Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f10f9aa9-c230-3e13-974d-a698f402248c.roa
File:                     f10f9aa9-c230-3e13-974d-a698f402248c.roa (raw, json)
Hash identifier:          6Sfp0BriSaDAYpDyMwdc9c1wBiAFspJMogeMGMi7W7w=
Subject key identifier:   E8:E1:C5:26:5B:E1:20:18:BB:C9:D0:54:6B:7C:54:E7:0A:C4:FF:E7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845BEB37EA02917BF145F04E05E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f10f9aa9-c230-3e13-974d-a698f402248c.roa
Signing time:             Fri 03 May 2024 01:11:19 +0000
ROA not before:           Fri 03 May 2024 01:11:19 +0000
ROA not after:            Thu 01 Aug 2024 01:11:19 +0000
asID:                     6167
IP address blocks:        72.107.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:b3:7e:a0:29:17:bf:14:5f:04:e0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:11:19 2024 GMT
            Not After : Aug  1 01:11:19 2024 GMT
        Subject: CN=570e5eea-213a-410b-b75d-bc8d8d252419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:83:58:59:a2:63:14:3b:b4:4a:11:ea:0a:
                    d8:a9:c2:c0:39:4e:ff:87:e2:ad:1d:5e:63:3d:5b:
                    1c:6e:ef:a9:5c:62:c9:f5:27:8b:f8:56:34:f5:43:
                    62:37:9c:53:a8:15:11:6d:50:a3:cd:7e:de:0a:4d:
                    f2:e7:54:5d:1c:83:e2:29:be:0c:8b:3f:f6:1d:5d:
                    63:70:d4:1e:73:9d:9c:c9:49:0d:d0:c6:b4:8b:12:
                    66:eb:8e:62:f7:24:4c:d5:b4:2a:c6:76:01:da:f2:
                    cc:b9:d2:93:4b:fd:aa:58:2c:2c:57:15:5a:dd:ef:
                    e5:fd:4c:5c:eb:72:22:1b:59:bd:59:cb:74:a0:a0:
                    53:b7:60:9b:7c:33:aa:20:db:18:3c:f3:a1:af:e4:
                    72:73:dc:c6:c4:d9:62:b5:02:4e:21:4c:a9:25:15:
                    8e:e9:e2:84:a4:fa:e0:a9:74:7c:5a:91:dd:e9:b4:
                    4e:74:90:7f:39:78:12:a6:83:02:73:d5:c4:cc:71:
                    27:51:00:e8:30:11:47:b8:a4:ad:24:eb:be:54:7f:
                    55:5d:92:d7:8c:cb:10:b8:b3:d4:6a:76:a3:bf:b7:
                    83:ef:29:c8:89:aa:82:f8:31:21:b7:2f:83:af:29:
                    45:8f:7b:5f:03:14:9e:ec:67:7a:a0:61:1a:ad:70:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:C5:26:5B:E1:20:18:BB:C9:D0:54:6B:7C:54:E7:0A:C4:FF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f10f9aa9-c230-3e13-974d-a698f402248c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:de:9b:b2:71:01:03:9e:4c:55:e9:91:a2:1a:d9:23:69:
         66:84:49:76:e2:3c:e0:ed:e8:1b:a3:0e:a5:ac:8f:26:2f:48:
         c9:be:a1:dd:6c:77:df:f1:02:2b:32:68:a6:59:d1:eb:fb:db:
         ec:f5:cc:0f:e1:64:ab:92:79:6b:32:18:15:8f:4b:1c:8b:fe:
         2f:4c:14:78:57:e5:b2:17:1b:d6:42:09:24:cf:eb:04:7d:73:
         24:b6:4b:f5:20:16:61:8b:49:30:87:7c:e5:57:04:14:41:6e:
         fc:be:46:51:1e:8a:d8:c4:3a:95:99:78:01:5e:53:63:59:f4:
         1b:9f:7d:83:2f:79:2c:10:bf:ac:6f:4e:38:89:9e:42:2b:2c:
         8e:8c:d2:4f:54:11:4c:e2:21:64:7a:cb:3c:cc:90:80:57:95:
         86:e9:bf:e6:d8:51:76:d6:a6:d2:1a:f4:92:7f:4b:89:90:84:
         70:f5:9c:45:71:2b:61:93:d1:81:bd:c1:5a:6e:8b:94:18:87:
         5d:57:dc:58:86:0d:4c:ce:44:5a:cd:5c:d8:ae:b3:78:28:15:
         c9:78:83:75:32:a8:b9:c4:0d:f4:6f:58:2a:99:7a:bd:ff:f7:
         75:66:01:6c:cd:13:60:04:fe:5a:70:ba:3f:2e:4a:9d:56:6b:
         62:31:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:40:07 2024 by rpki-client on console-fra.rpki-client.org