Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f500d658-2811-33c5-a094-d351deb3eaa9.roa
File:                     f500d658-2811-33c5-a094-d351deb3eaa9.roa (raw, json)
Hash identifier:          5VUQZwdi3sqRta5NmWtBFbYgHgq8qieD5THsaMNElnE=
Subject key identifier:   B1:96:FC:E8:11:8D:83:C6:FA:B8:27:C5:CD:7B:BF:25:79:00:35:DC
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858487A208945E4FA7D864AA076C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f500d658-2811-33c5-a094-d351deb3eaa9.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     7018
IP address blocks:        72.14.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:89:45:e4:fa:7d:86:4a:a0:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=13c80d07-551c-40e5-88b5-038be2e27933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:80:9c:27:5a:c3:82:88:9f:45:44:5f:54:22:
                    09:a9:27:d1:5d:02:ce:99:c4:44:20:b9:f2:b7:3a:
                    5b:36:c3:67:75:8d:2b:c6:19:59:92:f2:03:43:b5:
                    01:16:23:b7:ca:88:cb:38:0d:ba:39:fe:b9:23:d4:
                    bd:24:34:4c:fc:b4:f2:4f:54:aa:7a:58:0f:5e:5b:
                    f4:ca:10:37:39:e0:8b:62:8c:30:be:36:a2:ec:36:
                    75:b5:07:87:02:26:58:0f:b7:fd:14:f6:61:e0:2c:
                    f5:91:d7:5e:7c:ef:90:fc:62:d3:13:44:a6:c9:cb:
                    c7:66:7a:3e:33:f1:5d:da:98:5c:bc:d7:fd:f6:7c:
                    26:1f:2a:17:af:c7:ca:e6:e5:90:13:44:4e:93:ea:
                    dd:b2:ee:f0:23:89:30:06:e5:f6:3e:bf:f2:53:22:
                    41:e1:ad:1f:d8:f0:01:64:2a:04:a1:cb:61:29:d0:
                    0f:36:89:85:d2:31:c5:c3:64:3e:56:fc:79:6e:ca:
                    cd:51:25:e9:17:1e:11:84:6d:c6:50:55:65:68:3d:
                    c5:a2:fe:e1:20:4e:b5:23:bb:4e:44:f5:f1:cf:18:
                    40:4b:54:60:e1:b5:77:d2:b6:d3:c6:38:e3:40:7e:
                    2b:0e:e6:14:1a:bc:11:09:04:fc:7b:a5:6b:41:4f:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:96:FC:E8:11:8D:83:C6:FA:B8:27:C5:CD:7B:BF:25:79:00:35:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f500d658-2811-33c5-a094-d351deb3eaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:31:36:6a:6d:d0:60:c0:d2:6e:e4:3a:78:35:c6:08:1e:39:
         63:e9:c3:9d:ed:c4:66:22:5e:23:e2:30:5e:ba:6e:c5:c0:8e:
         bb:9a:02:09:3e:84:03:34:ab:6e:08:b8:cc:c7:64:b3:07:13:
         32:9b:f2:da:69:53:7c:15:e6:e1:a8:21:09:a3:95:8b:85:03:
         82:ed:55:48:04:cb:71:a0:a7:e4:c4:8c:b1:e8:e7:10:d7:26:
         45:84:85:63:83:5a:72:32:3b:4b:85:a0:d5:32:d8:c0:3c:02:
         ca:d5:c6:84:9a:05:de:ab:c6:7f:6a:05:a3:68:35:e1:90:63:
         c2:86:3c:3d:a0:a9:7d:d6:82:97:f5:04:29:4b:b3:99:39:d5:
         90:b4:68:0c:15:1b:bb:36:2f:19:55:53:61:ff:1c:7d:6a:13:
         b1:79:a1:07:23:b6:ed:6b:5c:cc:3c:4b:09:40:82:52:0e:34:
         67:a0:04:26:f0:76:a7:3e:94:5a:56:89:d5:d6:f9:46:e8:4a:
         6b:9a:d2:1c:81:71:dd:74:8b:14:57:45:7b:f3:3a:75:36:e4:
         37:4e:ef:c3:b8:72:93:cd:b5:3d:c2:ad:68:57:59:2e:f5:a4:
         11:79:23:1c:7d:9e:bc:54:3d:b1:44:2b:b0:52:af:a5:9d:82:
         f3:4b:84:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 14 14:07:24 2025 by rpki-client