Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42e4342a-118b-348e-9091-8014f9b23d9d.roa
File:                     42e4342a-118b-348e-9091-8014f9b23d9d.roa (raw, json)
Hash identifier:          R4lQIlDn2akNAuIHlSCsOxIOYUW9atrydJCRsPG6IpM=
Subject key identifier:   7C:F8:32:DC:2A:2D:B9:75:A7:3B:89:AF:1E:A2:4B:98:A4:FB:D1:86
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584526A5AC9A87896CE6AEE95E00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42e4342a-118b-348e-9091-8014f9b23d9d.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     834
IP address blocks:        72.14.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:ac:9a:87:89:6c:e6:ae:e9:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=b5eadf80-94ef-45ae-b76a-cde75f92bc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2b:81:dc:7a:35:e0:d6:1c:4d:d2:2c:bb:da:
                    50:bf:81:58:8e:a3:3e:78:5f:08:0f:78:0d:d8:ed:
                    94:f5:13:eb:64:61:e8:42:52:13:b8:af:35:39:5f:
                    36:ac:b7:96:40:42:7e:89:5c:19:b4:53:e0:7a:d1:
                    d7:56:85:4f:3f:a2:8c:36:11:70:7a:b0:f0:33:57:
                    9a:92:69:61:ca:ca:77:ca:10:7d:79:88:70:9c:64:
                    88:ab:95:46:bb:8a:8c:39:b8:fc:cf:cd:1f:b0:1b:
                    44:e6:a0:89:64:53:6f:53:44:f8:6c:4f:ea:72:7c:
                    b0:82:2e:de:46:20:8e:90:de:6d:5b:89:ad:5a:ab:
                    ba:7e:f2:db:30:9c:8d:d1:15:55:34:a0:ed:13:b5:
                    d6:d0:a3:2d:ea:8e:8c:3a:97:05:cb:01:c9:16:ba:
                    43:35:a8:40:e5:2c:1a:ba:2e:b2:04:63:3d:e4:ac:
                    42:19:6c:0c:e8:d2:fc:59:8a:b1:03:1f:48:a8:81:
                    cf:f8:17:a9:90:3c:9b:b1:33:b9:b0:55:59:b1:e9:
                    5d:13:d9:7f:1d:1d:ad:5b:8a:87:80:ed:49:b3:b7:
                    d1:7f:0b:a3:8c:25:48:1c:97:54:d5:ae:25:3a:4e:
                    bd:db:8e:fe:d0:bc:f9:83:e2:3a:a5:aa:25:42:c4:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:32:DC:2A:2D:B9:75:A7:3B:89:AF:1E:A2:4B:98:A4:FB:D1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42e4342a-118b-348e-9091-8014f9b23d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:f0:e7:a8:d6:43:29:2e:d6:61:2c:99:61:75:0d:e8:9c:
         fe:c0:af:44:8d:6d:c7:82:40:d1:5e:2a:14:eb:7d:db:0f:34:
         0a:fb:7c:56:82:cb:48:1d:e9:f7:f0:4a:6d:01:c2:db:dd:a1:
         d4:b2:8c:7c:3b:3e:ac:5b:d6:76:38:b5:03:4d:57:b1:36:05:
         19:f7:08:bf:b0:50:c5:cd:65:e6:ab:60:9c:4e:04:9a:66:ee:
         ba:62:51:57:df:6c:8e:36:96:5b:4c:d6:a3:dc:d6:4b:a8:a6:
         19:d5:15:05:58:d7:95:10:89:cc:b4:34:4b:33:e0:cb:be:5b:
         1a:42:31:da:3e:37:ef:12:46:dd:d9:73:a1:f2:83:7f:7b:f4:
         13:3b:87:0b:73:86:8b:31:ac:82:9a:05:6e:5d:16:17:a2:b6:
         30:4f:97:f3:7f:a7:5b:31:05:05:d6:1d:7f:d3:09:0b:5f:24:
         d1:a4:1c:8c:07:c0:15:a5:08:0d:ca:cd:d2:35:4a:5f:07:f3:
         3c:83:97:b3:c4:26:a9:59:3d:38:e5:30:21:1e:35:15:37:4f:
         19:4b:12:f1:ce:ba:cb:ff:36:12:0e:d6:aa:b5:37:3f:3b:7f:
         cb:06:24:a8:d5:f2:59:06:9a:eb:61:5b:32:cd:3c:82:13:93:
         0f:27:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:53:32 2024 by rpki-client on console-ams.rpki-client.org