Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa
File:                     ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa (raw, json)
Hash identifier:          jKdidZiH5FYxvXGA14LBjb6guGKlqvwSqsikQhdXCso=
Subject key identifier:   94:57:0F:6F:1B:15:AC:E7:96:50:FC:21:B1:7C:68:CC:0E:41:A1:2D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847308AE3082D69F8994BFCAA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa
Signing time:             Thu 12 Sep 2024 12:38:35 +0000
ROA not before:           Thu 12 Sep 2024 12:38:35 +0000
ROA not after:            Wed 11 Dec 2024 13:38:35 +0000
asID:                     0
IP address blocks:        72.13.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:8a:e3:08:2d:69:f8:99:4b:fc:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 12 12:38:35 2024 GMT
            Not After : Dec 11 13:38:35 2024 GMT
        Subject: CN=761e256e-739b-43e4-8ee6-6d1943a765ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:4a:62:f2:3e:cc:20:ed:38:c3:67:0a:ca:
                    76:03:23:c1:7b:f2:7a:20:2a:d6:5c:c2:11:13:99:
                    a6:60:c2:67:ce:51:aa:88:19:32:14:f5:23:7a:d6:
                    ca:cc:a9:cd:4d:83:cc:2a:c9:46:bd:51:ad:5f:69:
                    42:7f:e6:e0:50:09:2a:e1:f4:c4:ed:56:b2:1c:41:
                    67:ea:7a:35:7c:07:b5:ad:57:64:41:cc:86:ff:aa:
                    cf:24:b7:71:29:e0:53:5c:23:65:53:db:34:da:27:
                    17:25:74:93:2b:89:6c:0b:57:b8:30:cf:2f:7a:ad:
                    e4:77:c3:89:31:6b:b7:bd:6e:0a:0a:e0:cf:9e:3d:
                    6e:4b:5e:31:ea:e9:cb:77:44:db:98:91:91:2e:37:
                    99:7a:2e:28:04:0b:aa:36:ab:28:1a:19:bb:2a:ef:
                    12:ae:0d:17:26:79:29:79:5e:9d:9c:4d:df:70:6f:
                    96:86:6f:54:6e:41:71:97:89:bc:2b:1d:83:87:aa:
                    4a:0b:3c:77:ce:ad:96:53:cc:8a:d9:ff:60:cd:90:
                    83:9c:d4:f8:2b:5a:5e:3d:1d:43:71:6e:4b:87:71:
                    d4:f3:20:ca:c8:f0:3a:03:59:88:b8:9c:aa:66:34:
                    16:04:88:2c:08:8d:a9:42:02:d3:56:dc:a6:ba:50:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:0F:6F:1B:15:AC:E7:96:50:FC:21:B1:7C:68:CC:0E:41:A1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:56:1a:60:01:0e:32:38:77:da:2f:93:08:37:d6:42:98:55:
         99:bc:30:5e:f3:cc:d3:aa:15:b0:98:5e:c9:7d:23:d6:13:51:
         78:e5:5e:8d:2f:f6:36:86:c8:55:c9:46:45:fe:d7:2c:77:ae:
         3b:09:c9:40:90:e6:44:90:54:d2:90:e0:8a:1b:b6:c4:33:de:
         0c:e5:9b:fc:fb:06:76:d1:78:60:c1:e4:04:0d:1f:cd:05:6d:
         2e:c1:5c:42:f7:8f:09:a9:f3:66:db:1e:c3:11:d8:42:8a:fa:
         0e:48:16:ee:2c:4e:b6:34:db:ce:14:bd:4b:14:3c:2b:09:7c:
         c2:db:d7:07:26:b9:aa:d6:0c:17:74:9b:7e:ef:58:d1:d2:94:
         d1:c7:7b:0b:c9:b3:dc:5c:9f:a3:5a:5a:aa:1a:63:8b:69:6d:
         8e:c2:3a:a1:83:11:9d:24:42:b5:c2:82:df:55:89:a4:d8:e5:
         3c:e9:10:51:f9:85:ad:0f:64:c7:17:8e:4f:08:15:da:8c:0d:
         b7:18:f7:a5:9d:4b:74:e9:a0:dd:2a:ff:2f:f6:f0:2b:26:d2:
         42:66:50:61:59:38:85:b3:e9:e0:e4:e0:79:4c:60:a6:3e:e7:
         e9:c0:e5:c8:79:78:23:e5:eb:37:55:1a:36:c2:85:98:e5:bb:
         53:8b:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:37 2024 by rpki-client on console-fra.rpki-client.org