Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8f0be3a2-544f-3bfb-8e78-049a77339aba.roa
File:                     8f0be3a2-544f-3bfb-8e78-049a77339aba.roa (raw, json)
Hash identifier:          +jUSXs5VzXC3zK4CSejf0sh6jxiqa9GQcb9GUnUdbc4=
Subject key identifier:   C5:3F:CC:FC:ED:F9:63:E1:86:9B:9E:45:74:30:05:56:91:F8:77:FE
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858472F30824C1CBFFBC1EF380A00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8f0be3a2-544f-3bfb-8e78-049a77339aba.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     140902
IP address blocks:        72.14.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:82:4c:1c:bf:fb:c1:ef:38:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=da2b7b63-28cb-4359-b14e-711980ce6373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:85:4b:b0:9e:84:08:1c:8b:26:28:f3:30:9c:
                    5d:d3:57:9b:94:39:64:54:92:09:4f:69:ce:90:3f:
                    93:58:11:25:ff:2f:df:d0:0f:1c:76:fc:c6:4d:a1:
                    ff:be:28:51:e0:45:41:44:b9:43:61:b6:3e:97:25:
                    d5:e2:e6:db:4b:f1:bc:f8:e1:55:a8:7a:4a:62:0a:
                    e3:a0:1a:d8:34:7f:ab:f2:d1:40:f9:be:26:ec:a5:
                    ea:04:4c:8e:2f:c0:20:b4:fd:31:53:4e:b1:d6:1a:
                    0f:e6:f5:42:0d:a1:b1:b1:a2:e6:0c:3e:bb:be:55:
                    a4:c2:a7:0f:44:f8:fe:39:69:b9:e7:a7:de:10:1b:
                    97:2d:80:1b:ee:28:46:28:38:0d:2b:66:20:ed:bc:
                    a4:82:6f:ec:5b:2c:d8:b1:5b:2a:b8:bf:c1:f8:7c:
                    5d:17:ef:6d:84:36:b6:92:d7:6c:96:cf:4f:00:94:
                    d3:0d:9a:bc:cc:e9:fa:2c:ab:6b:9f:04:76:e8:52:
                    d7:a6:38:c7:db:8b:8b:ea:ca:b1:b7:0f:9a:67:5a:
                    17:9c:a3:2e:1a:bf:c5:c9:40:fa:ad:16:be:2a:f2:
                    d2:89:23:6d:d3:ad:29:80:e2:9e:a6:c9:2f:37:59:
                    25:7f:04:68:c6:51:d8:b6:98:f7:05:da:1d:03:70:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:CC:FC:ED:F9:63:E1:86:9B:9E:45:74:30:05:56:91:F8:77:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8f0be3a2-544f-3bfb-8e78-049a77339aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:ac:72:20:c0:87:c0:50:7a:23:a5:15:31:3d:a3:d2:58:
         bb:f0:46:01:28:3c:8c:59:9a:4e:09:82:2c:3b:0b:f6:01:5c:
         e6:c4:3b:f7:5c:16:92:ec:17:e1:12:c7:06:a0:4b:46:7b:de:
         52:f5:71:0c:7a:8f:f7:6e:3e:8c:c2:22:e2:9b:fd:48:50:76:
         97:20:e0:3d:c6:93:c5:b7:81:b1:af:17:38:69:c6:97:a1:cd:
         1d:ee:51:34:50:db:72:ea:e3:38:84:70:84:d9:b9:49:35:9e:
         6f:2e:39:95:2a:9c:93:b3:23:ce:ae:c5:64:56:da:14:6e:d6:
         e1:0e:e5:3f:c6:db:0e:dc:1b:af:e5:59:0b:c3:c7:55:f4:ad:
         a0:61:3a:0d:d9:17:14:03:8f:57:d7:b3:c2:4e:94:80:7f:12:
         c5:e5:77:92:c6:cc:8e:4b:ae:15:d3:7e:de:5f:7f:e0:4e:10:
         01:e4:de:73:a5:3a:33:c6:67:39:49:d5:cd:6d:13:c8:3c:d3:
         72:e7:f4:a2:db:cf:30:5b:89:74:e8:4c:e4:f4:1b:2a:f4:4e:
         f2:4c:00:3b:02:de:67:7e:ae:33:d4:4a:80:a6:02:cc:8c:85:
         a2:80:0c:9d:0f:53:7d:f3:07:55:7d:5c:43:ba:9f:43:d6:93:
         6c:3f:94:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIJMHL/7we84CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGEyYjdiNjMtMjhjYi00MzU5LWIxNGUtNzExOTgwY2U2MzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IVLsJ6ECByLJijzMJxd01eblDlkVJIJT2nO
kD+TWBEl/y/f0A8cdvzGTaH/vihR4EVBRLlDYbY+lyXV4ubbS/G8+OFVqHpKYgrj
oBrYNH+r8tFA+b4m7KXqBEyOL8AgtP0xU06x1hoP5vVCDaGxsaLmDD67vlWkwqcP
RPj+OWm556feEBuXLYAb7ihGKDgNK2Yg7bykgm/sWyzYsVsquL/B+HxdF+9thDa2
ktdsls9PAJTTDZq8zOn6LKtrnwR26FLXpjjH24uL6sqxtw+aZ1oXnKMuGr/FyUD6
rRa+KvLSiSNt060pgOKepskvN1klfwRoxlHYtpj3BdodA3CcUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMU/zPzt+WPhhpueRXQwBVaR+Hf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvOGYwYmUzYTItNTQ0Zi0z
YmZiLThlNzgtMDQ5YTc3MzM5YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbwrHIgwIfAUHojpRUxPaPSWLvwRgEoPIxZmk4Jgiw7C/YBXObEO/dc
FpLsF+ESxwagS0Z73lL1cQx6j/duPozCIuKb/UhQdpcg4D3Gk8W3gbGvFzhpxpeh
zR3uUTRQ23Lq4ziEcITZuUk1nm8uOZUqnJOzI86uxWRW2hRu1uEO5T/G2w7cG6/l
WQvDx1X0raBhOg3ZFxQDj1fXs8JOlIB/EsXld5LGzI5LrhXTft5ff+BOEAHk3nOl
OjPGZzlJ1c1tE8g803Ln9KLbzzBbiXToTOT0Gyr0TvJMADsC3md+rjPUSoCmAsyM
haKADJ0PU33zB1V9XEO6n0PWk2w/lN0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org