Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
File:                     4db01a54-154f-32c5-a540-8f9f89529b1c.roa (raw, json)
Hash identifier:          TgQz3oCIe3FBa8WX7T7p8UB3+dcILyCmCr8PKX/SmG8=
Subject key identifier:   CF:4B:C0:20:F3:9C:A1:AD:E3:00:A8:A2:82:3D:57:A6:19:21:4A:21
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584563F30EBEE79CA992CED9E780
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        72.13.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0e:be:e7:9c:a9:92:ce:d9:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=3ecb4bb8-953c-4cf8-8fcb-db70e3a3704e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:4e:29:f4:28:2e:68:51:7f:69:af:14:f3:
                    ff:49:53:3a:3f:ab:28:e8:f5:20:a4:70:5c:6e:d5:
                    93:f9:c1:fc:38:54:0c:c2:13:62:84:b7:f7:16:9f:
                    83:e3:bb:e3:4d:08:0b:1d:72:e5:0e:b0:64:24:a6:
                    50:25:9e:1c:f2:d4:b6:91:2f:36:88:ba:07:53:db:
                    24:5b:99:55:15:a4:fa:e5:8e:92:09:cf:79:d2:0d:
                    b5:4e:80:f6:df:7c:85:8b:dd:ae:28:7a:f9:08:7e:
                    82:4a:d9:a8:6e:06:da:7b:52:e1:63:45:8d:0f:7b:
                    b1:09:7a:36:07:c8:c0:38:c2:d5:92:a7:c9:c3:7f:
                    72:8d:6f:9b:0c:99:7f:4d:45:b4:1c:d0:63:9e:c5:
                    17:42:68:ab:ab:33:ee:72:93:dd:56:5e:b2:d2:25:
                    d8:9c:94:94:5f:ba:e3:38:23:be:8c:1b:b4:f1:82:
                    f6:f1:09:73:12:6a:71:af:2e:78:ff:8c:e2:9a:64:
                    79:a8:be:6f:9d:24:71:9f:ed:5a:4b:e8:59:2f:37:
                    a0:fe:37:71:4c:83:dc:64:73:f2:ea:eb:4a:74:c3:
                    ab:59:97:54:ff:13:c2:99:32:f3:29:74:27:fb:e1:
                    f1:da:34:de:2e:a7:bf:eb:8d:96:b9:00:ce:e9:48:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:C0:20:F3:9C:A1:AD:E3:00:A8:A2:82:3D:57:A6:19:21:4A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:d8:91:68:de:68:d1:36:0c:68:27:3d:9c:12:d2:dd:f4:
         ff:8b:3f:81:85:08:c7:19:0e:24:54:f6:f2:bc:bc:93:c8:bd:
         39:48:59:2d:93:84:d9:18:8c:23:bd:f2:d0:1b:e6:5c:10:82:
         fd:0d:ca:c5:a6:7c:40:f5:bd:ba:c0:86:52:78:11:76:ed:c6:
         c9:94:25:35:59:a0:9c:38:f6:04:f8:43:bd:12:c6:2a:b0:3f:
         25:a5:45:8d:c8:9c:3e:bf:f1:e2:95:80:f9:a2:e8:22:60:85:
         f9:f6:bf:e4:4a:33:a0:c4:55:d5:dc:66:83:0d:5a:48:1f:b6:
         9b:08:aa:6f:7d:ef:fc:37:f2:34:e5:52:da:56:95:9d:47:70:
         ba:a8:98:5a:03:29:0f:fe:33:9c:aa:1b:3a:19:04:ab:d9:81:
         62:ef:42:6b:ff:52:0b:b8:1c:af:66:36:f4:6c:68:b0:17:45:
         33:48:6e:4c:93:7e:4c:e0:f1:14:ea:41:62:7b:39:d2:0f:c0:
         d8:64:f0:74:e9:c1:20:8f:21:0b:33:cc:2c:b2:b5:d8:3b:90:
         bb:66:43:2b:67:52:1c:f8:48:3f:d8:1d:e8:be:e3:ef:42:ce:
         b7:51:1f:24:02:70:d3:00:fd:7f:8a:86:e5:a7:fa:b0:aa:2b:
         e1:85:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:24:49 2024 by rpki-client on console-ams.rpki-client.org