Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa
File:                     a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa (raw, json)
Hash identifier:          S6XmF6iW828JsoTngqUDxJL2sR9B1Yxrn85CIt3eYfE=
Subject key identifier:   7F:73:9C:49:B3:2A:3F:0D:84:48:33:76:66:AB:1E:59:6E:3F:1F:3D
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584563F30DFF89D5B81E9CEDC200
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        72.13.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0d:ff:89:d5:b8:1e:9c:ed:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=1ceec9d5-9700-4bfe-bedd-afa7ec2870bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:d2:71:60:1a:0e:6f:18:8d:0f:68:5e:69:
                    c8:52:36:8e:89:3c:ad:1d:96:f9:b7:b7:f1:7a:af:
                    6d:d9:7d:55:a2:8e:f5:3a:d8:f9:3b:86:61:84:63:
                    1d:57:75:15:2d:bf:8b:48:4f:83:5c:71:6b:6f:14:
                    01:11:c9:90:fe:e3:0f:14:cf:4e:11:98:97:19:7c:
                    cf:a4:34:34:80:88:76:0a:c7:e3:29:85:b8:63:db:
                    17:76:27:72:00:15:68:a5:d6:a1:49:10:b8:87:4a:
                    85:b4:66:8e:3d:b0:bf:bf:77:b3:9c:53:2a:d1:57:
                    f8:6d:c8:aa:29:e8:5f:55:ff:df:9f:d2:5b:a9:27:
                    2b:a6:99:a4:9a:82:9d:6a:a1:e3:d4:d3:6d:b7:63:
                    20:d5:a4:ca:4a:64:37:2b:ef:c0:e0:a1:d7:90:f2:
                    b8:00:2c:84:9f:83:3a:69:84:fe:92:60:42:ef:93:
                    97:9a:2c:2f:d8:eb:f9:da:05:33:8b:8f:cf:68:f0:
                    50:33:86:39:42:1f:1d:cd:99:30:65:5e:c1:b0:8b:
                    dc:be:66:71:0a:57:7a:de:d7:27:12:77:38:a7:5c:
                    e9:52:2b:86:f2:36:eb:6d:4c:60:f1:b3:8a:4f:49:
                    a0:d9:f8:75:7c:d9:f3:3c:f6:bf:ab:d3:7a:ef:5a:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:9C:49:B3:2A:3F:0D:84:48:33:76:66:AB:1E:59:6E:3F:1F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/a4fbc427-2592-35df-86a3-1eb0eeb8a01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a2:3c:d0:9a:40:46:29:0f:fa:a0:93:ac:b6:bf:c7:a8:e5:
         91:46:f3:20:28:74:8a:25:e3:e1:3e:48:6f:4e:11:fc:ee:e8:
         c6:c4:7d:1d:39:2f:cc:59:76:08:74:72:f3:96:8b:f7:15:b1:
         43:a1:c3:81:50:8a:c9:41:32:bf:77:a3:b4:2b:8b:6f:2e:f5:
         46:83:61:25:c8:c8:a4:51:27:75:d9:8e:ed:2d:78:bf:87:f6:
         c3:84:53:6c:6e:29:dc:81:f3:62:21:48:e7:28:8e:36:ac:3a:
         47:05:b8:5b:8d:3e:c7:8e:26:9d:2f:d4:51:95:72:d9:3e:e7:
         bf:a9:ef:0e:18:e7:bd:da:11:25:2a:9e:ad:1e:76:b9:f5:c9:
         03:bb:d6:b4:dc:1f:aa:bc:73:a1:ad:d1:43:7a:78:bd:9e:26:
         76:18:ef:c7:b4:73:ac:61:1c:68:ff:90:71:f4:1a:db:d7:44:
         db:45:62:b3:9d:46:d2:c2:2c:10:c6:7e:54:d6:a3:24:f6:f1:
         10:df:3d:dd:17:2b:7f:15:fb:a5:13:9d:a7:6e:76:9f:9f:f4:
         2e:5a:66:2e:23:46:4e:29:22:4c:19:73:56:ed:3f:bf:83:41:
         eb:c8:35:bb:2d:4f:25:9f:ae:f5:a0:8f:2a:85:36:8b:f3:73:
         3a:a3:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:02:54 2024 by rpki-client on console-fra.rpki-client.org