Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/81f83302-f378-3c04-84b3-a6e88d586690.roa
File:                     81f83302-f378-3c04-84b3-a6e88d586690.roa (raw, json)
Hash identifier:          NKr1Yb28aiLgaOb8apvJWtbSze4RjsuJ2BwPxtcuc4w=
Subject key identifier:   FD:8F:90:D5:D4:8F:00:4D:47:DF:75:3C:38:37:C1:1B:B7:1A:3E:2C
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285845410D4FAB4CC0B8DB6EE126C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/81f83302-f378-3c04-84b3-a6e88d586690.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     53356
IP address blocks:        72.14.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:4f:ab:4c:c0:b8:db:6e:e1:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=6a527e8e-6044-4ff9-86d1-bcb75535f645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:74:af:7c:b6:8e:7b:ec:ae:82:d6:bc:38:
                    09:1a:99:dc:35:ea:bc:3c:37:e6:49:15:33:a1:b8:
                    29:2a:d9:07:67:26:74:50:3c:6a:72:7c:fa:87:3c:
                    03:86:4b:a7:57:48:d2:e5:6f:07:73:3a:20:4b:36:
                    8c:e3:d0:4b:f2:3c:8e:f7:6c:49:9f:70:a7:27:6c:
                    a6:02:dd:ae:f2:e6:e8:5e:c0:84:dc:47:62:43:08:
                    7a:2e:b8:de:7a:10:e1:99:69:20:e8:c5:48:9d:0c:
                    89:1b:3f:ee:a2:20:c2:0e:78:f2:1b:49:f7:51:ee:
                    90:e2:aa:0c:09:f1:59:65:ec:32:66:1a:a4:7f:39:
                    5c:05:9b:db:e5:fe:88:ff:d9:d7:61:f3:13:7f:fa:
                    a6:86:4c:29:7d:94:3d:10:d8:65:47:16:a5:b5:92:
                    5a:9b:d5:77:3e:ec:d3:88:97:55:a1:b1:26:2e:35:
                    df:2e:e3:5d:e5:27:24:07:33:1c:69:41:46:36:71:
                    33:03:56:a6:f2:d7:bd:9b:e9:a4:19:bb:fe:c6:0c:
                    bd:ce:69:da:ba:b9:02:3d:87:bb:db:0a:3b:90:ac:
                    70:f9:db:cd:89:32:20:69:c0:e0:0e:1d:69:2e:50:
                    bb:76:fd:ae:fa:d4:73:ce:2f:47:9c:1b:83:ae:d4:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8F:90:D5:D4:8F:00:4D:47:DF:75:3C:38:37:C1:1B:B7:1A:3E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/81f83302-f378-3c04-84b3-a6e88d586690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:c5:c0:8f:c7:78:a4:06:9d:65:03:43:e4:db:fd:8f:5a:
         84:67:0e:48:36:d3:ab:d4:98:f8:60:84:b3:49:8a:ef:5c:af:
         d9:2f:18:68:84:b9:83:88:ec:1b:a5:d5:f2:60:fb:d6:f9:7a:
         fd:a2:11:cf:49:56:d3:3c:46:47:35:3e:c2:06:4f:76:d6:b0:
         89:88:92:b7:cf:5e:43:99:38:12:14:7d:eb:68:3d:86:b8:13:
         5c:ea:6b:85:7d:de:f7:43:13:da:4d:c6:e4:9a:3a:fb:33:ad:
         a0:b5:a6:eb:15:c1:59:d6:f5:ef:59:9f:08:4b:3d:46:eb:4e:
         2e:66:80:24:42:b6:c7:17:7d:55:e5:b6:76:1a:07:33:72:4c:
         35:17:19:1a:52:19:19:0a:ac:38:d1:af:e1:d2:86:1e:c4:61:
         ca:5a:ce:17:6e:78:cd:53:07:05:90:0e:ce:61:84:ca:b3:f1:
         94:21:46:56:05:5c:eb:fb:44:d9:52:7c:2d:fc:69:45:d6:d8:
         76:a2:bd:d7:0b:5b:f1:49:ec:05:9e:c9:08:14:37:14:cd:5c:
         59:2a:0d:b6:2d:8a:57:f8:b0:3e:d3:7c:bc:de:b5:0b:6f:45:
         51:c5:2f:23:b6:d0:15:b5:3c:55:eb:10:77:63:22:4f:78:63:
         f1:59:fc:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVBDU+rTMC4227hJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MDMxOTAxMDAyNFoXDTI0MDYxNzAxMDAyNFowLzEtMCsGA1UEAxMk
NmE1MjdlOGUtNjA0NC00ZmY5LTg2ZDEtYmNiNzU1MzVmNjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzF0r3y2jnvsroLWvDgJGpncNeq8PDfmSRUz
obgpKtkHZyZ0UDxqcnz6hzwDhkunV0jS5W8HczogSzaM49BL8jyO92xJn3CnJ2ym
At2u8uboXsCE3EdiQwh6LrjeehDhmWkg6MVInQyJGz/uoiDCDnjyG0n3Ue6Q4qoM
CfFZZewyZhqkfzlcBZvb5f6I/9nXYfMTf/qmhkwpfZQ9ENhlRxaltZJam9V3PuzT
iJdVobEmLjXfLuNd5SckBzMcaUFGNnEzA1am8te9m+mkGbv+xgy9zmnaurkCPYe7
2wo7kKxw+dvNiTIgacDgDh1pLlC7dv2u+tRzzi9HnBuDrtQoBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2PkNXUjwBNR991PDg3wRu3Gj4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvODFmODMzMDItZjM3OC0z
YzA0LTg0YjMtYTZlODhkNTg2NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr+xcCPx3ikBp1lA0Pk2/2PWoRnDkg206vUmPhghLNJiu9cr9kvGGiE
uYOI7Bul1fJg+9b5ev2iEc9JVtM8Rkc1PsIGT3bWsImIkrfPXkOZOBIUfetoPYa4
E1zqa4V93vdDE9pNxuSaOvszraC1pusVwVnW9e9ZnwhLPUbrTi5mgCRCtscXfVXl
tnYaBzNyTDUXGRpSGRkKrDjRr+HShh7EYcpazhdueM1TBwWQDs5hhMqz8ZQhRlYF
XOv7RNlSfC38aUXW2HaivdcLW/FJ7AWeyQgUNxTNXFkqDbYtilf4sD7TfLzetQtv
RVHFLyO20BW1PFXrEHdjIk94Y/FZ/PI=
-----END CERTIFICATE-----
Generated at Sun May 19 04:22:06 2024 by rpki-client on console-fra.rpki-client.org