Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa
File:                     7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa (raw, json)
Hash identifier:          ptrhIfdDF/musw7SzD8Yjy/8PVixnpwgBX5tJ777OIs=
Subject key identifier:   D8:A4:13:22:10:FF:65:A3:B6:FF:4B:AB:1D:17:A8:BD:A6:47:0E:4D
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858475BDB656495ACB5460D56BF00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     20460
IP address blocks:        72.14.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:65:64:95:ac:b5:46:0d:56:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=4e5bc010-dc2d-472d-acb2-36b9ad845186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:25:6c:9d:f6:a5:06:79:8e:29:27:48:5a:
                    f7:87:96:69:25:5a:60:44:2e:22:9e:32:73:13:5d:
                    11:a6:b7:ec:e9:a4:7b:17:ed:53:1b:58:5f:cf:5b:
                    da:5c:65:ac:84:d8:0d:bb:f2:e4:c7:83:84:29:eb:
                    b2:e8:c6:7d:0a:b4:08:08:9a:91:ef:31:0d:84:8b:
                    05:84:9f:8f:69:cd:a5:90:ef:61:d2:80:c4:22:a7:
                    6d:98:db:f1:6d:9b:ba:b6:9e:30:3f:4f:95:af:ac:
                    4b:98:7b:32:27:ef:25:b4:f4:43:fd:88:c2:d6:d3:
                    17:26:6a:8c:47:58:b0:57:38:2c:a8:b8:0b:8f:64:
                    21:70:9d:2e:70:3b:4a:f7:94:0a:14:c9:01:9d:4b:
                    86:9c:b3:23:a8:55:5b:03:99:92:03:76:68:bb:f1:
                    53:a7:e0:5a:32:23:5f:64:cf:0e:a0:45:f2:bc:a3:
                    2b:4b:62:09:18:b1:18:88:33:d9:37:78:56:14:5c:
                    bf:6e:2a:6a:c0:10:ce:2b:49:c0:df:01:7f:c0:cb:
                    9d:ff:a5:97:9c:d6:bf:c0:64:86:b2:ca:0c:7c:ad:
                    97:d4:0d:4b:70:af:10:e6:70:2e:22:9e:a5:8d:59:
                    0b:a7:a1:59:66:42:76:a2:5b:ef:f4:78:c9:0c:dd:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:13:22:10:FF:65:A3:B6:FF:4B:AB:1D:17:A8:BD:A6:47:0E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7d693ec4-74c4-3138-a8c6-cbe6676819aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:a9:85:e7:38:8d:f9:92:64:be:12:43:3d:29:13:20:b2:
         38:43:56:2d:c7:50:f5:58:85:8a:9c:28:c6:29:74:17:b9:32:
         df:76:cb:34:b7:a6:24:3b:7f:c0:66:92:0d:ee:e6:e9:f7:c7:
         8f:3b:b7:1f:0b:6f:ee:30:06:25:dd:8a:21:1d:02:e8:5a:0d:
         26:33:c7:52:59:42:22:8c:13:97:ce:b1:54:b0:0b:4f:76:8f:
         27:12:b8:26:5e:92:72:ba:97:91:1c:7c:01:b0:51:9e:2e:27:
         fe:97:8c:f0:c7:2c:91:66:5a:44:19:28:66:ed:cd:1e:95:b9:
         ab:3c:06:3c:8d:4d:a0:45:2d:82:cb:48:a8:2f:64:a5:13:73:
         c7:62:4a:6d:d7:d6:0d:76:ff:3d:12:a0:14:29:dc:4d:e1:c9:
         35:e3:ef:20:dc:fe:43:7f:a1:aa:ae:98:79:fd:74:6d:87:4a:
         70:8c:77:17:88:d1:10:74:23:03:06:a4:b7:41:b9:a7:22:f2:
         10:cf:2e:42:b5:ca:fc:e3:1a:e9:c5:98:3d:74:72:f7:f1:c8:
         c3:5e:8a:d0:73:bf:41:aa:b8:84:b9:45:a5:c4:bd:c1:0b:26:
         86:c9:01:77:06:7e:9b:f1:78:0f:f1:bd:11:3d:db:9f:33:e0:
         a0:9e:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org