Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/8482f6fa-d41d-36f0-b8dc-ae5cb7fedc6c.roa
File:                     8482f6fa-d41d-36f0-b8dc-ae5cb7fedc6c.roa (raw, json)
Hash identifier:          6T+Iz5E/WIyyunvLDeQoKqw89e2pzGXoDBu7mj9bOr0=
Subject key identifier:   06:72:56:47:CA:81:0D:3D:92:3F:AC:9D:EF:A1:7F:BF:5E:81:CB:04
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584569885F95CF0DF97CBAB3E700
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/8482f6fa-d41d-36f0-b8dc-ae5cb7fedc6c.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        72.13.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:5f:95:cf:0d:f9:7c:ba:b3:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=48d46337-a173-4eb9-8413-a133c0b25af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:c5:b1:92:34:af:b2:22:ed:55:57:2f:8b:
                    e9:65:7a:35:b0:90:66:91:23:75:55:31:ff:98:47:
                    ce:da:a1:0e:d1:fb:d0:d0:ff:86:95:6f:1a:de:64:
                    90:71:2f:00:41:c7:41:99:cb:16:86:e9:6d:d0:ca:
                    37:9b:62:d5:4c:98:16:08:87:d0:c6:cb:54:3b:38:
                    f0:0d:7e:8b:05:c7:3b:d8:62:2c:af:e2:24:37:66:
                    56:53:98:4c:4e:87:78:85:33:70:94:44:f8:ed:17:
                    35:06:7c:1f:99:0e:f6:5b:3d:aa:61:b0:a7:2f:30:
                    14:ca:b3:f8:6c:ec:4a:94:58:fa:2b:ef:2e:cb:98:
                    dd:18:37:7c:bb:87:da:67:da:ca:44:55:4c:0a:df:
                    d1:a3:e2:3b:ec:07:48:e5:98:98:54:9d:a9:32:46:
                    06:b3:b3:f6:7a:57:16:cc:a1:5e:5a:7c:a3:67:be:
                    30:e6:3b:d5:18:1c:9b:1e:57:d8:92:fa:e9:30:d2:
                    84:65:67:93:2f:9e:a0:82:a0:40:26:8f:35:99:02:
                    e5:0b:a4:56:5c:ee:11:52:5c:a4:3d:b0:4d:c5:c4:
                    00:e4:ce:2e:d1:2b:2c:f7:c8:1e:c6:5d:39:d7:5e:
                    75:ca:62:74:fa:08:00:a7:6d:3f:0e:50:db:73:0c:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:56:47:CA:81:0D:3D:92:3F:AC:9D:EF:A1:7F:BF:5E:81:CB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/8482f6fa-d41d-36f0-b8dc-ae5cb7fedc6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:79:dc:6d:1b:7c:08:37:ac:7c:ff:7c:93:a1:7d:56:7e:83:
         c4:d5:b3:7a:25:b2:f9:65:96:24:8e:a9:af:8a:d4:62:a2:c8:
         b9:d7:c5:83:0f:c5:dc:ac:33:69:ee:92:bc:cf:76:ee:97:80:
         d7:33:2f:9d:64:c0:82:a5:4e:0b:06:cb:d2:6a:09:ac:7a:39:
         4d:68:25:f3:c2:84:62:96:38:19:34:92:68:1c:c7:59:49:e6:
         39:88:fb:d6:13:b2:fb:93:c7:9d:9d:9d:cc:ba:4b:46:9c:f9:
         0e:f0:a0:bc:29:10:55:de:0b:c5:7d:b6:85:ce:3c:72:36:40:
         d7:8e:c1:f9:c9:bf:09:ef:d8:a7:fe:b4:c4:c3:e3:42:92:ea:
         a4:dc:eb:d0:8d:af:a1:f9:cc:d6:be:a5:fe:38:5c:23:1c:cf:
         1d:49:8f:e8:f9:48:76:c2:1b:65:ef:2f:21:1d:4c:85:33:a8:
         25:34:83:d5:c7:12:30:ff:82:6a:a1:61:f1:8d:a9:07:a0:2b:
         82:39:e8:5d:bc:ba:8f:1b:8d:32:ca:dc:c3:3f:b3:51:11:dd:
         49:d4:27:ad:51:71:7b:15:bf:27:ed:65:86:91:3f:f0:15:16:
         2c:fd:56:b6:a9:ed:b9:b4:21:62:3b:66:00:4a:ea:aa:8f:73:
         2b:e5:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:23:10 2024 by rpki-client on console-fra.rpki-client.org