Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa
File:                     42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa (raw, json)
Hash identifier:          s3TXEmWVRnBwV7wauJ0iTqx7LhdE4zGBPBUPjyv1Has=
Subject key identifier:   A5:AD:81:D4:9F:7A:22:E7:3B:04:F3:19:8D:F9:F9:20:E4:B9:D7:84
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285845304D3FAEAFC831F88ECA5B00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     20454
IP address blocks:        72.14.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3f:ae:af:c8:31:f8:8e:ca:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=f1a4c319-5a12-4061-9875-3231c0130acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:7a:57:4a:9e:54:cf:06:66:6e:18:63:0a:
                    e9:82:fd:43:8f:07:00:a5:f2:11:e4:19:37:c2:57:
                    3f:f7:08:52:05:07:6c:9a:e1:40:f6:77:0e:bc:5a:
                    20:e6:e0:cb:6a:54:9b:fa:f5:7a:f3:07:d1:c5:60:
                    d9:78:9a:83:ae:f9:48:1d:3d:b8:ea:81:9b:5a:22:
                    84:1e:a3:3d:27:c6:78:ff:7e:85:b3:97:68:7b:94:
                    32:8b:8e:f9:1f:54:4c:4f:61:54:55:3f:53:8b:a4:
                    c3:a9:8f:18:23:f6:98:b8:61:37:5f:db:e2:8a:8a:
                    df:8b:09:06:35:7b:1c:e0:ee:f3:7e:f5:61:64:d5:
                    47:19:d0:17:e4:f6:60:94:28:30:27:54:66:da:ac:
                    a1:3b:97:4b:74:8b:9f:4c:94:a3:83:88:35:11:bf:
                    8d:ce:5d:80:6b:53:22:5d:7b:c1:76:eb:c2:3f:1b:
                    cb:31:7d:16:de:6a:0e:ae:59:85:4e:d6:4c:d1:da:
                    dc:28:a8:2c:f1:b1:d1:ae:98:f8:c4:5f:ac:53:e9:
                    2d:19:92:b6:c3:f7:f2:89:44:c8:be:6b:8d:2e:8f:
                    1d:fc:94:72:6d:54:30:34:ff:39:1d:8e:24:71:ce:
                    ad:04:e6:72:6a:d3:82:ba:04:36:d7:42:6e:c0:f8:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:81:D4:9F:7A:22:E7:3B:04:F3:19:8D:F9:F9:20:E4:B9:D7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:3a:9e:a4:f0:46:fb:8e:ef:a5:ba:d5:51:63:29:8f:94:
         eb:e5:c1:30:00:ed:d1:be:34:7f:2a:12:6c:e3:c2:c6:1e:ae:
         b2:16:6d:7e:01:8c:a9:ca:30:64:f1:a5:cd:1f:72:87:76:13:
         2b:38:00:11:6a:11:a2:8e:4f:24:f1:38:11:9a:67:9d:99:2e:
         c4:e7:08:79:0c:34:29:c6:35:91:0d:09:0d:98:ab:6a:07:2b:
         0c:21:bc:5c:dc:e8:82:8e:11:4b:5e:85:10:78:9b:50:e0:c0:
         c9:86:ea:4b:82:19:31:19:43:85:56:2d:f6:48:51:30:b3:3d:
         02:ae:0e:8c:67:90:2c:2e:ce:73:bd:06:35:d5:73:a5:9d:98:
         b0:7c:d9:dd:7c:11:46:14:41:62:26:e9:49:43:70:d1:e0:e7:
         0e:8f:e2:3c:c0:48:27:4e:14:37:37:47:75:6d:21:ff:56:46:
         ea:4a:0f:67:7c:4d:2f:ac:de:be:62:61:9f:ba:78:5a:a5:0d:
         8e:07:54:00:01:d8:2f:89:84:b4:db:02:13:f2:23:45:52:66:
         5d:5c:50:81:64:d5:9e:33:65:6e:38:b4:9f:7b:cf:d3:8c:64:
         c7:16:af:52:f2:ac:fd:c4:ee:81:ad:e4:62:06:93:ce:1d:46:
         01:83:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 04:41:09 2024 by rpki-client on console-fra.rpki-client.org