Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde628d5-b363-3e18-95f5-1266ab316f38.roa
File:                     dde628d5-b363-3e18-95f5-1266ab316f38.roa (raw, json)
Hash identifier:          +vyBhPsUKsynCfA+dI+IGsomWRus8aRm0OuiFiutFNU=
Subject key identifier:   53:7D:33:54:B0:39:14:ED:C1:AA:21:1B:35:70:08:37:96:03:9C:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB37B2AF64297D657EBFE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde628d5-b363-3e18-95f5-1266ab316f38.roa
Signing time:             Fri 03 May 2024 01:11:18 +0000
ROA not before:           Fri 03 May 2024 01:11:18 +0000
ROA not after:            Thu 01 Aug 2024 01:11:18 +0000
asID:                     6167
IP address blocks:        72.123.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:7b:2a:f6:42:97:d6:57:eb:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:18 2024 GMT
            Not After : Aug  1 01:11:18 2024 GMT
        Subject: CN=e38f79f1-1a46-4dd2-b7c9-e94d705da650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:37:ee:0c:be:1d:d5:05:8c:51:d5:c4:9c:
                    88:f8:11:d2:fe:14:29:8a:8a:b4:e9:e0:7c:92:bf:
                    ba:eb:c7:62:80:68:80:ab:18:2d:38:b3:ed:86:11:
                    7f:e7:33:bd:57:8c:64:4b:12:a6:f7:7f:b6:0e:7b:
                    fb:43:cc:da:2c:0c:13:75:a1:a9:43:ec:07:e7:df:
                    33:8d:8d:b3:28:12:24:55:af:b3:f8:ab:34:e8:69:
                    b5:72:94:ff:38:3c:c9:36:75:b5:cf:50:58:ff:32:
                    e9:db:2d:68:35:32:fc:60:42:c8:48:d9:c4:cc:ad:
                    12:81:eb:5f:b5:90:9d:f4:63:c4:4f:4d:39:e2:17:
                    65:c6:83:f9:f6:6a:87:28:bc:4d:6e:c2:d3:f1:08:
                    c7:09:3e:42:17:47:63:6d:86:f5:5a:78:8d:18:4a:
                    02:0c:e5:e5:54:da:da:ee:b7:f9:5c:8a:36:41:2a:
                    2c:4a:79:09:42:7e:a0:85:52:d7:79:24:49:a3:f7:
                    c5:c7:b2:5e:b5:38:bf:83:49:f5:ba:33:0a:d4:82:
                    a2:51:df:20:89:f3:17:07:54:db:28:b6:27:0b:54:
                    f5:3b:55:d4:00:ee:12:e8:a1:f0:b9:b4:77:6e:e0:
                    46:0e:7f:05:66:d7:7b:9c:d7:86:16:09:80:f0:81:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:33:54:B0:39:14:ED:C1:AA:21:1B:35:70:08:37:96:03:9C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde628d5-b363-3e18-95f5-1266ab316f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.123.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:31:8a:61:f0:0e:00:c4:c2:0f:fe:51:b6:bd:f5:0e:9a:b9:
         a3:58:da:18:52:2f:bf:d5:5c:8f:45:cf:46:f7:67:2e:5d:d2:
         3d:0e:2d:b3:33:0a:7d:29:3f:56:bd:c4:6f:6a:ce:8e:6c:94:
         6d:45:39:66:50:69:ed:f6:eb:f3:c3:f3:0f:fc:ab:47:90:89:
         41:e6:ac:9c:fe:fe:db:fe:32:8d:11:b8:8f:a6:80:9a:f6:09:
         22:2f:b3:1a:1a:0a:9e:77:21:93:d3:e3:40:85:0c:03:e6:bc:
         dc:bc:fd:a7:25:61:f3:a0:15:a0:51:60:54:32:d6:d1:e3:c7:
         6c:4f:72:23:6f:8e:7b:3e:d2:26:0f:92:cf:ea:b2:2d:ff:68:
         38:93:42:c2:43:9e:ac:cc:d2:19:e8:03:0d:88:ae:43:5a:c5:
         c7:e9:d5:fb:9f:6a:b9:16:51:e5:67:e7:6d:54:4b:eb:cb:c3:
         a6:fd:0a:ad:e0:bc:3f:65:89:18:2a:0c:46:7f:e2:1a:4a:b5:
         ed:d1:2b:26:60:c2:df:dc:e4:fa:51:3f:41:16:4a:61:80:50:
         c3:21:c4:b2:57:a1:44:07:7a:f3:d4:7e:b0:13:82:9b:3c:2b:
         37:ad:e7:9c:e6:94:47:0a:a3:64:7d:14:90:2b:e4:39:1e:4e:
         af:2f:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:42 2024 by rpki-client on console-fra.rpki-client.org