Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d75b46ca-1c93-3443-9fca-77e1753c5c9b.roa
File:                     d75b46ca-1c93-3443-9fca-77e1753c5c9b.roa (raw, json)
Hash identifier:          NHBdBCjNR9/Myk2N5hKrjS7S8mslnTPXzmqqWI0qFtA=
Subject key identifier:   42:00:1F:D6:D1:DA:DA:86:36:27:E5:CA:BD:44:B5:E9:71:C3:E9:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858477EC1184E4CD85A55848FE410
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d75b46ca-1c93-3443-9fca-77e1753c5c9b.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        72.108.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:18:4e:4c:d8:5a:55:84:8f:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=8bec6a38-e3ea-420c-9498-c83f9ac7faed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:ee:4f:60:77:06:32:db:5d:2c:05:5c:db:
                    ed:42:e5:e5:a7:7b:a1:85:b4:ba:8e:11:6f:cb:b4:
                    c1:bb:1c:aa:e2:3d:c2:28:18:5d:03:bb:d4:0a:82:
                    9b:d4:e0:a5:b1:bd:3b:97:60:91:32:3b:43:1f:e4:
                    b0:44:be:2e:25:57:8b:27:ad:a2:b2:4d:6f:02:4a:
                    d1:ec:7d:d1:fe:2d:e2:8a:8c:4b:8e:42:c0:93:ad:
                    9a:e6:15:be:5f:f3:44:a6:d8:79:a0:3c:81:db:af:
                    ea:a4:90:1e:03:25:ab:68:e8:c6:52:7d:11:82:a0:
                    e2:ec:b3:e1:bf:23:e5:d4:46:28:89:38:12:72:81:
                    be:2d:25:cc:45:6e:99:d1:7a:17:50:0b:c5:5f:85:
                    e3:d5:74:d3:9d:dd:3f:20:b3:16:93:a2:7f:dc:77:
                    82:a9:f3:8c:32:35:a5:e7:85:54:3d:56:c7:c6:bf:
                    48:2b:aa:3a:d4:a5:7a:3d:da:56:a8:3d:c4:ad:48:
                    82:10:52:7b:90:e0:32:b8:f2:6f:24:1c:8f:ce:ee:
                    c0:92:64:e0:78:db:95:d2:96:10:27:da:53:92:5a:
                    ae:08:bf:a3:61:b7:41:cf:9f:dd:80:6c:83:af:11:
                    59:c9:49:e8:27:c7:91:d3:af:50:0c:af:42:d9:e8:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:00:1F:D6:D1:DA:DA:86:36:27:E5:CA:BD:44:B5:E9:71:C3:E9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d75b46ca-1c93-3443-9fca-77e1753c5c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:c6:4e:c0:2e:ff:7f:f7:38:2a:a7:f7:20:66:0b:89:dc:
         70:a1:29:c9:03:a4:f1:f4:fe:a6:6d:74:69:c7:0d:bc:ea:39:
         a5:a5:a6:37:6c:97:51:9c:eb:dd:46:e6:74:ce:db:a2:cc:9f:
         a3:99:cc:97:c6:16:1a:31:ed:84:d9:e0:7c:3d:82:06:ee:01:
         b7:a9:6b:21:62:58:9c:81:3b:55:4f:07:19:a7:15:7c:0b:64:
         df:1b:4b:09:71:b9:4b:6a:27:7e:a5:54:d3:5f:86:f7:aa:43:
         fb:1f:ce:6d:92:17:e0:63:2e:23:6e:13:86:c9:9b:f4:94:c1:
         82:4a:06:5a:4a:25:95:2f:f1:cc:87:a9:9c:3d:0f:f7:aa:9c:
         3f:d3:a9:7d:92:1f:7f:b8:45:98:b5:5a:d8:21:ed:4b:ac:2f:
         b7:bc:e5:ce:49:40:e2:3d:2a:e8:64:54:37:ce:55:2c:d7:33:
         f6:c7:37:86:d1:af:f3:76:5b:f2:c7:d9:8c:e3:b9:2c:f6:ee:
         fe:c8:8f:fc:e1:f8:52:6c:9b:b2:38:f8:49:e3:d3:17:ee:9b:
         ab:9e:36:36:58:75:1a:05:50:c5:01:9b:cd:26:55:bb:be:5d:
         17:92:57:f3:79:a4:a4:dd:3a:34:9a:42:58:63:67:f4:98:3f:
         58:c9:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:56 2024 by rpki-client on console-fra.rpki-client.org