Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2b65e13-14da-3a7a-b14b-778d004b656e.roa
File:                     f2b65e13-14da-3a7a-b14b-778d004b656e.roa (raw, json)
Hash identifier:          mz1BxiRhsa6kwYn3S63fkrRHH01SmyLqmihYKodY8Gc=
Subject key identifier:   D4:78:F0:1D:59:F5:44:14:18:9B:81:89:4B:C7:D6:11:B3:43:14:80
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584835BA9A3274A5186D8EAEB900
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2b65e13-14da-3a7a-b14b-778d004b656e.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     834
IP address blocks:        72.14.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:9a:32:74:a5:18:6d:8e:ae:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=10043add-1b2a-446c-bd1e-7d0d23152fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:3d:4c:a7:59:ad:c8:94:bf:09:91:1b:d8:
                    a5:fa:9a:52:15:98:26:6e:d8:8a:99:29:22:f0:d9:
                    92:8f:18:36:2f:98:18:27:43:ce:69:ca:9c:9c:bb:
                    cc:95:4d:8d:ef:e5:a7:64:6d:0c:9a:94:74:1d:33:
                    b8:b0:74:3f:fc:be:57:a3:d2:e9:39:1b:7c:bd:ea:
                    30:96:b4:50:2e:90:93:03:b1:c2:c3:6f:48:b7:71:
                    70:2c:6d:1f:bf:75:2f:b8:61:0d:50:de:a0:1c:76:
                    c3:3a:87:a5:34:83:49:8f:46:3c:c1:0f:91:19:ca:
                    1d:85:b1:03:23:96:75:1e:bd:d8:a3:a5:22:d3:6c:
                    17:78:85:0c:0a:91:88:3c:5c:dc:7f:32:89:a4:4e:
                    77:80:e5:10:63:d8:65:ac:f7:28:0a:4d:3d:c2:14:
                    13:54:28:d3:ab:f4:ae:cb:d2:0e:4e:08:13:6d:96:
                    12:b8:cc:6d:c1:0a:d1:5d:a0:d0:d3:ce:c4:86:a0:
                    fd:7a:15:35:63:95:6a:ca:bb:85:0d:a3:21:bb:c3:
                    3e:f4:b3:99:35:19:0e:65:26:a5:f5:be:7a:d8:1e:
                    09:8e:0d:56:4d:0a:da:47:ee:12:57:73:d2:33:fd:
                    47:35:d8:38:fa:9b:02:6d:8f:80:1e:16:31:e4:77:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:F0:1D:59:F5:44:14:18:9B:81:89:4B:C7:D6:11:B3:43:14:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2b65e13-14da-3a7a-b14b-778d004b656e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6c:6c:64:d7:27:bb:97:e2:63:18:26:9f:f2:d1:3f:80:8c:
         02:2e:35:99:05:57:87:ec:e3:3d:10:54:3c:be:fc:60:f3:4d:
         05:02:aa:49:cf:86:90:d2:61:f8:f2:a7:7c:bf:44:de:ca:45:
         e4:99:ee:52:bf:9e:7f:b4:c2:90:be:b9:ea:9e:d4:92:56:5e:
         62:51:f1:48:4e:5e:86:2b:a6:26:3e:00:df:16:4c:b5:87:f4:
         1b:e2:41:9d:a2:6e:b6:5b:50:fd:e6:22:e3:a0:9d:8c:f3:46:
         8e:9b:8b:96:86:f6:d8:a0:56:1e:b2:17:35:11:ce:9e:ab:2a:
         d5:f2:e3:7c:b0:39:11:79:12:cf:b8:c3:ab:a7:e0:65:5b:1d:
         90:1d:68:fa:2d:df:7e:ff:83:d5:84:12:be:c3:e4:ce:ce:ca:
         fd:80:88:c5:23:72:fa:03:2c:37:68:44:3e:d3:65:a6:24:b9:
         1c:f5:56:10:a8:1e:7f:af:c1:fe:34:7f:54:67:6e:dd:e1:ed:
         2d:3f:ed:f7:ee:c1:7a:4c:ff:e5:b8:1e:25:4e:84:53:05:f4:
         1c:34:6b:f1:a3:28:80:7f:f9:62:16:d2:87:64:09:92:7f:8e:
         fa:5a:b3:d2:6c:cc:ad:21:8e:5e:28:23:4a:e1:63:22:40:33:
         4b:53:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:28 2025 by rpki-client