Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
File:                     041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa (raw, json)
Hash identifier:          Ab/02qJAbjFjPCeThXbH5OyRx/NDz9NxDcjDzqXYNn0=
Subject key identifier:   A4:65:B2:FF:CB:02:96:63:2A:69:0A:93:89:1C:6E:32:6E:B7:74:66
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F432858473095F23E66D5BA94CFFE2800
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        192.184.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f2:3e:66:d5:ba:94:cf:fe:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=e4e088ca-7e15-4a44-98fa-dbb177ce431a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:84:b0:69:31:0a:29:3c:1a:68:53:b8:6b:
                    a9:0e:97:e0:ff:e6:5f:7e:d2:75:2d:6c:64:5d:d2:
                    c9:7f:21:f5:4e:df:5e:cd:1c:54:f1:64:8f:b0:e2:
                    83:bc:8a:b4:1a:07:5a:01:79:08:ec:38:33:0d:19:
                    96:7f:6f:be:e8:28:52:b3:0f:d2:2f:5a:f1:a8:79:
                    93:5c:72:66:06:70:6d:ee:11:b4:cb:0a:0f:08:d2:
                    ff:53:2c:5f:ff:aa:09:4e:21:09:44:72:ce:d1:6d:
                    3a:c1:39:c7:31:05:59:11:22:61:34:5d:c0:89:b3:
                    79:6b:19:3a:31:95:12:87:59:c9:6f:9e:e9:e1:82:
                    99:62:0e:c3:e2:4e:24:8b:2b:25:a6:21:14:cd:f0:
                    b3:99:3e:d4:49:5a:ea:87:c3:46:2a:79:00:ee:b8:
                    0c:b7:26:82:ab:d6:8c:74:5e:6b:21:ea:c0:f9:ca:
                    92:4f:33:4a:a4:ff:f2:87:e1:83:05:64:5a:4b:e0:
                    62:fb:3f:7c:05:8e:16:18:5d:ab:bd:1f:36:e7:78:
                    4d:16:a2:a2:7b:9b:af:c1:5d:c0:4a:54:39:3c:97:
                    41:0e:90:ef:11:2d:e8:63:9c:2b:a2:62:a6:e9:12:
                    a8:ed:2f:7c:7a:00:04:d3:71:4b:51:94:55:82:4c:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:65:B2:FF:CB:02:96:63:2A:69:0A:93:89:1C:6E:32:6E:B7:74:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/041ab3d3-7bb1-317e-aaa2-9261e22ebcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:38:cb:75:bd:ab:fb:0b:37:b7:d1:0e:51:f5:f8:45:d5:
         19:59:00:e9:40:fb:8f:37:07:cd:01:d1:e9:ff:8c:ce:8a:a8:
         42:a5:b0:01:1a:d3:e9:03:5e:89:3a:b3:52:b7:76:5b:ed:8f:
         1b:cf:5d:bf:f2:9f:81:b2:da:d0:31:b4:ec:bc:1d:20:01:54:
         47:ef:4c:aa:3d:79:f2:ad:08:ec:6e:66:73:e7:e6:29:9b:a2:
         4e:46:bf:54:af:00:84:ea:3d:cc:84:0f:cb:55:03:4b:43:db:
         dd:0a:37:65:3a:d4:41:bb:cd:19:18:0e:5e:1d:49:ae:bb:72:
         63:03:c1:42:e9:e8:f9:6c:7f:30:63:23:a5:4f:fe:a8:c1:0d:
         49:8c:26:bb:bf:29:56:aa:66:79:35:34:83:9d:3b:13:d7:97:
         d2:1f:57:07:9f:42:8f:db:94:d7:d2:80:af:39:52:17:5d:8b:
         da:fb:db:4a:a0:36:ee:25:68:b9:c6:03:07:75:dd:71:83:10:
         73:2f:a5:5b:53:ce:b4:9a:71:e5:f7:aa:f5:b6:c5:d1:21:57:
         ac:71:05:83:7c:86:38:04:69:43:33:a9:3d:b9:de:04:76:ab:
         48:66:83:7f:76:18:50:53:cf:10:4b:bf:18:92:3e:78:75:5a:
         2d:32:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:08 2024 by rpki-client on console-ams.rpki-client.org