Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e50c458d-8141-3f90-8cac-016dd4fd00df.roa
File:                     e50c458d-8141-3f90-8cac-016dd4fd00df.roa (raw, json)
Hash identifier:          MOL+4hQBB1aJbYEG9beSUM0h9w4RLSbKW3Tkju/uOHE=
Subject key identifier:   C1:DA:C9:42:E6:99:21:EB:FB:6B:0F:F1:24:D3:71:AD:58:5D:FA:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB3AF1A7B56F5558A976534
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e50c458d-8141-3f90-8cac-016dd4fd00df.roa
Signing time:             Fri 03 May 2024 01:11:42 +0000
ROA not before:           Fri 03 May 2024 01:11:42 +0000
ROA not after:            Thu 01 Aug 2024 01:11:42 +0000
asID:                     6167
IP address blocks:        72.102.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:af:1a:7b:56:f5:55:8a:97:65:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:42 2024 GMT
            Not After : Aug  1 01:11:42 2024 GMT
        Subject: CN=bcee2373-447c-460d-88f7-15e470a54244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:9d:91:1b:3b:38:2d:52:a7:9f:d7:20:3b:
                    b4:b7:ae:29:41:5c:91:6b:99:30:9a:1d:65:78:51:
                    98:9a:77:5e:cc:a7:cc:75:9f:ee:12:ae:88:fb:e1:
                    2b:01:91:4c:d9:1f:4b:63:ac:be:c6:97:bb:51:ed:
                    0b:50:a9:7e:8c:65:fc:09:f7:25:8e:2d:17:82:42:
                    51:46:c0:f8:78:9a:3d:3c:5f:b1:e7:2b:e2:33:2c:
                    10:f0:1d:2a:fb:fd:ea:c1:0d:4f:0e:80:02:46:46:
                    84:7e:c6:4c:2a:83:45:93:7f:cc:ac:5f:fe:72:c8:
                    3e:f2:42:9a:61:08:d0:04:8a:6f:49:b4:ad:5f:3d:
                    81:1f:2a:bc:f7:55:b1:34:d3:f0:3a:43:53:1f:23:
                    dc:52:98:51:39:c5:c0:8b:94:65:6c:fd:84:d6:84:
                    70:4c:2e:3b:52:11:7c:a9:90:11:bc:39:45:14:ec:
                    b9:7f:86:d8:fd:b2:36:bc:f9:c3:04:f9:77:54:2e:
                    e0:af:04:f6:88:12:bb:ff:6d:9d:81:02:4b:24:34:
                    a6:09:3d:7b:3f:41:cf:fe:3f:84:ea:b9:07:14:a4:
                    85:a9:d2:3d:e1:a8:e8:1f:4e:a5:ee:a1:f1:ce:12:
                    a3:04:ec:7f:a9:89:63:46:d8:11:0b:3b:67:04:a1:
                    9a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DA:C9:42:E6:99:21:EB:FB:6B:0F:F1:24:D3:71:AD:58:5D:FA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e50c458d-8141-3f90-8cac-016dd4fd00df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:62:d2:c9:4a:14:d9:16:ad:17:ad:56:db:b8:0e:7c:91:aa:
         5d:9e:49:58:8e:4a:23:ac:8d:a5:38:b9:c4:b9:64:8a:d5:72:
         4b:da:5e:16:4b:0d:76:20:07:77:72:93:db:8b:6a:de:1d:95:
         95:11:2d:85:49:4b:0f:7a:e7:1d:f4:88:3c:b7:93:e1:2f:34:
         87:ea:35:ce:d4:e6:1b:b8:b8:3d:27:be:8c:ff:6c:81:12:c6:
         5c:f6:94:82:df:a9:5f:33:f2:e1:85:19:fa:98:8d:9b:76:ac:
         07:38:fa:13:8d:66:17:bc:b9:21:51:47:b3:d3:ca:5e:8f:18:
         a6:7e:71:19:23:70:56:f7:59:dc:e4:07:2c:85:3d:9f:9a:3b:
         fc:08:be:ec:35:e6:43:6b:4b:ce:46:29:15:f6:9f:3f:d7:b9:
         a3:33:2f:02:b5:5d:cc:a0:d1:6d:41:e1:b9:5e:81:e8:4c:9d:
         1f:9a:9f:b1:43:8c:b4:b7:29:31:d8:71:3b:a7:24:fe:39:d0:
         84:40:a0:9a:cf:a1:86:90:8f:6c:1e:15:75:19:19:ab:c9:b4:
         ee:9c:0d:ed:af:75:a1:52:d5:35:85:61:62:21:6a:1d:5d:ce:
         11:26:70:1b:43:0c:27:86:82:38:1e:c1:0b:95:0d:e2:74:18:
         1b:ce:77:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:57:43 2024 by rpki-client on console-fra.rpki-client.org