Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394284a-b3ba-3998-a15d-78fee04c02bc.roa
File:                     d394284a-b3ba-3998-a15d-78fee04c02bc.roa (raw, json)
Hash identifier:          mkk+NMeepvjQgv/wWGPMJvCX7Nhcf2RXt7WygF63KFU=
Subject key identifier:   EB:2B:5F:BB:DB:2E:E4:1C:FB:30:43:B5:7C:BB:44:5F:6C:96:2E:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80C81A7106C84958EA8900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394284a-b3ba-3998-a15d-78fee04c02bc.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        72.82.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c8:1a:71:06:c8:49:58:ea:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=983b4ea6-15a2-4570-9709-ded2d9423bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:5c:e1:e9:82:38:84:c0:71:9c:3b:cc:d8:
                    c3:78:8e:7d:c4:61:81:c0:57:8a:81:7d:c5:bb:4c:
                    b2:fb:05:21:ba:04:b1:fe:2f:8c:d0:1b:46:c6:a6:
                    ea:30:42:8f:3e:5d:bb:ec:8b:2c:2c:a4:19:35:fe:
                    f2:3f:dd:0b:47:ac:c6:0b:ab:23:63:d2:e6:be:90:
                    18:67:f9:b4:a6:d1:12:21:69:f9:d7:30:82:08:99:
                    bc:8f:22:dc:40:dd:05:29:be:3d:26:52:d0:a3:20:
                    ad:e1:ba:e8:68:4b:66:b9:bd:d7:a2:74:f6:b8:2d:
                    31:34:3d:0f:03:ef:9a:f6:d7:2d:8e:84:3e:5c:07:
                    26:01:aa:34:64:87:d5:b9:21:2b:cd:ce:04:f2:ae:
                    74:1a:c8:cc:ba:89:2c:f3:e1:31:24:d1:1e:d5:0e:
                    e8:ae:0c:54:bf:fa:a9:ab:c9:5a:69:7e:2b:0b:2f:
                    bc:cd:ee:c4:db:96:1d:2b:74:f9:44:7a:66:90:6b:
                    71:45:d7:40:ff:4f:42:0f:24:23:9a:ca:8d:3c:5c:
                    38:9d:ca:a8:ef:a6:bc:93:ec:a9:00:04:c0:90:29:
                    f7:c9:cb:9c:79:77:1e:29:f8:fd:ae:f5:d6:2a:e7:
                    3f:32:0a:c9:ad:98:b9:01:44:e0:19:05:84:45:ce:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:5F:BB:DB:2E:E4:1C:FB:30:43:B5:7C:BB:44:5F:6C:96:2E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d394284a-b3ba-3998-a15d-78fee04c02bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.82.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0d:d5:02:3a:9b:8f:e5:f4:20:a5:53:73:fa:32:26:ce:73:
         02:cc:7b:09:fb:0f:c1:ce:4d:dc:7b:e5:93:de:7b:99:b3:fd:
         36:ed:23:62:54:f2:c6:c8:d4:f8:17:48:1c:b2:b5:80:31:f1:
         63:66:4c:95:47:dd:1a:01:f8:36:a2:ca:d8:4f:4a:f3:ae:60:
         11:d7:93:84:c8:a9:bb:43:82:9b:09:24:c9:35:b3:8c:dd:43:
         b7:5f:ab:29:0a:cd:7c:88:7f:22:cb:bc:70:93:7a:4f:28:95:
         86:f2:e2:a9:ed:0f:e7:70:22:6c:3d:af:68:99:ca:df:b9:15:
         55:9d:87:65:32:ab:1b:2e:d8:eb:19:89:f4:1b:42:d2:48:db:
         75:35:3f:7d:e6:fc:0c:20:25:5e:9d:72:bb:0b:9a:53:ca:7c:
         fb:34:d1:4a:11:a7:ae:57:0a:fd:f2:ee:da:23:f0:8f:f3:45:
         b9:3a:4c:fa:c5:b1:99:22:f4:27:57:ba:64:fc:05:16:e3:8b:
         d2:c8:58:f5:47:a2:36:f2:8f:26:47:8c:95:58:40:0b:b7:e5:
         97:c2:3c:73:b3:d7:32:4b:2f:e6:8f:ba:a0:26:92:ff:00:01:
         e7:fe:84:46:6f:66:a2:aa:2e:23:7c:b1:54:0b:8e:7d:0e:98:
         a8:c9:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org