Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa
File:                     a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa (raw, json)
Hash identifier:          YJMUaHMSAGyUd5mUfDl0c5rcUn81D8cGbJsIcA427XA=
Subject key identifier:   C1:A0:0B:61:7E:92:14:39:29:F6:70:96:D2:1B:98:AA:75:C4:3E:D3
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285845F0D34088DAC60A1396D59D80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa
Signing time:             Tue 21 May 2024 00:05:44 +0000
ROA not before:           Tue 21 May 2024 00:05:44 +0000
ROA not after:            Mon 19 Aug 2024 00:05:44 +0000
asID:                     152700
IP address blocks:        72.14.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f0:d3:40:88:da:c6:0a:13:96:d5:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 21 00:05:44 2024 GMT
            Not After : Aug 19 00:05:44 2024 GMT
        Subject: CN=6696c925-c409-451d-8235-0c244b8fdc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:bb:f0:fd:29:60:2f:87:83:8e:0e:46:ac:
                    26:0c:57:73:6e:db:ed:03:cf:76:7f:ec:9d:98:d0:
                    b8:b1:46:50:f9:f5:93:43:be:8f:54:25:37:3b:31:
                    49:f2:58:27:05:e8:1d:a8:4f:5a:d2:b1:87:51:aa:
                    9f:77:66:48:72:1a:c3:c3:e6:d9:f1:0d:c4:ca:3d:
                    da:b3:46:bb:de:69:55:e6:d6:e3:12:b6:54:c3:7d:
                    7f:d5:40:5e:ae:df:59:7f:00:49:c7:e6:43:2f:ec:
                    55:61:fd:78:4d:b5:3c:f5:dd:ef:ea:82:73:4d:19:
                    13:3c:33:bc:d7:58:cc:d2:4a:db:70:7e:f7:b7:2a:
                    05:df:5d:15:f5:e8:81:65:80:67:d1:8d:e6:c1:b5:
                    b0:62:13:ff:31:2c:d3:61:b1:98:4b:0f:f7:6d:5a:
                    4a:43:9b:9e:d7:5d:bd:96:b3:6a:fe:43:0c:ec:2f:
                    c3:c3:f1:f2:0e:7a:a0:62:31:32:58:88:58:9e:26:
                    38:6a:7d:fe:ef:88:f8:f6:78:8f:d9:cc:e2:d9:48:
                    a3:e1:ac:09:c4:2f:55:8f:19:23:bc:c0:f1:3a:e7:
                    d6:76:59:da:51:e3:99:31:6e:20:36:c7:e0:5f:ae:
                    90:ab:7e:77:7a:0f:ac:d3:d4:1f:5c:dd:2a:18:58:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:0B:61:7E:92:14:39:29:F6:70:96:D2:1B:98:AA:75:C4:3E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:c1:ca:37:11:73:e4:4d:3a:0b:f8:a7:99:aa:5e:ad:7d:
         6b:6d:d7:71:8d:c6:c8:29:10:a9:34:8c:55:59:6a:22:ae:2d:
         af:4d:5b:84:ed:cd:a2:89:fe:db:a8:dc:9a:de:20:b3:31:35:
         93:14:36:86:cd:1a:8d:0f:ec:17:f1:bb:bf:ef:e6:ae:3a:61:
         5c:57:68:2b:88:f2:5f:1f:3d:43:e2:8a:5b:74:4b:79:c7:07:
         c4:9e:2f:40:97:97:af:c8:5e:b6:30:09:f0:c9:51:e3:5e:9e:
         81:68:ec:ba:cc:ef:7d:4e:5a:64:76:36:87:b1:89:44:69:5c:
         b9:f4:18:de:f6:f5:ca:9a:ae:ac:96:26:6c:bf:0e:9a:39:eb:
         07:36:2e:25:fc:69:11:80:61:a4:72:3e:e0:29:0c:fa:b7:c2:
         55:6c:7c:03:fd:40:ab:a5:4f:83:01:42:70:e1:c5:75:36:89:
         20:76:e2:66:1f:fd:f2:6d:18:c7:10:ce:a9:92:9f:2f:6f:52:
         e7:33:22:ea:cb:14:58:d5:10:a9:21:33:dc:14:14:7e:e1:e1:
         0e:51:79:03:e9:0a:78:6a:5e:c6:5c:7d:77:92:69:ba:d2:4b:
         ca:76:e8:18:34:a6:f9:43:a2:27:f9:42:ad:1c:1d:d9:35:03:
         bc:9a:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:22:32 2024 by rpki-client on console-fra.rpki-client.org