Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0971cb2-cd01-3a1e-a25f-3c59066469f1.roa
File:                     f0971cb2-cd01-3a1e-a25f-3c59066469f1.roa (raw, json)
Hash identifier:          NbNhTzz5mUGweC2et7F4pudqZDeC0JMHNG/Q36N7DPo=
Subject key identifier:   A0:6D:03:C6:C3:77:68:DB:96:F3:E5:8C:24:E0:09:47:82:F6:E3:04
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80D59826DFFD92C5027600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0971cb2-cd01-3a1e-a25f-3c59066469f1.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        72.65.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:d5:98:26:df:fd:92:c5:02:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=73268f06-b674-4beb-a8d2-5ea702390725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:11:0c:d2:b4:91:83:5a:3e:87:8d:14:38:
                    ef:fe:3c:91:1b:8d:55:62:ad:c6:d0:47:6b:78:9e:
                    2d:de:cd:d2:9e:81:11:d3:16:73:b6:bd:8d:ab:b4:
                    70:56:4f:62:2a:79:c8:a2:4b:14:41:94:dd:9b:e8:
                    43:07:ac:5b:f5:40:26:77:52:02:3c:18:bb:5f:c2:
                    2b:a9:30:04:ee:ff:58:e1:e0:ef:7b:c2:53:f5:ea:
                    12:16:d8:77:64:63:76:81:18:65:25:24:eb:dc:c7:
                    38:f7:81:3b:70:02:bd:ab:b1:4e:42:07:ec:f3:31:
                    cf:4f:de:c7:e2:60:e3:73:83:b9:77:1f:95:97:60:
                    13:db:a4:6d:28:1d:6e:7a:01:8e:62:59:4a:9f:07:
                    11:24:20:6d:12:6a:34:77:e0:23:b5:17:fd:7a:35:
                    bb:91:fa:3f:fe:6a:0e:ba:f8:c6:0a:5a:4a:88:2b:
                    a5:83:04:32:77:c9:d2:d0:c9:49:92:e0:84:ff:6b:
                    54:64:ff:16:f3:3b:68:b0:c3:26:0c:0c:8c:ac:51:
                    f4:28:2b:4d:cf:10:1d:af:6c:4a:18:b4:0a:0b:27:
                    67:64:ea:0e:dc:71:9f:ca:c4:80:97:d2:b0:cd:26:
                    84:49:ba:f9:7c:a8:e8:f0:e7:f4:ad:51:f1:69:cc:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6D:03:C6:C3:77:68:DB:96:F3:E5:8C:24:E0:09:47:82:F6:E3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0971cb2-cd01-3a1e-a25f-3c59066469f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.65.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:74:cd:8e:47:4c:ea:69:6e:98:3d:30:46:a2:ed:b6:9c:
         16:46:d7:4e:93:78:67:6a:59:1a:0f:a2:bc:1a:67:b1:11:8d:
         bb:cb:c0:0f:10:93:65:93:12:fd:14:ef:de:27:e1:13:60:db:
         7c:44:2d:f3:59:83:fb:91:fa:9f:b6:2a:6c:e8:bd:80:9d:50:
         0d:2d:84:2d:d0:61:71:2d:a8:0f:31:2d:4b:fa:45:c7:70:78:
         2e:b7:29:52:5a:61:04:94:d8:9c:0f:8e:91:32:d8:a1:bf:f8:
         80:1a:2c:ac:f2:61:2c:5f:9c:a8:ff:f3:d1:a9:59:a2:ea:0d:
         6b:59:98:3b:4b:a6:b4:2f:cc:84:96:93:a6:5c:bf:84:c5:95:
         85:52:90:13:72:1b:9d:0a:cc:95:05:7b:b4:7f:dd:e0:eb:f4:
         f0:87:77:6e:b3:7b:31:39:30:43:01:93:9f:63:24:6e:e0:6e:
         53:70:e6:70:77:6e:ee:d5:60:3b:ac:fc:66:7a:01:a8:0b:c1:
         03:e6:b1:9c:92:3b:7e:9a:56:91:e2:c1:e7:2a:46:c9:e9:18:
         9f:b5:14:ba:a6:75:32:69:b3:2d:bc:30:2c:46:58:b3:31:fa:
         74:29:d1:83:4b:8e:3e:3c:00:50:06:73:4e:27:a1:3b:69:bd:
         4d:a6:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:01 2024 by rpki-client on console-fra.rpki-client.org