Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa
File:                     5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa (raw, json)
Hash identifier:          SeEfzZqIRC1szVMjccYv7FzylYOlGWXAkkM+PKIFzZc=
Subject key identifier:   DD:06:06:E3:BF:57:B8:72:24:B4:BE:72:0F:BF:F9:61:23:A6:51:BA
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584777C6387617D221D7926F34F0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        72.14.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:38:76:17:d2:21:d7:92:6f:34:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=7024b528-2bf8-4191-8b91-17c4211210f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:af:30:bc:7c:08:cc:cb:7f:7f:87:c8:3a:
                    27:a9:76:98:4e:99:0b:a2:99:23:d3:91:a7:8c:6c:
                    c3:e6:99:09:3c:62:17:7b:0a:3e:b8:4d:2a:e6:57:
                    8f:11:76:26:6a:54:05:0d:76:8e:06:03:07:af:e5:
                    d3:8d:c5:c2:c4:5b:cf:34:1b:a5:a7:9e:62:79:f2:
                    ae:38:c7:99:7c:8e:83:94:3b:ec:f8:04:25:f2:fa:
                    99:82:04:40:61:2a:58:6a:fd:6b:7e:ca:22:23:ea:
                    ef:27:4d:26:4e:6d:99:fb:43:32:26:cf:cc:c5:61:
                    f7:c6:e4:ef:ef:2a:46:f6:8a:0c:4f:2b:46:02:d9:
                    63:4c:b1:c4:c2:5e:ec:e5:95:42:65:ae:cc:32:90:
                    52:3d:dd:08:0f:04:b9:a9:1a:dc:b4:1c:67:d1:06:
                    45:a7:21:5e:3d:c4:c4:96:92:8a:0d:46:fd:fd:06:
                    51:8b:b1:7a:b5:df:7a:6c:9b:3c:9e:f6:ab:69:c0:
                    9c:0c:93:fe:f5:7b:29:82:d7:61:eb:6c:48:b3:db:
                    5f:a5:69:70:8e:a2:8a:9d:87:6a:1c:67:ff:3d:45:
                    83:26:5a:73:1b:1d:ee:ed:cd:4a:ae:61:64:99:b7:
                    85:b0:0b:f1:df:a2:62:9a:37:23:45:b7:a8:b5:77:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:06:06:E3:BF:57:B8:72:24:B4:BE:72:0F:BF:F9:61:23:A6:51:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:58:67:0c:86:69:53:fc:0a:a1:ce:7c:b2:17:7e:af:dd:1b:
         e7:8b:89:4c:c4:ef:d7:11:5b:68:f1:0c:61:21:e8:1e:1a:8f:
         de:61:1b:e7:ee:b5:bd:5b:a8:44:c2:8a:17:ea:62:c7:c3:3a:
         c7:4b:b1:ed:60:2b:40:66:ff:de:12:e9:99:29:0d:13:bc:a6:
         61:26:92:a0:27:0f:88:f0:e4:ac:85:77:78:92:bc:c7:31:ef:
         62:95:18:ee:92:66:4b:e2:1e:78:9b:68:1c:a4:ff:4c:bd:58:
         c0:af:52:ae:0c:bf:90:28:6c:a9:b3:c8:ba:67:ae:e7:2e:20:
         cf:aa:61:c4:d5:62:c2:f4:71:d9:76:81:cf:1b:c1:f7:aa:1b:
         79:9c:16:77:43:3b:46:44:ad:be:43:eb:16:a2:43:41:5c:b6:
         88:a9:c1:e1:99:16:a6:f9:7a:91:77:72:b0:bd:d7:d1:cc:1a:
         d0:e5:47:84:2c:26:e5:fb:cd:c0:69:7a:63:f6:3b:8e:da:a3:
         d5:90:cc:df:92:fe:62:ea:6b:5c:76:aa:e9:27:da:48:94:3e:
         11:25:9c:f0:bd:ce:c7:c4:eb:eb:ab:4c:ff:ce:df:a6:3e:a9:
         41:8d:44:d7:de:d9:4c:e7:2e:53:65:d2:03:a5:66:19:e7:f5:
         66:d6:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org