Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa
File:                     8627eb3e-2ada-3de9-b53c-c5df600e1058.roa (raw, json)
Hash identifier:          xxB2ehGXkla0TSQEXOlI/anLvWduoL0hdCfvc3Fao4Y=
Subject key identifier:   85:C0:A2:0C:DF:16:19:C1:7F:40:BB:ED:0E:E5:5B:F5:B3:BE:56:06
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858456AED97DEFAD92F62EB0232C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa
Signing time:             Wed 03 Apr 2024 01:00:26 +0000
ROA not before:           Wed 03 Apr 2024 01:00:26 +0000
ROA not after:            Tue 02 Jul 2024 01:00:26 +0000
asID:                     174
IP address blocks:        72.14.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:ed:97:de:fa:d9:2f:62:eb:02:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Apr  3 01:00:26 2024 GMT
            Not After : Jul  2 01:00:26 2024 GMT
        Subject: CN=b7fa8675-80f0-41bb-abb6-789cc4d1998e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:31:25:f1:85:fe:d8:5a:11:c5:8c:bb:95:
                    94:dd:37:f1:9e:eb:6c:d2:ec:9e:24:88:2a:ae:ec:
                    bf:3e:86:e2:f1:db:1e:6b:c2:8c:b6:8b:e6:5c:85:
                    00:e6:c9:03:b0:c2:59:5e:c2:32:13:1c:8f:76:ef:
                    ce:47:1f:7e:59:f0:e6:89:d5:1e:ec:0e:bf:2b:2b:
                    9a:ee:31:48:ac:3d:8d:92:6c:05:58:eb:a8:b1:d6:
                    ea:48:b6:bc:87:dc:94:c9:54:d2:e7:72:d2:93:44:
                    dd:48:33:26:d0:fd:88:99:e0:49:05:f3:79:13:78:
                    4f:08:d7:c6:e2:2a:2c:10:27:6d:50:3b:c5:85:69:
                    2e:4f:f7:f7:9e:ec:c8:cf:f1:d4:e3:44:a9:49:fe:
                    58:32:e5:d6:f4:26:03:19:56:32:87:40:a9:9d:81:
                    a4:fd:26:7d:8c:1e:5f:49:b0:59:a0:42:d9:f8:68:
                    b9:af:c0:6b:02:1b:ba:63:5d:c3:ef:9a:c4:3e:cc:
                    89:45:40:e2:97:26:b8:d0:93:3b:0c:49:b5:09:2d:
                    47:97:a1:b8:cd:23:0a:8c:ed:1a:e6:f0:c2:19:f5:
                    72:cf:50:42:73:16:90:3b:e2:23:8b:e2:0e:f7:d8:
                    c0:48:b7:c9:ad:77:74:06:fa:2a:64:69:89:b1:e6:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C0:A2:0C:DF:16:19:C1:7F:40:BB:ED:0E:E5:5B:F5:B3:BE:56:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:15:b2:be:28:f3:34:e1:5d:58:7d:d4:1e:e0:b3:9b:8e:36:
         26:44:29:7c:3c:1b:df:a3:50:db:ef:57:d9:de:21:7d:99:ab:
         41:2f:c6:5a:b7:9d:bf:8a:cc:83:36:17:fe:60:53:ec:bd:e3:
         ce:04:f4:e7:70:a8:75:a7:f1:71:dd:40:d4:7c:e5:0e:dc:21:
         69:40:ed:de:9d:57:9f:51:4f:a6:8a:9d:19:e3:2f:5d:9f:51:
         40:13:6b:78:7f:e4:53:a5:05:37:7e:f9:0c:80:5d:22:9d:17:
         33:48:d2:68:29:36:e7:39:18:df:41:8f:53:29:6c:58:50:e8:
         64:90:44:7c:e3:8f:c4:af:73:3e:9e:7c:ab:28:69:98:c2:91:
         b6:9d:10:6c:cb:6a:3f:3f:43:68:f9:72:b8:c8:4c:b6:a2:40:
         07:3f:b5:6c:87:6a:06:f2:09:3f:f8:5e:10:80:a2:08:26:0a:
         31:6a:9d:b6:95:08:13:47:cf:50:7b:d5:65:d5:7f:3c:62:95:
         1e:e2:11:2b:ed:dc:b6:6b:79:2b:e3:39:b9:50:3c:fe:cc:24:
         bc:a4:c5:36:58:05:44:50:83:47:09:e6:fe:73:95:8f:27:b9:
         ea:63:b9:9c:d1:fe:e3:37:f0:ca:27:92:08:dc:26:aa:6e:5a:
         bd:ec:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:13:44 2024 by rpki-client on console-ams.rpki-client.org