Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa
File:                     d58690c4-f846-381c-92e5-cd15adc11a7c.roa (raw, json)
Hash identifier:          8mVc1s1CFiSy8EeenFeEXBZzLrIP9OgSc/Io3/0E0ZM=
Subject key identifier:   5B:36:D6:99:48:23:EE:D5:59:F7:FD:05:DD:E8:90:DD:6C:61:89:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC122833A7BEF0797C166FC
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.111.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:22:83:3a:7b:ef:07:97:c1:66:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=9682d653-55c2-47e6-8008-db8f927feb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:b6:14:0e:67:a5:be:5e:5b:a7:e4:a3:f8:
                    2e:85:71:9a:a6:0c:a0:85:c6:8f:1e:1c:ba:7b:ee:
                    2e:ad:b9:0b:09:94:b7:93:48:81:e1:89:15:d3:b8:
                    7f:1d:59:ff:04:70:56:a5:f9:47:53:00:35:5b:26:
                    90:ab:6a:e3:ce:80:dc:fa:30:d5:4f:bc:67:e6:4b:
                    38:37:d9:75:eb:d1:0b:cb:7a:c9:2f:8d:3b:95:c7:
                    1f:d2:09:2a:7f:cb:c3:e3:ba:15:6f:88:45:9a:2c:
                    00:72:30:69:62:82:7d:ed:99:ee:5e:f1:1b:84:81:
                    8f:84:87:cf:3b:a2:fa:b4:60:58:73:ac:3a:43:6c:
                    5a:e2:7b:35:ff:8b:3f:c2:40:93:06:12:74:02:08:
                    e5:bf:00:ff:43:bc:76:b2:fe:d9:e5:90:6a:7f:8d:
                    8f:16:15:c9:e2:56:43:96:56:2b:8c:b8:a4:ab:b4:
                    18:70:b7:76:23:bd:b3:db:e7:47:f8:67:8b:b7:bf:
                    14:b5:cd:23:f3:bb:27:45:42:a4:70:e1:9a:78:d6:
                    29:82:b6:27:29:e7:81:4c:3c:ff:c5:b8:49:d4:b2:
                    49:d8:6a:65:3f:79:02:3d:24:1b:33:4c:dc:c9:f5:
                    18:cf:d6:5a:8c:f6:15:d9:c1:a0:03:8a:47:65:84:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:D6:99:48:23:EE:D5:59:F7:FD:05:DD:E8:90:DD:6C:61:89:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58690c4-f846-381c-92e5-cd15adc11a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:34:53:ff:fb:1c:cf:d2:e7:7f:b9:b4:cc:e3:74:36:a6:
         b3:af:df:85:23:39:76:aa:c9:70:b5:7a:a9:cb:57:8f:fe:8b:
         e6:0c:00:ba:60:bc:75:73:03:db:b3:dd:54:d5:50:62:51:56:
         33:6f:4a:02:16:37:1f:6e:6f:cd:9a:f1:05:5c:84:89:f0:02:
         26:1b:0f:c2:24:10:89:11:33:7f:7e:72:04:1a:74:ca:7a:45:
         5a:51:fa:11:d3:db:50:f9:62:c3:67:d5:91:eb:f2:3d:d8:e7:
         dd:f3:f5:6c:50:3e:45:eb:2e:46:73:81:51:46:a6:dc:9c:f9:
         d1:1c:f2:ff:5a:e9:6c:9c:4d:4e:ff:c1:03:99:78:da:3f:a6:
         42:97:f5:59:7f:01:64:8b:8c:75:91:2b:98:92:91:a1:7b:7e:
         49:5b:20:ad:4a:5b:f8:f0:13:8b:1f:9e:aa:d9:d8:05:09:6b:
         49:28:68:bc:ea:fd:77:a4:a6:3e:ca:b4:e0:4a:a8:74:38:ca:
         84:d0:b1:00:2e:3b:94:c3:38:5f:94:70:0a:bf:0a:ff:77:88:
         66:e1:ce:f0:cb:81:c8:a0:85:e9:99:be:82:a2:66:ef:d0:43:
         a3:c2:f0:9d:63:fa:78:64:4a:4f:e4:05:d3:1c:c7:46:56:d0:
         d8:fa:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org