Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
File:                     b2baff77-b625-3202-8580-45c0ed7a13c0.roa (raw, json)
Hash identifier:          WIeHdkESHxelV5hSrDui9oNZ5R71jGHV21DfR51CdHg=
Subject key identifier:   2F:CA:10:E4:F2:CE:33:BB:E1:64:52:B4:FD:8E:9C:5E:1B:3A:6C:F3
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584562DDAE05F65B827322B4758C
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
Signing time:             Sun 31 Mar 2024 03:41:57 +0000
ROA not before:           Sun 31 Mar 2024 03:41:57 +0000
ROA not after:            Sat 29 Jun 2024 03:41:57 +0000
asID:                     212238
IP address blocks:        72.14.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:dd:ae:05:f6:5b:82:73:22:b4:75:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar 31 03:41:57 2024 GMT
            Not After : Jun 29 03:41:57 2024 GMT
        Subject: CN=627ad282-ba35-4d91-be23-170c4599e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:46:05:3b:e0:87:90:ff:61:53:54:6f:87:
                    c8:36:d4:2b:d3:92:fa:ee:2a:9b:90:a9:e2:25:1a:
                    31:ab:cb:a6:4b:fd:8a:60:3f:cb:06:cc:a0:25:ac:
                    a9:e5:e6:aa:30:cb:86:6b:2c:bd:ce:9b:b4:57:a2:
                    1b:2c:8d:c2:b9:c6:5b:0e:a8:97:3e:6a:12:44:c9:
                    26:9d:2c:cd:e1:c6:b4:79:43:3d:64:62:f2:c3:85:
                    91:f9:80:5c:f4:4f:4b:bb:eb:56:71:5e:3b:2d:0f:
                    8f:2b:ef:6b:aa:39:2a:90:dc:55:4a:b4:61:ec:62:
                    46:56:85:98:6b:72:30:5b:b2:f0:46:6e:6c:41:ef:
                    ed:1b:1c:a3:4f:80:1a:a5:54:40:e6:aa:9a:43:bf:
                    d0:80:e8:e8:93:f3:91:74:61:b6:8d:f7:7d:5c:df:
                    7f:e7:cb:ca:a5:06:68:da:f9:fa:e8:5c:63:99:1e:
                    6a:af:93:18:88:74:cd:ba:23:f9:79:99:ef:ef:f7:
                    b3:e7:62:24:66:d4:0f:5d:cf:39:27:f4:a3:1b:e9:
                    17:e1:49:04:f5:c8:00:3e:4f:9f:27:5e:f5:cb:29:
                    44:4f:6d:02:4f:10:13:86:73:84:46:e8:81:b0:f6:
                    5b:8d:26:67:64:06:12:ff:ed:8c:d4:51:41:8b:3e:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:10:E4:F2:CE:33:BB:E1:64:52:B4:FD:8E:9C:5E:1B:3A:6C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:22:ab:7d:95:43:0e:88:e9:4e:c9:45:00:e3:0b:2c:ff:
         68:41:6a:15:26:6f:a2:8d:43:00:ea:35:5b:00:24:91:df:1f:
         73:57:85:51:b4:c0:1b:08:25:9e:26:5e:7f:45:74:fd:21:05:
         59:9a:8f:78:09:f9:b8:54:28:d7:0c:52:c7:b6:b4:85:df:5c:
         fa:41:e4:91:f1:70:9c:a7:e9:5a:57:75:6d:54:13:6a:d6:a3:
         7f:3e:af:68:7f:8d:a7:97:42:bf:4f:d8:44:a2:15:e8:61:dd:
         9f:25:8b:2c:45:ea:d3:73:09:84:ed:bf:9a:01:58:21:9b:92:
         42:cc:3d:d5:37:5f:ae:9c:48:ee:de:c7:53:b6:c0:14:53:8b:
         2f:42:fb:a3:a0:df:75:92:2e:88:e4:95:4d:c8:83:57:5d:81:
         e9:ec:90:b6:a7:de:e4:ce:fc:34:a7:c1:5d:c2:dc:01:c6:2b:
         90:68:7d:b2:0e:1c:3a:68:62:53:c5:21:5f:a8:ea:5e:16:e5:
         a3:69:23:fd:33:e7:f2:d2:31:f6:a6:29:db:78:ce:4e:3b:f1:
         47:2e:47:3b:c2:d7:fe:bb:21:b4:31:ff:99:28:2e:c3:3a:35:
         77:60:ed:4b:40:32:4a:fc:f5:76:25:32:cc:81:fa:db:d9:cc:
         ce:0e:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:02:24 2024 by rpki-client on console-ams.rpki-client.org