Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa
File:                     b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa (raw, json)
Hash identifier:          yX5P2baEC57sKH0IMbzHt2sLUu5PKgazlkF3HkmCjJk=
Subject key identifier:   9D:9E:50:4C:79:71:22:C1:F1:A3:C7:4B:76:22:3E:EF:DF:4D:75:A7
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FDD0BDCFE219F63C2740
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     18672
IP address blocks:        72.172.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fd:d0:bd:cf:e2:19:f6:3c:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=59ab1a60-4992-4928-9428-50e9a8f2985a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:ac:b6:e2:4e:50:43:dd:6d:98:eb:53:c3:
                    a6:5e:fe:0c:d8:6f:86:7b:f9:2c:a7:fd:8b:4c:5c:
                    c5:0f:a3:02:b0:c5:a7:fd:74:e7:78:94:e6:c8:d4:
                    3e:77:f2:83:ac:e8:1e:41:3c:c9:7c:2c:42:75:aa:
                    fb:ac:08:78:4f:9a:83:3a:12:ed:ee:60:f1:e5:4f:
                    9d:b0:f1:8f:67:45:a6:5b:3c:fa:54:d4:48:ad:45:
                    9f:97:45:f4:7a:b0:d8:46:eb:8c:a4:00:28:7a:62:
                    41:c2:f2:4b:cd:e7:86:87:ce:4f:3a:49:5b:79:66:
                    1e:5e:b9:27:5d:c9:f0:27:31:1d:a9:25:9c:52:12:
                    e9:bc:c8:e6:10:82:a2:6e:de:71:4b:44:13:df:11:
                    a5:5c:15:ff:59:1e:ef:19:41:97:65:72:25:02:9b:
                    4c:86:1e:6e:97:9b:a4:3c:a4:20:dd:12:4e:bf:79:
                    08:88:94:1d:71:c3:64:22:f4:22:8e:db:24:9b:d7:
                    9b:b4:f4:1d:e2:73:50:75:9d:d7:d8:b5:bb:12:7b:
                    2d:c9:96:9c:12:7d:02:e5:ee:c9:1b:e8:a5:4d:29:
                    45:64:db:d7:ac:22:6d:d7:5f:66:5f:8d:f7:b5:5d:
                    ce:05:5f:34:ba:95:57:98:3e:99:1e:a2:7c:e1:25:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9E:50:4C:79:71:22:C1:F1:A3:C7:4B:76:22:3E:EF:DF:4D:75:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.172.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:27:02:02:c5:c3:37:d0:a7:7f:23:21:84:69:a7:13:b3:d5:
         f3:b2:0d:46:a2:44:3d:8c:bc:34:3e:65:e4:42:6b:79:ce:e8:
         c0:6b:de:17:36:4d:ad:84:a6:cd:82:6c:7d:24:01:cd:95:61:
         25:9b:e4:73:4d:ba:2f:5b:17:ad:04:6e:f8:54:9b:0d:99:7c:
         9c:a6:45:b5:e5:e6:a2:ec:87:91:4e:a6:d3:1f:a9:d0:97:99:
         6f:fa:76:9c:84:de:6c:31:f0:ed:b0:7a:90:95:2c:33:b1:b2:
         f3:dd:83:9d:5d:2d:05:45:c5:6c:e2:bf:78:5b:f9:e8:4b:f2:
         ea:23:59:82:54:3f:e1:9d:23:89:e8:f0:10:59:88:3f:d5:b1:
         b7:d5:5d:e4:42:34:11:57:ba:f9:ea:cf:ca:ae:39:cb:b7:39:
         70:08:80:d0:41:e7:44:8f:67:58:b1:9f:92:55:59:d4:32:96:
         6e:e3:88:ad:ec:12:99:12:8e:79:26:22:96:f6:57:e9:d2:ba:
         f7:29:23:c4:7c:43:ef:b2:a9:0b:a1:41:bc:01:aa:91:25:81:
         7b:95:ad:e0:80:fd:76:b2:15:1f:11:5a:cf:f9:97:e1:04:69:
         71:71:86:91:09:ae:6d:2f:77:b1:3f:88:77:c9:61:e6:97:3f:
         0d:2a:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:29 2024 by rpki-client on console-ams.rpki-client.org