Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd3b03f-f283-3045-892b-f340d59cfc02.roa
File:                     fdd3b03f-f283-3045-892b-f340d59cfc02.roa (raw, json)
Hash identifier:          y5pWpUCJcdZMugHVK+oaUomAhp4ODJfczArbLrV9VSw=
Subject key identifier:   D9:C8:26:62:E8:43:AF:69:89:CE:01:F0:98:0E:F6:07:55:C6:49:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584757AB79604DA0DA512B99EB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd3b03f-f283-3045-892b-f340d59cfc02.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     6167
IP address blocks:        72.104.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:79:60:4d:a0:da:51:2b:99:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=5e42cc60-9bf3-4a41-9745-65e10399565d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:c9:a6:5e:79:ae:ad:5f:3f:c0:1b:c4:7d:
                    cb:f8:58:4a:ed:60:23:55:0a:ec:53:c4:12:34:af:
                    96:7e:d8:fd:83:89:8e:97:c6:bf:08:92:86:fe:a3:
                    3d:95:84:59:5b:81:8c:7f:18:7e:ea:f5:4b:40:fb:
                    28:88:25:8d:6f:52:48:55:45:52:64:8e:ec:cb:78:
                    5f:00:78:00:98:47:9b:b9:fb:ee:8e:ba:2f:24:9d:
                    d4:31:cf:74:50:73:ee:36:48:a0:07:32:4e:e4:91:
                    52:74:1a:ad:a4:27:38:82:54:67:78:33:a4:61:f5:
                    55:30:0d:68:3d:53:20:2a:d0:89:d8:ee:66:19:59:
                    82:35:7b:9a:b6:0f:2a:b4:2c:77:e0:e1:6f:09:a6:
                    de:11:8b:ea:18:a8:54:4f:5d:1a:fe:97:75:a6:60:
                    75:e4:ba:1e:b3:09:19:f2:a1:c0:85:2b:f8:03:fb:
                    39:33:16:0d:cf:1c:59:d2:cb:b9:5f:8d:5d:a8:1d:
                    84:ee:74:9d:92:da:1e:2d:ab:90:81:37:9a:a4:ac:
                    8c:af:ef:d7:a2:42:3a:75:f4:3c:15:99:5f:db:a7:
                    d9:b4:2e:3c:94:40:a0:c3:bc:b1:e4:d9:d8:0f:33:
                    e4:ed:d5:82:c4:e2:64:a3:2e:a9:82:5b:ce:16:2b:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C8:26:62:E8:43:AF:69:89:CE:01:F0:98:0E:F6:07:55:C6:49:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdd3b03f-f283-3045-892b-f340d59cfc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:a2:de:3d:e1:4d:6a:18:01:4d:e0:65:d3:77:57:39:99:
         de:27:f8:5c:58:9c:79:0b:82:4d:ea:96:0d:f0:79:28:42:d5:
         94:6a:10:10:23:1a:e1:86:d5:e6:89:0c:f0:34:19:20:69:76:
         e9:a8:b1:c7:63:93:22:5c:a8:0a:1c:cb:5a:d1:d5:2f:16:d7:
         3d:2e:13:fe:00:46:9a:c7:9b:c2:b8:3d:6c:54:38:af:7c:18:
         59:73:47:54:0f:f1:5d:78:79:6f:32:e2:68:29:e7:16:44:73:
         ba:0f:b2:ed:bc:f6:e3:91:f9:dd:56:56:c7:d3:8f:49:b1:77:
         7e:c1:4a:23:51:13:2e:23:59:43:dd:16:0b:ca:82:ac:d1:38:
         6e:2e:9b:2d:96:ac:75:5e:f3:39:84:05:48:d8:18:99:4e:72:
         e3:0b:d8:d6:41:e3:55:39:6f:bd:a1:b7:04:bd:99:dc:c8:af:
         00:39:35:a9:7d:f1:46:9a:93:0e:83:17:70:46:c3:08:08:c6:
         68:a3:aa:a0:3a:5d:4d:ad:7d:b0:39:52:38:66:55:6a:96:20:
         cd:4f:72:dc:d1:c6:d6:b4:b7:d1:86:ab:27:5d:03:9f:13:e4:
         08:9b:21:13:d4:25:e3:a0:6d:0b:b0:ef:c1:f9:7e:bb:34:0e:
         9f:54:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:04 2024 by rpki-client on console-fra.rpki-client.org