Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f500d658-2811-33c5-a094-d351deb3eaa9.roa
File:                     f500d658-2811-33c5-a094-d351deb3eaa9.roa (raw, json)
Hash identifier:          SS9P1/KEF3fdeUWbAfKpFT9Wous/FXdLN+XUGEW3pUw=
Subject key identifier:   87:B7:85:65:C4:2C:8D:9A:17:FA:6A:89:BA:AB:F5:09:D8:C1:AC:11
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285844FB600D3DCDBCA800C43E6878
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f500d658-2811-33c5-a094-d351deb3eaa9.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     7018
IP address blocks:        72.14.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0d:3d:cd:bc:a8:00:c4:3e:68:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=987b9490-c46d-47ef-baeb-d457142fe464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:fc:2c:23:33:73:17:cd:ea:73:8c:d2:e6:
                    e4:0f:2c:73:6c:1c:63:3b:d6:99:d3:9c:eb:9b:3a:
                    70:ce:50:29:79:c8:a3:71:5a:27:00:b1:16:c9:d8:
                    1b:1e:20:37:12:e6:de:17:fd:dc:d0:56:c0:10:49:
                    f4:11:a4:79:e3:b4:01:4d:9e:a4:ab:e1:dd:f2:ef:
                    bf:a2:c4:73:41:aa:6e:8e:95:15:85:e4:44:f0:7d:
                    55:3a:66:38:f8:ef:d3:75:01:66:bb:ee:b9:c5:ee:
                    32:31:45:31:87:5d:5b:e0:ec:a5:73:6c:e0:10:32:
                    2c:01:df:79:63:72:82:10:f1:bf:5c:f3:55:b1:d6:
                    be:05:50:84:f3:f8:67:a5:11:01:e7:a6:23:75:80:
                    75:c4:30:9c:28:ed:ff:62:00:b2:58:7d:fb:d7:83:
                    9b:79:24:76:1f:78:b7:0c:f8:38:82:98:e2:c7:fc:
                    cc:f3:2e:47:f8:ee:11:88:88:e6:d4:8b:06:98:bc:
                    65:9d:82:e4:f4:b0:24:ab:f9:83:a0:74:e0:c7:9a:
                    a2:e4:e4:08:e7:b3:71:60:34:56:88:62:24:36:81:
                    a2:7f:f8:e4:c8:70:9e:16:36:92:86:18:1b:b2:2a:
                    39:57:e4:de:f2:bd:f6:80:ea:fe:ff:c0:00:aa:f9:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B7:85:65:C4:2C:8D:9A:17:FA:6A:89:BA:AB:F5:09:D8:C1:AC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f500d658-2811-33c5-a094-d351deb3eaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:04:05:ce:44:fb:aa:a6:75:bf:5a:b7:9c:fb:df:17:03:
         0b:18:cf:01:53:2d:aa:14:69:63:ff:ce:0d:87:61:c8:52:2f:
         f1:f4:4a:ca:2c:39:ed:64:d4:bd:78:a3:61:b0:f0:5a:0e:f9:
         d0:44:6c:f3:ec:d6:31:1b:d6:ff:b1:7f:34:f9:2c:d4:0b:97:
         83:cd:22:e5:64:c1:44:c8:22:45:63:dc:2c:66:ce:e6:19:6d:
         78:ad:f6:61:96:36:81:f4:4b:a5:5a:ed:21:64:d6:93:2e:f5:
         26:cd:8a:70:96:8b:ef:ab:47:01:51:df:40:7f:8d:fc:d9:a2:
         91:a1:10:b1:2d:8d:92:e9:7a:32:30:69:90:b3:74:9e:cb:c9:
         df:57:fd:d4:9a:3e:3c:88:72:62:86:e0:df:24:05:92:98:63:
         c8:a8:b6:15:42:b7:3c:2d:af:16:35:eb:bf:b2:32:aa:71:fe:
         07:8e:08:43:c2:f5:1f:17:57:c6:41:89:a2:5c:1f:c5:cb:ec:
         84:a8:fd:6a:8f:f9:da:4c:42:87:8d:a9:90:5a:83:44:0d:9c:
         9b:bd:48:e6:80:50:31:17:f3:e0:2d:12:c2:07:9e:e5:b3:21:
         47:54:0f:95:ea:8a:7c:62:9e:93:60:49:dc:fe:9c:94:6c:d8:
         ed:2f:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:33:08 2024 by rpki-client on console-ams.rpki-client.org