Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce0a5ee9-e757-3bde-92f5-f5de272b3cb0.roa
File:                     ce0a5ee9-e757-3bde-92f5-f5de272b3cb0.roa (raw, json)
Hash identifier:          t6x06QTJsHUdBW2LvuR1hIHlkM1UUgQIh8TlyJ0jwTA=
Subject key identifier:   14:D8:64:31:DE:0F:EB:6F:4E:80:81:7A:0D:67:49:B9:88:3C:67:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845979A6E1CD3CEB1A46DD8BA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce0a5ee9-e757-3bde-92f5-f5de272b3cb0.roa
Signing time:             Fri 19 Apr 2024 01:04:18 +0000
ROA not before:           Fri 19 Apr 2024 01:04:18 +0000
ROA not after:            Thu 18 Jul 2024 01:04:18 +0000
asID:                     6167
IP address blocks:        72.96.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:9a:6e:1c:d3:ce:b1:a4:6d:d8:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 19 01:04:18 2024 GMT
            Not After : Jul 18 01:04:18 2024 GMT
        Subject: CN=8b7eca0c-9352-4203-88ec-1bd9e2289b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:86:28:29:ad:32:e6:39:dc:da:87:47:8c:
                    ae:c0:d9:15:c0:2c:f5:65:5b:92:d1:1a:b8:50:f0:
                    23:5b:46:20:b4:3c:ee:aa:c2:9e:8c:33:9b:c9:1f:
                    42:85:44:ad:77:40:50:d1:67:7c:99:e1:01:7c:be:
                    01:c2:aa:a2:1e:74:98:4e:6e:ab:52:c7:ef:5a:27:
                    54:a9:40:04:0b:2c:a9:69:03:32:24:4c:18:ef:8b:
                    bb:f2:d3:a2:0a:d9:e6:80:f1:6b:d0:d2:dd:87:6b:
                    35:d2:1e:82:e4:f8:f9:1e:39:42:72:b2:c7:e8:51:
                    6a:d8:ce:07:68:ac:a9:d8:4b:48:77:61:25:b5:71:
                    3d:51:91:22:da:94:b6:54:cb:c8:a8:a8:5c:26:a1:
                    26:a0:eb:c7:cc:ab:d0:98:67:a7:91:0e:8d:8f:7c:
                    31:77:5c:8c:74:59:a8:5c:af:eb:fd:2f:9c:b8:51:
                    56:2b:e4:15:0c:c5:82:b0:7b:26:d6:c0:4d:c3:8d:
                    37:43:12:30:95:a9:a1:ff:cd:d6:95:f0:73:30:5f:
                    c2:4b:ba:1f:f9:c4:5a:40:62:95:e4:b0:04:43:ef:
                    b9:e8:2b:c8:f3:3a:b2:b0:c0:c2:22:b4:fb:48:56:
                    a2:46:24:23:06:58:c9:f1:d0:56:82:28:25:1e:eb:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D8:64:31:DE:0F:EB:6F:4E:80:81:7A:0D:67:49:B9:88:3C:67:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce0a5ee9-e757-3bde-92f5-f5de272b3cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:06:21:58:1d:7d:cf:eb:df:44:8d:42:d1:df:c0:23:33:37:
         cd:24:b1:70:a4:ed:d4:a0:33:d1:d8:2e:c8:6d:39:a8:97:78:
         5b:02:e4:87:ea:80:df:18:f2:89:e1:ca:5b:f4:7e:62:2b:ba:
         bc:86:33:74:13:18:a5:d3:9f:95:78:ee:d4:31:97:73:6a:e9:
         06:bb:9c:21:7f:1a:72:04:1e:e4:93:b6:a2:0c:c2:77:80:57:
         71:82:5b:1c:b6:ac:73:3c:48:34:61:8a:40:f5:af:b9:4e:8f:
         5f:33:b7:7b:52:dd:c2:a9:de:41:86:d6:3d:04:1f:d6:fd:15:
         c7:a8:52:48:d9:7d:6c:2f:19:bf:a7:dd:17:e2:71:49:9c:4e:
         66:ef:bf:06:0c:db:2d:71:c3:c4:68:2e:ce:c9:10:54:59:c1:
         18:64:7a:e9:60:2a:ac:a7:69:e3:65:4e:ea:83:c6:14:70:e6:
         b0:57:68:76:5b:d2:7b:8d:43:1f:ab:15:3e:2c:e0:a7:21:56:
         0c:95:aa:ae:98:c8:93:8d:bb:0e:29:c8:a9:fc:a5:ac:dd:8b:
         f9:c8:1a:f6:75:66:3e:a9:2e:1d:11:74:1e:97:6e:f6:55:95:
         0b:f9:20:d4:6c:63:8e:75:eb:5a:5f:d9:d0:ed:1a:ba:34:4b:
         5a:67:12:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:46:34 2024 by rpki-client on console-ams.rpki-client.org