Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/761cd10f-dfc0-3957-bfd4-35622b411d52.roa
File:                     761cd10f-dfc0-3957-bfd4-35622b411d52.roa (raw, json)
Hash identifier:          7wy2Oa2wBiNaA4tPNVT8ZrC7JpjtQI1NHJfIS44c12k=
Subject key identifier:   2B:D5:D4:2C:C4:99:8F:D4:C8:4E:B1:82:2E:6D:8F:15:11:6A:E0:BC
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584531B2973E27FECC361048CB80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/761cd10f-dfc0-3957-bfd4-35622b411d52.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     398465
IP address blocks:        72.14.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:97:3e:27:fe:cc:36:10:48:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=8597af37-6ab5-43dc-acb6-7e3315302b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:35:09:ed:4f:c3:b6:26:b0:3f:e6:7c:ae:
                    59:2a:6f:9f:4d:34:9a:5a:a4:9b:ed:77:94:8d:1e:
                    b0:17:d3:2e:01:58:97:35:20:3a:dd:52:ea:96:ef:
                    56:52:b6:f0:eb:1d:32:09:70:fe:74:4f:33:62:65:
                    85:9b:37:c4:12:ef:31:1b:a4:ca:26:50:aa:a7:8a:
                    77:4f:dd:59:6c:d3:e7:14:dd:4f:da:cd:95:fe:46:
                    f4:97:f9:9d:d4:d7:a3:4f:e1:a9:e5:2b:6b:19:a0:
                    34:01:e4:b5:7c:81:40:79:f4:94:62:49:27:aa:c3:
                    c0:f8:f7:34:9a:d6:e2:a9:90:19:32:09:3d:37:84:
                    e0:1e:30:66:24:e4:a7:10:7e:a7:7d:f0:92:4a:fb:
                    19:53:fe:d6:8e:f8:3e:54:2d:6c:a0:c9:9e:49:ed:
                    21:d6:c7:a8:42:35:8e:cf:69:3e:67:ee:ea:46:6c:
                    13:5d:71:20:85:8e:8d:f9:54:d0:96:9a:5e:a8:a2:
                    3a:07:36:18:d5:5a:81:da:8e:26:5c:30:c7:9c:db:
                    41:6b:32:5f:54:67:56:75:fb:dd:03:82:b1:83:97:
                    29:8e:79:e1:b4:85:7b:98:a1:41:d7:3b:db:9b:62:
                    1e:76:86:a9:30:0d:9f:e9:a6:4a:b7:c2:55:b1:22:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:D4:2C:C4:99:8F:D4:C8:4E:B1:82:2E:6D:8F:15:11:6A:E0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/761cd10f-dfc0-3957-bfd4-35622b411d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b0:5b:b9:a7:68:04:c0:ba:26:19:0f:8c:9d:d7:b7:71:ca:
         c6:63:a5:70:7a:56:5c:18:7f:4c:43:a2:7b:63:58:23:3e:ee:
         ee:78:b7:67:5c:43:b1:e2:ca:c2:67:8c:ab:1d:c0:2a:39:73:
         70:d7:d6:3d:77:2c:10:50:7f:41:5e:08:1b:e9:ea:94:51:df:
         9c:19:46:bf:fe:78:52:f0:ac:a1:bd:7d:1b:cd:37:4b:32:7c:
         6f:9f:5a:b1:95:e3:05:79:46:1f:56:8d:95:49:bb:bb:c8:22:
         7e:fa:29:7e:89:36:9e:fa:0b:9c:d4:1f:2d:39:94:21:e9:e5:
         38:5b:70:c9:75:3f:b7:77:85:fe:94:c4:4f:cf:35:59:d8:3d:
         e3:a4:5d:93:06:f9:94:a3:51:39:ea:d9:f8:80:7e:fe:90:1f:
         0e:1e:f9:a3:97:69:82:be:87:60:78:5f:6d:05:a0:de:07:b4:
         dc:aa:5c:52:1a:d5:34:da:ba:50:42:70:95:2e:51:ee:84:11:
         6a:10:66:d8:5f:b3:7e:bc:81:81:c1:8b:ec:1b:49:48:a0:3b:
         d4:ac:60:11:32:f0:7a:bf:a1:26:97:54:e2:4f:3b:d1:20:bc:
         a4:ea:b7:30:d3:30:40:cf:16:06:e3:02:3b:8b:56:f5:e4:04:
         dd:e4:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:57:06 2024 by rpki-client on console-ams.rpki-client.org