Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
File:                     aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa (raw, json)
Hash identifier:          c5jmNc6bXKfm15fH3yf5FfKEPVEcJDoWkEUY406+dws=
Subject key identifier:   91:EC:1A:01:74:A7:93:BD:7E:8B:C7:FF:24:69:B8:25:9C:F9:4C:9C
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F43285845BA7E2B1B91FBF9D8EE3090A2
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        72.18.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2b:1b:91:fb:f9:d8:ee:30:90:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=1ba3d55f-732d-41fb-bd7d-410b467c7b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:f6:e5:cf:85:0d:23:52:be:95:87:dd:5e:
                    53:e6:37:25:b1:86:aa:a6:23:8c:7e:f9:59:10:c8:
                    4c:0d:16:cc:24:ad:77:d7:45:6e:a2:9c:aa:58:70:
                    bc:c7:78:af:47:b3:6f:80:11:a7:49:ba:9b:ae:75:
                    4e:62:76:58:50:98:04:50:09:b5:6c:93:de:34:f9:
                    f7:a7:8a:f9:13:cf:f5:33:78:7b:fa:e0:fb:c7:78:
                    fb:48:33:54:95:f4:a6:2b:93:df:63:db:f5:40:45:
                    94:0b:17:b8:9c:42:cb:fc:81:de:c3:b3:aa:42:a6:
                    5a:2e:fd:fb:a7:e8:47:21:04:93:38:57:ec:7f:cd:
                    40:66:49:3b:6f:83:84:d9:d9:62:64:d1:3e:88:f9:
                    d6:5c:12:d3:0b:2a:c5:58:47:99:5d:6a:75:c3:0f:
                    22:cd:18:b4:61:8a:ed:63:28:2f:c8:0e:f4:4d:55:
                    24:b3:51:76:4f:30:62:02:4c:91:41:95:8f:4c:8f:
                    3c:f3:85:2d:f1:c3:f6:53:3b:9c:24:57:62:48:da:
                    7c:b4:09:25:81:c7:cc:56:4f:e3:4b:d7:76:21:a0:
                    6d:7c:1a:54:c6:52:96:96:55:d7:e9:fd:88:d2:0e:
                    e9:75:d2:f8:3e:a2:aa:53:8e:12:ef:ad:28:61:03:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EC:1A:01:74:A7:93:BD:7E:8B:C7:FF:24:69:B8:25:9C:F9:4C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:96:f6:3d:f2:01:19:7b:99:71:6f:19:92:72:d6:e2:10:72:
         e5:8a:a6:34:7e:6d:43:6b:68:6f:4e:b4:51:4c:54:60:ac:de:
         84:9e:39:ee:39:0a:8e:c4:6a:55:e7:e0:05:cb:db:a7:d8:e9:
         e5:ac:d7:52:1f:74:fc:88:e2:c1:55:82:30:c8:a9:52:c7:f5:
         5d:6f:d2:2e:24:d3:cf:d9:be:17:18:47:34:aa:12:b5:45:50:
         e1:2d:8b:62:ee:19:91:67:98:28:d5:43:d6:13:e2:4e:84:d9:
         33:64:15:b1:23:5a:b8:38:a7:6d:72:ff:df:85:96:8f:bb:60:
         b7:5c:41:07:87:d3:7e:8b:3c:89:c1:45:a4:54:9d:8c:11:85:
         48:d1:b7:a5:d6:90:47:3c:98:05:d2:70:03:38:cd:51:15:d9:
         79:46:fa:e9:cf:56:32:13:a2:b6:c4:f9:25:02:61:8b:2e:70:
         e7:18:12:05:61:ef:0f:69:14:09:6a:0e:10:a8:8d:b8:64:ee:
         af:65:f7:a0:98:d5:b0:ed:20:8f:fc:56:18:da:92:66:cb:e8:
         9b:c1:d0:5f:a5:b7:1c:e4:10:92:ed:d8:7c:ab:0c:55:a6:09:
         9b:26:2f:f4:51:bf:f6:62:4a:e8:bf:5e:cf:62:05:e3:6e:ee:
         67:a5:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:33:05 2024 by rpki-client on console-fra.rpki-client.org