:54 +0000
ROA not before:           Fri 19 Apr 2024 01:03:54 +0000
ROA not after:            Thu 18 Jul 2024 01:03:54 +0000
asID:                     6167
IP address blocks:        72.105.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:3b:d5:26:75:fa:df:db:da:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:03:54 2024 GMT
            Not After : Jul 18 01:03:54 2024 GMT
        Subject: CN=1c7f7b69-501b-4ba0-98f4-03885dcba12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:b3:13:96:31:db:ee:ba:e6:37:bc:6e:d5:
                    4c:78:8a:d7:03:b8:13:2c:32:6a:62:1e:11:4b:65:
                    23:44:09:04:6e:ff:e0:05:17:86:c7:34:3e:59:35:
                    d2:94:b5:ed:0d:84:e6:a3:67:b5:7c:be:03:65:7c:
                    a8:f8:4d:84:0c:ed:dd:9a:9d:1e:8c:8a:31:f0:38:
                    a6:5c:6e:4c:13:8d:b2:a9:5e:94:2c:15:bb:4a:64:
                    94:e5:db:fe:ea:ca:1b:ca:d8:03:a4:0e:a0:40:4a:
                    64:e1:9e:8f:8f:0c:9e:a0:70:d8:8e:93:c6:ff:7a:
                    32:e4:b4:aa:68:d5:6a:3d:28:bf:89:4d:28:64:71:
                    d0:6f:21:af:1f:11:e0:48:9d:cc:e9:28:88:ac:2f:
                    a7:06:db:0f:ac:f2:bf:9b:58:53:d8:f2:60:ee:b0:
                    95:bd:27:2a:a5:bb:b6:c6:79:c7:13:78:4d:e3:25:
                    64:3d:04:c3:22:7b:37:f1:64:f2:91:57:c7:11:3d:
                    ec:87:21:6c:21:b8:bb:7f:c9:de:64:a6:b8:51:e1:
                    c0:67:11:eb:36:ce:d6:d3:ea:cc:7c:25:e1:8c:5d:
                    f1:2e:cb:4e:7e:26:42:62:63:93:6a:ea:81:9c:49:
                    20:91:1a:5f:73:69:7d:2b:89:40:f3:66:7d:ff:8b:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:70:FD:AD:0C:3B:39:4F:7E:86:37:81:EE:88:85:35:02:BD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6ae4724-da96-33c7-8248-d399d0c63d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:74:6f:37:d6:61:05:ae:6d:8d:9f:e1:0a:06:9b:53:a2:
         cd:aa:e3:57:78:4e:66:ef:94:c1:56:f8:e3:46:9a:ce:eb:ac:
         bc:a7:7f:81:84:50:88:1e:d0:f8:95:32:58:c2:1b:ed:f9:92:
         b3:f5:eb:f9:f7:08:f6:b0:48:a0:b7:e0:fd:5e:22:7c:d8:b7:
         8b:99:98:76:7d:77:c4:6d:38:47:20:d8:e9:87:be:07:c1:9c:
         74:5d:de:f5:4b:48:12:48:ac:b0:c7:a7:6f:13:5c:9a:05:54:
         ba:53:82:20:98:d7:94:84:f1:f3:f7:70:d4:01:b8:e7:20:19:
         1f:ea:c0:97:10:f4:83:87:16:90:b2:f1:fa:8e:2c:6a:1e:8b:
         03:fa:45:dd:4c:af:c6:9a:d7:72:fd:31:dd:f4:89:fd:1a:6f:
         7b:9b:c8:b6:56:b4:9b:4f:73:fd:cd:2b:d3:59:04:98:e5:4e:
         e0:1f:dc:38:10:d2:73:3e:25:6d:59:83:fe:a4:54:5e:68:f8:
         5c:61:4f:0e:fb:89:a2:8d:6b:fe:a4:fd:fd:12:a2:dc:eb:fb:
         4f:ce:3c:a2:70:85:34:79:97:91:12:a2:5c:51:75:27:80:e9:
         27:01:3b:53:2c:64:55:e4:5a:96:40:11:0a:53:25:0e:1d:be:
         a6:fc:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:14:26 2024 by rpki-client on console-ams.rpki-client.org