Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4cadbfff-1166-3847-89b2-eaf5064d23a7.roa
File:                     4cadbfff-1166-3847-89b2-eaf5064d23a7.roa (raw, json)
Hash identifier:          vv20e9+pp2otpKWDjibXvWRnEw6VHO0tVKvgtcWSm7I=
Subject key identifier:   74:55:3C:05:67:33:8A:53:60:7C:E2:67:A4:0C:B9:8C:BC:70:D3:91
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F43285847E8F4CABE0CDA610AFD274280
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4cadbfff-1166-3847-89b2-eaf5064d23a7.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     14618
IP address blocks:        72.13.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ca:be:0c:da:61:0a:fd:27:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=80006966-93db-4151-8337-2507d476b44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:4a:e2:0b:d1:08:70:c8:3a:83:ee:39:90:
                    84:27:93:ee:cf:22:2b:64:79:2a:8f:12:25:65:8e:
                    d7:f9:98:f2:72:89:02:87:d4:ca:11:32:1a:61:b4:
                    31:91:e1:f8:ba:7a:e0:2d:4e:60:88:6f:7f:0d:83:
                    ed:cb:5d:2e:9b:e5:ac:5e:19:06:a0:c3:c1:05:41:
                    47:f2:ae:01:fc:bc:c3:c8:26:8a:4b:da:99:b9:3b:
                    b7:7e:42:cf:6c:1d:07:89:9a:5c:00:d6:33:50:27:
                    40:45:c8:b5:35:c8:48:7a:6b:06:ef:97:95:1a:76:
                    c6:e4:1b:c9:64:da:68:00:19:a4:c9:fc:ac:7e:54:
                    10:16:44:e3:b5:b0:e5:02:0d:e5:e1:df:77:ff:49:
                    87:8b:2c:80:30:22:50:3f:62:db:a2:8d:9e:b6:b0:
                    fc:51:1b:c6:9e:00:c6:ca:e9:69:52:34:19:ce:5b:
                    cd:5c:22:49:b0:67:62:4a:d5:96:3c:45:77:20:f0:
                    00:6c:03:65:c4:45:aa:18:06:7a:49:a2:64:78:16:
                    00:fb:6c:3b:f5:4e:f4:de:8f:55:b1:ff:a6:67:fe:
                    ea:7a:05:8e:03:3a:9c:1e:7a:d2:b7:75:52:23:ae:
                    09:32:f9:27:df:d3:56:f3:67:a4:fd:ef:d0:c2:3c:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:3C:05:67:33:8A:53:60:7C:E2:67:A4:0C:B9:8C:BC:70:D3:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4cadbfff-1166-3847-89b2-eaf5064d23a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:51:b3:f4:e1:03:e0:44:54:e6:21:69:21:d0:4f:44:7a:4c:
         b4:c2:2f:bb:f2:39:0f:d0:72:84:cf:dc:87:13:52:70:22:6c:
         83:fd:fb:90:c3:12:f6:10:50:59:02:43:e1:58:90:1f:21:0f:
         47:b4:00:6d:71:eb:2a:a7:19:e1:64:9f:60:1a:1a:9c:56:47:
         dc:1c:c9:f9:e4:e9:5e:e6:1f:33:bc:fd:ba:ca:28:a9:3a:e1:
         68:f2:7b:6e:99:58:f5:6b:9b:a1:80:11:48:40:9c:c8:e0:f3:
         d3:36:8e:d3:7c:0b:b6:4d:5f:72:b9:63:ee:08:13:f9:34:3f:
         0a:c6:9c:41:4e:12:94:92:15:6a:1b:ed:5f:86:65:19:94:96:
         74:ae:cc:26:74:de:8f:dc:78:d3:16:02:c5:9c:1c:47:0d:f2:
         08:48:ba:e5:d0:1a:62:af:b4:4c:a4:38:d5:22:da:bb:26:11:
         e9:fa:82:9e:22:30:97:9a:73:f5:b9:cf:eb:1a:9f:83:07:8b:
         e2:f2:57:08:be:74:4d:ad:0c:db:d4:ea:47:14:8a:84:32:6c:
         e4:c5:d0:9b:37:d8:41:ec:1d:85:9a:cc:4a:2e:57:91:18:4a:
         0c:57:f9:26:41:5a:a1:5e:ec:d2:3e:64:92:ea:23:c3:97:0a:
         ae:7e:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:50 2024 by rpki-client on console-fra.rpki-client.org