Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa
File:                     50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa (raw, json)
Hash identifier:          yQypIHOXYkpz1RBzvguPUP0pJ4AN5FJlNAO01E7w298=
Subject key identifier:   D7:65:BF:60:51:B8:52:B3:9A:63:E5:B7:49:97:36:A5:AC:2D:8C:D7
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F432858472405CBC32295F07FEABE9800
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        72.13.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:cb:c3:22:95:f0:7f:ea:be:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=2e9c3d77-2ba1-4bde-b968-8a4e6bab5de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:a8:53:b4:2b:b7:3a:e7:e0:a5:01:af:22:
                    15:db:a9:d3:73:4d:8c:0e:c8:c3:73:3c:8e:c8:ba:
                    1d:5b:0d:cf:bb:fe:03:ed:31:fb:86:c0:4d:79:5d:
                    f8:65:94:71:d3:54:39:39:ef:38:4c:49:e0:30:b5:
                    49:ed:a8:40:45:f6:8e:c0:92:f5:25:c6:35:28:6f:
                    05:d1:05:cc:cc:c0:af:ae:45:73:29:bc:75:e4:ae:
                    7d:4d:98:ed:38:cb:5c:14:30:9b:40:89:1d:f5:76:
                    c5:47:5a:5b:41:2d:3d:98:03:cb:00:26:7a:8a:5d:
                    e4:9f:c3:2a:54:d8:a4:f2:c5:a2:8a:da:ba:f6:cc:
                    80:0e:0d:0c:4d:2e:5f:c8:f9:35:6e:93:65:13:84:
                    14:81:cc:23:5b:cc:70:11:0b:7a:fc:f1:15:92:cc:
                    32:a9:eb:06:88:76:72:af:6c:59:ee:d5:08:b7:54:
                    09:f3:b9:b3:82:78:c2:c4:a7:ae:81:b9:6e:e7:8a:
                    14:62:49:51:37:28:8c:87:52:b5:0c:28:54:10:45:
                    2e:53:90:88:17:1d:d8:79:c2:d9:4e:99:3e:d3:1a:
                    23:26:82:55:5c:2f:85:96:7e:45:7c:65:30:29:2b:
                    26:c7:b0:83:1e:1d:e3:0f:79:64:07:0b:36:26:e7:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:BF:60:51:B8:52:B3:9A:63:E5:B7:49:97:36:A5:AC:2D:8C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c4:35:01:aa:cc:e0:4e:89:5d:9e:fc:95:5e:cc:1b:99:1e:
         28:40:f5:9c:b6:e2:48:b7:ed:06:f4:21:8b:ee:42:60:5c:f5:
         f6:e9:f8:3a:c2:8b:dc:d1:53:6e:39:5c:f2:35:53:51:97:df:
         99:77:f1:1d:be:f0:6f:ab:8b:59:5b:6d:52:d4:cf:46:98:6d:
         f2:32:a9:81:13:2c:3a:04:1b:d4:4b:6b:fe:0b:c4:5b:3f:d3:
         f6:69:b9:24:34:8a:b6:f5:75:67:3e:07:a5:60:21:40:82:0e:
         15:af:ce:a3:ab:33:d4:c2:8e:ae:ee:a3:1f:76:19:22:81:3f:
         42:b8:be:07:73:50:de:36:b2:42:b3:88:11:8e:ef:ac:57:36:
         a3:12:66:9e:f9:61:89:fe:18:35:d8:6a:71:92:1c:4d:49:41:
         a5:14:e7:1f:4d:29:1b:fe:ca:7d:26:42:5f:25:39:30:2d:d2:
         ba:6d:93:54:40:af:d8:f4:99:25:b1:ba:2b:b9:32:dd:c6:8b:
         a5:86:bf:ae:9b:ee:c5:d1:6d:2a:50:1b:a3:08:73:9a:2e:12:
         d2:5c:40:d9:ed:e2:c4:e7:6e:f3:54:89:0b:ed:64:0d:90:e8:
         9b:51:20:4a:1c:a6:5f:e4:d7:ed:cc:b3:13:e0:89:09:38:9f:
         77:38:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:50 2024 by rpki-client on console-fra.rpki-client.org