Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
File:                     0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa (raw, json)
Hash identifier:          w2M3//9LWFEOtDiBg/P4AOpb0nD7iGqdWgzeqZ5GMZg=
Subject key identifier:   35:34:F6:DA:5E:6F:3A:A0:16:DA:CE:80:3A:27:45:B3:3B:8F:DF:5C
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F432858459E9364E524E3DD899A0C0400
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        72.18.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:64:e5:24:e3:dd:89:9a:0c:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=eef619a5-17e2-4a5c-baf7-445764dc32d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:de:4f:10:26:b0:9f:25:76:fb:d1:dc:05:
                    67:1a:17:33:21:cc:b5:01:5f:bc:c9:3b:fb:93:32:
                    4b:91:ee:46:07:7e:27:8d:68:a7:dc:8d:18:16:cc:
                    ce:96:ae:a0:76:49:f9:fa:4a:9a:36:6a:f2:4c:9a:
                    7e:8f:24:26:f2:38:05:69:6d:f0:9d:80:e1:aa:ae:
                    a4:0c:49:9a:2f:26:d4:83:56:3d:a6:d0:1f:d3:26:
                    e0:66:9c:bd:3d:aa:27:3b:4c:89:78:51:5a:a8:49:
                    0c:f9:0c:71:81:b5:4a:d1:0d:2a:40:c7:b5:0c:80:
                    9c:ca:56:fe:a4:ae:cd:20:ef:5c:c2:75:df:a9:8b:
                    50:fe:82:1e:1c:5e:1a:ca:99:ab:65:f0:1e:8f:4b:
                    2d:07:fc:98:4b:a6:d6:92:4b:1b:df:ff:4d:b3:59:
                    68:7d:10:48:ed:48:74:3c:06:4b:2a:ac:36:28:d2:
                    de:5f:6b:a5:bd:d2:c8:25:80:54:f3:87:aa:6f:59:
                    a4:1f:f8:04:7c:a0:05:3d:68:e4:87:a2:20:1d:f8:
                    bb:fa:3d:a4:01:13:0f:1c:85:d3:8d:6a:15:90:0b:
                    68:5d:18:3a:5b:3f:ee:0b:aa:0b:15:ee:61:1e:f7:
                    29:ee:7c:7f:2c:04:04:4d:01:fe:8d:df:d0:74:5e:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:34:F6:DA:5E:6F:3A:A0:16:DA:CE:80:3A:27:45:B3:3B:8F:DF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/0c319f1f-4972-3ede-be10-299c8a1cd7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:05:78:4e:67:cb:6b:d6:a3:63:b5:c6:01:37:dc:61:a6:
         61:5c:8d:67:92:1b:06:26:29:52:c7:67:c0:da:eb:81:a2:87:
         9f:58:0f:d4:c8:72:af:a2:5b:36:da:04:0b:dd:be:3b:1d:5b:
         b9:e3:77:7c:79:44:38:cf:a1:56:f9:af:49:31:18:e5:3e:e8:
         ac:61:12:a6:80:f4:ab:dd:9b:29:69:37:a4:50:1a:19:a9:c4:
         15:c0:75:c7:88:e4:39:41:25:55:91:04:2e:7a:26:ed:d6:40:
         42:86:2c:1b:31:19:21:b6:17:c0:67:be:84:d5:36:8c:37:b2:
         63:14:2f:4e:8d:51:4c:97:16:9c:05:fe:18:ce:aa:86:71:c6:
         56:3b:e7:eb:40:18:be:c2:b4:b5:28:bb:fe:98:c7:cd:32:99:
         81:bb:7b:bb:ca:af:0b:02:ef:be:d3:4b:5c:96:66:54:47:d9:
         4f:cc:5f:48:6a:eb:52:eb:4a:19:c6:bf:81:e8:7e:43:8a:7e:
         e6:39:da:6c:df:fb:70:00:6a:30:86:35:13:3c:aa:eb:4d:b1:
         3f:58:1c:a1:21:c3:df:86:8c:da:0e:32:d8:c4:ed:98:86:18:
         84:f8:d5:0c:d5:9e:0f:38:74:42:7d:40:e3:c6:e2:99:1a:e3:
         9b:bd:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:58 2024 by rpki-client on console-ams.rpki-client.org