Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d51f7485-c136-3528-a41a-37ce3de8562e.roa
File:                     d51f7485-c136-3528-a41a-37ce3de8562e.roa (raw, json)
Hash identifier:          mep2oSDywo3iKfggTGX6Wpk/fjz22r1smMzGbgUvZmw=
Subject key identifier:   74:ED:1C:B4:B9:61:D2:EB:30:60:32:3F:B7:78:19:9F:CB:7F:4F:CD
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285847DC64ABB4CDCFC459ECCD5380
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d51f7485-c136-3528-a41a-37ce3de8562e.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     834
IP address blocks:        72.14.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ab:b4:cd:cf:c4:59:ec:cd:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=9e037767-6c78-4911-a8f0-edd88bbea746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:4e:4a:2f:00:54:9c:b8:0b:0e:ff:24:72:
                    17:90:27:1b:49:2d:33:a6:bf:0b:d9:e5:3f:e5:52:
                    20:e8:9a:b3:1e:65:02:0e:a1:b2:43:8c:5a:4d:78:
                    4b:ec:70:94:2c:0f:32:72:56:ba:80:0f:14:da:57:
                    d7:17:05:0c:f3:fe:14:de:8c:48:30:1c:7a:1e:15:
                    9c:3e:68:96:0f:62:a0:b3:3b:48:3a:db:87:02:42:
                    f1:b7:4a:b8:63:38:28:8c:3d:f0:db:81:db:1a:6c:
                    4b:67:69:89:dd:f8:7e:b1:c9:6a:05:57:14:1c:b4:
                    c0:16:16:f0:82:08:75:25:43:89:3a:ef:7c:88:c7:
                    c3:16:99:42:cf:96:3e:92:06:6c:9b:da:45:5e:7f:
                    d4:ab:6c:ed:b6:8f:37:ea:84:cd:4a:f0:9d:18:b0:
                    e1:3c:1c:cc:5a:e1:23:ca:7e:33:3e:5d:cf:44:54:
                    ca:0a:1e:36:58:e0:85:39:29:91:c8:50:e6:30:62:
                    d0:f0:d3:41:58:d6:51:7c:b2:82:dd:40:e0:00:59:
                    a6:cc:0a:dc:e1:1d:bc:f6:e3:6c:25:24:33:ac:d0:
                    28:1b:08:73:78:84:32:02:83:9f:14:3a:cc:fc:56:
                    a1:86:c2:8b:de:b8:3f:69:cd:b3:45:cc:7a:1e:31:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:1C:B4:B9:61:D2:EB:30:60:32:3F:B7:78:19:9F:CB:7F:4F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d51f7485-c136-3528-a41a-37ce3de8562e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:de:c2:9f:fd:0d:7c:dc:7a:ae:9c:5a:ad:48:c0:e9:64:7c:
         f5:81:f2:7c:98:60:c6:17:0c:b4:21:28:d9:bb:db:8a:c2:14:
         30:4b:11:a5:00:15:3f:07:23:c3:bb:52:f8:71:23:ec:2c:2b:
         5c:1e:9b:7a:b5:ab:5f:77:7b:57:06:07:23:60:ac:1a:5a:f2:
         a1:d0:b9:a4:33:10:04:1e:15:09:79:d6:81:2e:9f:5c:41:d7:
         d7:a5:7e:d7:9f:6d:ff:6b:f6:1c:0c:29:2b:e9:92:8c:fd:d4:
         ea:a7:74:95:30:99:9b:b2:5f:90:26:ca:1b:4d:d1:f9:36:cc:
         ba:1d:8d:6f:83:ee:84:f6:42:72:5f:88:65:75:c6:1f:d2:68:
         56:c9:0b:7f:da:ff:50:a1:06:f4:5c:4d:5f:91:f8:4e:1c:ed:
         16:59:10:14:ad:04:d3:c8:29:02:c9:3e:be:ee:2f:a2:4f:a5:
         70:c3:b2:69:bf:97:99:bd:ad:a1:73:dd:51:b2:1f:8e:e5:6c:
         08:5c:f2:1f:6c:aa:31:b5:ef:3a:9a:d5:c8:2c:db:b2:f5:cb:
         40:8d:54:e9:55:7a:fb:4e:27:4f:fd:c1:7e:5d:85:31:c5:ec:
         b6:a7:84:7d:0f:44:0d:42:79:7c:36:99:8a:5c:97:e4:6a:03:
         96:be:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:44 2024 by rpki-client on console-fra.rpki-client.org