Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e795e18e-49df-3fdb-9efa-11e55d60ff58.roa
File:                     e795e18e-49df-3fdb-9efa-11e55d60ff58.roa (raw, json)
Hash identifier:          C7vmJ1BrEbNpffLzIcxCkdqy58Aipr9c+UGgD3Vl/Ds=
Subject key identifier:   BB:2E:2C:1D:D3:C0:8D:D2:06:E1:E7:F3:40:D8:CB:3D:07:34:1F:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB7F6AE3251EF0FFFA4FE8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e795e18e-49df-3fdb-9efa-11e55d60ff58.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.96.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:7f:6a:e3:25:1e:f0:ff:fa:4f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=609b4fbb-965b-43e3-b43d-6031caff3c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:a2:87:d9:17:77:bf:e9:cf:a8:f2:59:bc:
                    52:a9:c2:fc:f5:16:3a:61:26:db:56:f2:8c:61:0a:
                    43:76:73:1a:83:dc:b2:f5:c7:1c:ec:7e:39:e1:81:
                    34:78:5a:92:6c:c9:ef:0d:e1:da:ad:a5:5b:70:60:
                    c0:85:af:15:1c:70:01:7b:59:27:40:27:42:f6:d1:
                    90:e1:51:6b:0b:ed:3e:f5:f2:7b:ca:83:c2:f6:6a:
                    fc:6d:d2:5c:27:b8:07:40:d1:fe:76:60:f5:b6:25:
                    84:47:b5:67:33:21:c2:ce:a0:e5:b8:c9:56:a8:da:
                    6f:fe:62:60:09:2d:cd:ea:a3:c5:e3:04:20:6a:12:
                    85:66:7a:f9:92:28:f4:fa:ef:a0:42:17:f5:ec:c4:
                    fc:dd:b4:ae:0d:f0:35:a9:2b:56:6a:9a:fc:29:62:
                    f7:9b:90:78:13:5d:64:b0:2e:9a:99:21:d9:89:28:
                    fd:9b:4e:9c:4a:99:be:aa:8c:39:64:ef:07:f0:cd:
                    53:b7:a7:be:57:e4:f7:10:86:3b:96:15:84:da:e9:
                    c9:bb:59:3b:67:cc:ef:e1:ae:f7:24:ce:58:0a:8c:
                    2a:dc:b5:ec:aa:a2:01:a1:f9:8b:70:64:68:6c:cf:
                    4f:dc:7b:ab:d8:23:51:ad:cf:84:29:6f:83:fc:30:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:2C:1D:D3:C0:8D:D2:06:E1:E7:F3:40:D8:CB:3D:07:34:1F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e795e18e-49df-3fdb-9efa-11e55d60ff58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:5c:4d:61:7a:85:be:34:e6:f1:35:fd:6d:28:9f:52:07:
         da:81:32:7f:38:16:c4:46:03:92:94:2b:c5:54:31:5c:ec:74:
         e2:b7:c5:b0:79:b9:37:6f:af:fe:0c:4c:92:c3:ac:2b:8b:14:
         67:54:c1:8d:a6:16:9c:33:32:4e:d2:c5:b1:6b:f3:97:10:ab:
         af:e3:88:15:60:b2:c4:88:c5:c3:5d:2c:86:3b:e4:ce:8e:cb:
         f4:e5:74:90:4d:25:03:dd:28:fd:6d:6f:03:b2:1b:f2:a7:80:
         f2:d1:dd:fc:cc:75:57:c2:51:b5:b3:f3:aa:d3:82:6e:64:8f:
         78:28:f5:79:22:ab:fb:23:4d:36:21:79:46:a0:ef:6c:52:3c:
         87:1e:76:e9:c2:86:f6:79:fe:55:41:c3:76:4a:ce:7a:2b:54:
         c4:e4:6b:75:e8:43:31:76:e5:f3:86:5a:8c:8e:5b:31:fd:a0:
         b7:6c:cf:6f:9a:bb:a9:ee:b6:ab:bb:61:0b:3b:e8:ac:fd:01:
         c1:18:8a:7d:4d:ec:76:5d:14:1f:ee:5a:e3:e6:3b:10:84:62:
         28:2d:62:66:57:ee:61:a0:bc:2d:21:b9:68:95:8a:19:aa:2f:
         93:ac:c7:fa:69:ee:c6:8e:0e:66:ac:6c:e4:ab:56:70:c3:4b:
         de:30:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:59 2024 by rpki-client on console-fra.rpki-client.org