Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9110e0dd-a4d8-39f0-90ec-b4c530e8ae15.roa
File:                     9110e0dd-a4d8-39f0-90ec-b4c530e8ae15.roa (raw, json)
Hash identifier:          U9zcoOuhlMu2xoOSwkzMxG8qOl/rP5PBxmqHtAMFtMU=
Subject key identifier:   32:D9:94:C0:40:35:14:27:FE:5B:F7:C0:79:7C:63:E9:75:33:BB:3E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154FD701C122B8817516100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9110e0dd-a4d8-39f0-90ec-b4c530e8ae15.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        72.44.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:fd:70:1c:12:2b:88:17:51:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=14c57128-accc-4abe-8702-355c24c07587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b9:38:60:2d:b3:47:aa:05:d5:46:37:fc:26:
                    d0:18:bd:55:93:72:0c:1d:a3:7f:52:cb:01:09:8c:
                    a0:83:fb:06:c6:b3:bd:bb:95:67:be:18:b8:af:04:
                    46:36:11:45:36:bc:24:2c:a4:b1:3b:df:a0:e1:34:
                    57:48:11:9c:a2:b9:4b:6b:89:ca:18:9e:99:78:1e:
                    e1:aa:55:58:08:1f:8b:e6:d7:08:6b:93:e2:ed:79:
                    6a:3f:ec:35:7f:e8:46:3e:0f:e5:6e:5f:42:bc:3c:
                    90:ab:e4:5b:0c:a9:07:1c:94:b3:87:15:d8:10:51:
                    43:4e:78:5f:63:57:84:28:91:df:ae:0e:03:ad:de:
                    8d:6e:ca:4d:58:2a:6e:98:c2:5d:6c:6c:5f:44:10:
                    1d:7e:bd:fb:93:3b:a4:d0:a5:b6:ef:0b:a6:80:8a:
                    80:49:6b:fc:58:9e:cf:c2:6e:02:90:55:ab:5f:cd:
                    e6:bb:b7:c8:c6:9d:9c:2f:ab:ed:90:2f:37:6a:db:
                    fa:f0:e8:05:d5:d0:c3:3a:29:a8:2c:2e:5f:ca:90:
                    a3:13:2c:d3:87:ed:8c:c8:de:85:39:75:72:12:50:
                    95:03:58:df:6e:c9:2a:6c:a0:c6:f4:8c:1b:8b:1a:
                    c3:74:1f:a3:5b:7e:72:c3:d6:73:a4:78:fd:6b:23:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D9:94:C0:40:35:14:27:FE:5B:F7:C0:79:7C:63:E9:75:33:BB:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9110e0dd-a4d8-39f0-90ec-b4c530e8ae15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:98:1c:3e:de:16:f5:2a:00:69:ec:3e:f0:36:69:e7:bb:a2:
         9c:7e:ed:01:84:8f:60:29:b8:1f:22:98:47:96:bc:0b:59:f5:
         55:5c:76:3a:f9:93:4f:af:ca:61:eb:48:44:ea:f2:0d:b1:e2:
         20:8a:49:c0:96:20:18:53:48:b8:2a:6a:c0:1d:34:b0:29:65:
         d2:00:9d:34:7f:7d:20:74:ed:77:07:4f:48:03:34:1f:84:e5:
         25:2b:59:34:d7:2d:2c:ed:63:ce:e7:35:12:c4:6e:53:eb:bc:
         6a:d6:fd:65:23:d7:5b:f3:f0:58:94:d7:b3:4c:ce:ab:73:95:
         f8:6a:22:f5:7e:27:4f:07:c2:cd:63:05:37:77:97:9a:02:2a:
         24:50:b4:7a:3b:4a:1b:93:ba:7c:e3:36:b3:79:00:20:65:c1:
         94:6f:a4:b0:d2:3c:55:81:dd:fd:3c:7f:a7:c0:d9:63:75:1f:
         6a:83:54:1f:a1:80:bd:aa:89:87:66:dd:25:b9:8e:36:6f:33:
         4b:e7:4f:07:83:9e:8c:15:a0:47:9d:48:04:98:c0:3e:bd:cb:
         f4:b1:9c:2f:9b:83:c1:4a:52:3f:68:ab:58:0d:20:de:01:9e:
         a1:ea:54:4b:2b:10:2c:2f:65:9c:7d:23:09:cc:14:84:c8:dd:
         a9:8e:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:56 2024 by rpki-client on console-ams.rpki-client.org