Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/06c8e5b4-8714-309d-ae4a-2d2275f769fc.roa
File:                     06c8e5b4-8714-309d-ae4a-2d2275f769fc.roa (raw, json)
Hash identifier:          RrOtWKRIj8JsUdWfS9mwRcvkEX9gewWs69goBhZnSsE=
Subject key identifier:   0E:F8:62:20:A2:C4:F2:30:2C:65:37:0B:FA:D0:59:16:C9:E1:A4:1C
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584777C638924AB3B04BA50A3680
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/06c8e5b4-8714-309d-ae4a-2d2275f769fc.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        72.14.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:38:92:4a:b3:b0:4b:a5:0a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=7787870b-24b8-4c17-96ee-c3d9a50fa7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:91:df:27:d4:8f:2f:4e:96:42:3b:b2:e3:
                    5e:22:37:da:cf:4b:b6:5e:b0:47:0e:83:9d:27:9e:
                    c1:33:99:f1:0c:b2:39:db:d6:1d:b5:13:e7:47:1b:
                    ed:ec:a3:23:4f:97:25:38:a7:19:18:6d:a3:0d:9e:
                    f9:4c:09:97:b1:35:a5:39:56:e1:59:1f:a2:57:4e:
                    52:3c:06:e7:29:41:75:d9:3f:1d:5e:1f:ec:9f:3b:
                    d8:9e:f6:07:3a:41:08:4d:45:47:0f:f1:7f:0c:e9:
                    a7:ff:bc:0b:de:22:20:d2:d0:40:2d:59:94:ff:47:
                    11:5b:0f:01:7a:6d:a1:dc:bd:9c:d8:5b:26:fb:6c:
                    6d:ae:33:c6:6b:bc:11:67:d3:48:27:0e:77:1a:d0:
                    ce:f7:20:1a:03:f8:5c:49:7b:9a:de:6f:e5:8b:91:
                    26:82:73:3e:77:11:2c:59:d6:52:35:aa:63:f8:1a:
                    a1:a0:17:d8:7d:ee:db:8b:5f:cf:33:7a:f1:ff:db:
                    82:fc:aa:73:4a:8d:0c:38:1e:97:93:02:19:f7:f5:
                    42:4f:60:3c:09:dd:cd:52:7a:ee:35:48:2c:fb:b1:
                    ce:d5:64:87:10:48:5e:bd:90:95:fd:06:29:0f:51:
                    da:75:a6:39:b2:f9:87:b3:73:15:16:99:2f:d1:f0:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:62:20:A2:C4:F2:30:2C:65:37:0B:FA:D0:59:16:C9:E1:A4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/06c8e5b4-8714-309d-ae4a-2d2275f769fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:de:10:58:37:52:93:1a:35:7d:e5:7c:f2:2e:5a:06:90:3f:
         9b:0f:d4:e3:6c:a5:fa:9e:17:fc:71:13:54:a1:ed:76:f6:0b:
         b2:80:e0:4f:0e:3f:a2:9a:57:82:61:86:ad:ac:a9:a5:47:cc:
         70:f0:14:e9:da:32:a6:e3:d5:1f:0d:7c:c2:63:a6:a2:c4:ea:
         85:d2:bf:47:e6:2d:c2:c8:2a:d5:1b:c1:b7:e1:6d:d4:0f:50:
         56:c7:f7:c2:f0:dc:f5:d7:7a:4f:95:9d:37:0a:42:4d:ca:e8:
         d0:fe:00:a4:aa:75:d7:46:2a:18:54:f8:40:c3:da:75:12:e0:
         74:ff:9b:6a:19:43:d4:91:03:c0:03:85:9d:80:4e:98:14:6b:
         60:99:f5:5b:16:7f:00:3f:7b:53:c4:4f:43:08:31:14:f6:f6:
         bc:be:6e:29:c0:87:7e:1b:82:18:8f:45:6a:45:99:9b:9f:c2:
         1c:ef:57:d2:0b:f7:95:b7:b0:2e:ec:fc:1d:79:eb:f4:21:44:
         56:a0:f2:e4:a6:8c:6a:ee:e2:d5:69:58:4a:fa:a4:c1:f3:4f:
         34:54:91:58:21:60:0d:87:18:87:a2:c3:9b:e8:03:bd:89:20:
         53:8d:cd:f3:27:41:5f:30:83:93:6a:d3:8c:f7:a5:be:5a:b1:
         fa:cc:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:16:28 2024 by rpki-client on console-ams.rpki-client.org