Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
File:                     d655159a-661f-3b96-b635-e8b5d4a0a95a.roa (raw, json)
Hash identifier:          2rNMB0cGWwX9uja6vZ6JTEMdicVDbXZ6LeYn9xEw7kI=
Subject key identifier:   54:13:39:58:D6:2A:3D:85:EB:A6:43:F5:B9:87:48:C0:1B:DA:16:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB7E659CCA923FF919A580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.96.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:7e:65:9c:ca:92:3f:f9:19:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=5e46c9ba-f4b2-4b70-8eea-4c06768baaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:d3:9e:33:15:25:a4:b0:a7:8d:90:e8:bb:
                    cf:61:57:cd:cd:3f:c3:38:5b:92:48:76:0a:d1:52:
                    06:0e:dd:ed:92:57:b2:c1:c5:39:bb:5f:94:88:61:
                    72:a4:84:3c:77:61:32:1e:f8:21:d2:c9:80:3d:de:
                    ae:0c:6a:8a:7f:1f:97:64:57:ae:57:a8:bd:7e:4e:
                    ca:98:1b:ef:9f:6e:ed:cc:94:20:e6:e5:a1:6d:9a:
                    5e:95:20:d1:f8:47:60:98:83:05:b2:64:5f:90:e7:
                    ba:d6:83:0b:7f:2f:2d:87:e5:80:ec:b9:c3:d8:2e:
                    88:9f:7a:08:d1:83:04:f8:c5:dd:23:bf:50:d4:51:
                    17:a8:9e:7a:25:32:f4:e2:72:73:19:9e:73:b5:53:
                    2a:b5:91:b8:02:a5:ff:c4:d2:1a:da:95:6b:23:a5:
                    61:47:85:7e:40:92:14:e4:3a:66:3e:4c:5a:8e:13:
                    77:21:bf:e6:ec:5b:90:60:3d:a5:a1:32:32:6f:0a:
                    c3:cb:af:b0:b9:53:b6:09:7d:c8:2a:fa:9a:9c:af:
                    24:94:ca:e6:5a:d6:8e:80:c4:ff:a7:fd:0d:f8:51:
                    8e:db:ff:cb:35:9f:f5:9c:9d:7f:6c:fd:a4:b5:d8:
                    b4:9b:01:0c:ff:40:f6:4e:36:11:8a:fe:d9:00:3f:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:13:39:58:D6:2A:3D:85:EB:A6:43:F5:B9:87:48:C0:1B:DA:16:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d655159a-661f-3b96-b635-e8b5d4a0a95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:79:69:11:29:b8:9a:68:b1:83:92:3c:fc:50:91:fb:05:50:
         e3:1e:24:b6:09:66:e5:9d:b1:f3:2d:76:28:ba:cc:a3:90:a4:
         55:20:5e:66:66:02:bf:00:46:cd:7c:19:8e:41:c3:e6:cf:b5:
         41:fb:94:c3:f3:6e:a4:28:f4:8f:e7:b8:f4:d0:03:43:c8:d1:
         2e:23:c5:40:90:d6:11:92:ae:e2:92:e1:da:51:0b:a5:cd:03:
         9c:47:b2:6d:f2:48:2a:a3:5c:ba:51:e2:92:f6:39:ca:66:3d:
         9e:12:e9:54:b4:eb:79:27:3a:ac:6e:90:33:30:4d:25:84:a3:
         7a:56:b8:4c:af:74:5c:5d:85:48:d5:b2:90:79:d1:8c:7c:2e:
         d6:5d:22:e3:ae:77:9c:a9:f2:8e:c1:14:b5:45:ac:62:48:04:
         cc:ef:ab:3e:2b:f8:cb:3b:1b:b1:56:26:63:6b:43:f8:7b:ce:
         55:fa:6f:2d:42:93:98:28:de:36:db:7a:0b:e4:30:d3:6d:96:
         31:18:d4:6f:f2:a5:8a:de:94:34:bd:01:8d:b6:51:c8:71:13:
         5f:e7:c5:2a:b0:47:8a:9f:a5:31:2e:57:45:48:c8:40:54:4e:
         16:30:80:57:4a:94:e6:b4:06:3b:21:4e:a3:7a:bc:98:e2:5d:
         cf:04:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org