Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa
File:                     5e9f9539-e9cd-3978-849c-cb39566f29fe.roa (raw, json)
Hash identifier:          +X2XsS3DcL2yf2kKGs6U5sD+5qhUpFs0LS0hm0NzHSc=
Subject key identifier:   B8:7F:86:37:0A:EC:A7:1C:C2:3E:CC:4F:8C:24:1A:FA:58:58:0D:55
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285848A565F1666BE943A7E2C9BBC0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     834
IP address blocks:        72.14.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:f1:66:6b:e9:43:a7:e2:c9:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=930316b3-521b-419d-a520-96abdc0d643b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:f3:de:9e:23:d5:7b:d6:60:5a:90:12:5c:
                    87:0b:83:65:2b:9d:7b:57:72:91:8e:87:74:e9:4e:
                    3b:d2:45:60:27:59:1e:73:69:ed:a8:fb:78:9b:de:
                    3f:82:08:a4:df:53:92:d7:ac:33:15:d5:0b:47:7f:
                    f6:9a:5f:b6:6c:4a:c2:e5:81:46:1f:fa:d4:1e:a3:
                    ac:db:20:27:43:8a:12:4a:5b:03:9f:a9:b7:d9:60:
                    45:8f:bf:82:04:fd:a5:5e:7a:bc:a1:fc:57:a7:6a:
                    77:18:a0:9d:21:07:ca:40:2f:35:fe:f7:a5:1b:57:
                    b6:8f:6f:81:56:94:b9:31:20:a5:75:19:5e:63:86:
                    53:b0:b1:74:11:15:d3:d1:31:5c:db:6f:87:c7:a1:
                    ee:87:d7:1f:2f:6a:30:3d:33:93:fc:16:07:f9:fd:
                    3b:1a:19:95:7c:d5:5f:88:39:62:09:af:6b:64:25:
                    98:68:90:58:fd:6f:89:70:da:0b:38:2b:af:ce:46:
                    eb:cd:71:61:53:a3:e2:97:3f:e6:24:af:e7:c2:7f:
                    3b:fb:73:74:4a:4f:0f:68:73:e6:fb:bb:31:50:c5:
                    93:6b:88:21:bb:4e:7f:18:d0:86:f2:4a:98:78:0a:
                    ec:8d:3f:63:16:f9:1e:88:b6:cd:a3:7a:78:ff:49:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7F:86:37:0A:EC:A7:1C:C2:3E:CC:4F:8C:24:1A:FA:58:58:0D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:fe:4a:2f:51:d4:6b:73:b9:c5:30:e2:f0:25:36:8d:44:
         ef:81:5a:20:4e:15:72:dc:5d:7d:97:9e:b4:ce:e0:bb:cb:a7:
         60:ef:ac:bf:d8:d5:87:84:9c:ad:ed:9f:ca:00:e4:87:e6:8b:
         5a:46:66:a3:c8:9c:20:8e:62:fc:c1:a6:71:05:6f:0b:23:36:
         78:4f:94:08:e0:21:2f:1a:7e:07:1d:58:6b:70:14:7b:03:cb:
         8a:e9:9b:79:f6:c3:df:d4:0f:ed:b9:04:86:e4:70:d5:c1:c5:
         67:ff:f2:31:fb:c4:ee:e6:68:2c:23:d6:c1:68:fa:49:a0:52:
         c5:3a:12:d0:4e:b8:c2:48:7f:a6:c2:1c:23:f8:d9:fd:c9:69:
         55:9a:74:35:12:e1:cc:ac:51:4b:3e:49:51:62:79:bf:c8:35:
         e3:83:c2:e5:69:d7:c4:ed:15:92:86:d9:60:49:29:8f:b6:06:
         52:21:31:1a:6f:ce:20:fd:9f:71:bf:3d:3d:2c:9b:ed:6b:2c:
         ce:f6:54:58:a1:43:57:59:71:39:ce:e5:3f:62:4c:68:7a:95:
         6b:d8:77:85:e1:c8:7b:11:94:bd:ed:69:45:d4:59:6e:29:9e:
         1b:6b:8b:af:a9:12:ac:d2:25:06:b8:80:42:2d:98:ca:03:1c:
         98:9e:0b:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfFma+lDp+LJu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTMwMzE2YjMtNTIxYi00MTlkLWE1MjAtOTZhYmRjMGQ2NDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx3z3p4j1XvWYFqQElyHC4NlK517V3KRjod0
6U470kVgJ1kec2ntqPt4m94/ggik31OS16wzFdULR3/2ml+2bErC5YFGH/rUHqOs
2yAnQ4oSSlsDn6m32WBFj7+CBP2lXnq8ofxXp2p3GKCdIQfKQC81/velG1e2j2+B
VpS5MSCldRleY4ZTsLF0ERXT0TFc22+Hx6Huh9cfL2owPTOT/BYH+f07GhmVfNVf
iDliCa9rZCWYaJBY/W+JcNoLOCuvzkbrzXFhU6Pilz/mJK/nwn87+3N0Sk8PaHPm
+7sxUMWTa4ghu05/GNCG8kqYeArsjT9jFvkeiLbNo3p4/0k8JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLh/hjcK7Kccwj7MT4wkGvpYWA1VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWU5Zjk1MzktZTljZC0z
OTc4LTg0OWMtY2IzOTU2NmYyOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABad/kovUdRrc7nFMOLwJTaNRO+BWiBOFXLcXX2XnrTO4LvLp2DvrL/Y
1YeEnK3tn8oA5Ifmi1pGZqPInCCOYvzBpnEFbwsjNnhPlAjgIS8afgcdWGtwFHsD
y4rpm3n2w9/UD+25BIbkcNXBxWf/8jH7xO7maCwj1sFo+kmgUsU6EtBOuMJIf6bC
HCP42f3JaVWadDUS4cysUUs+SVFieb/INeODwuVp18TtFZKG2WBJKY+2BlIhMRpv
ziD9n3G/PT0sm+1rLM72VFihQ1dZcTnO5T9iTGh6lWvYd4XhyHsRlL3taUXUWW4p
nhtri6+pEqzSJQa4gEItmMoDHJieC2A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:05 2025 by rpki-client