Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2fe37762-0a82-3d08-975b-f89031a4485b.roa
File:                     2fe37762-0a82-3d08-975b-f89031a4485b.roa (raw, json)
Hash identifier:          1GF4pvUbPttSzLS5jO74iTQjDvuifPNwd8TmPiLYnZg=
Subject key identifier:   AE:10:BB:1D:FB:CC:40:AE:D1:C0:84:9F:27:3A:BA:24:1A:96:72:E9
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F43285845B21E2B6A0FF22CC36DEAB380
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2fe37762-0a82-3d08-975b-f89031a4485b.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     31898
IP address blocks:        72.18.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2b:6a:0f:f2:2c:c3:6d:ea:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=c1bbbb0f-c44e-48e3-9ffe-e8d88d3d29d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:a2:d7:c9:5c:25:b4:55:d7:45:0a:ae:5e:
                    90:1d:cb:97:8d:23:75:5b:3b:2f:6e:7a:86:ab:a9:
                    b6:72:93:9d:27:7a:1b:4a:8a:07:9f:83:e0:2d:dc:
                    5f:83:17:e0:1a:ac:5d:92:b8:c9:76:9d:dd:c1:b6:
                    17:d7:10:81:6e:0b:89:e5:2e:cd:5c:26:56:66:5c:
                    0e:bf:a2:0d:08:54:bc:cd:1c:a1:bc:8a:ca:ef:96:
                    c6:a7:71:dc:ea:c9:4c:a2:2e:2c:91:66:41:e9:68:
                    b4:99:a3:eb:2c:f8:d8:a6:d8:ff:6f:27:61:42:ca:
                    7d:bf:91:3b:f9:5e:74:b0:bf:ad:f6:19:0a:ae:bb:
                    67:37:00:d6:ac:27:5f:cc:7f:c5:ac:76:9c:dc:16:
                    c4:7e:79:a6:77:5e:14:d4:42:e9:30:a2:82:e5:f8:
                    0a:fa:27:30:bc:f6:55:9b:8f:75:e0:6d:78:70:85:
                    cc:df:70:6d:32:d6:53:3f:83:70:63:7d:b7:fd:d6:
                    2f:51:d4:0e:f7:9b:dc:f3:88:98:4b:70:0e:7b:1f:
                    0e:f3:4f:e7:71:c2:1b:a0:71:ac:d0:50:e6:07:15:
                    16:2d:ce:70:17:0e:71:32:9b:bf:37:35:8d:1b:54:
                    90:fb:59:ab:20:c3:a7:98:eb:7e:94:3e:ea:54:81:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:BB:1D:FB:CC:40:AE:D1:C0:84:9F:27:3A:BA:24:1A:96:72:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2fe37762-0a82-3d08-975b-f89031a4485b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:21:50:1f:01:4a:d3:ab:d2:3e:f6:15:3d:7c:68:c1:e0:
         06:a8:77:9c:98:dc:e5:b4:a9:36:75:19:78:ad:6d:f2:a3:8c:
         25:32:58:bc:13:fd:2a:bc:1b:ce:34:47:f2:9b:96:5f:7b:5c:
         c6:49:06:83:df:09:2c:8d:35:65:70:9c:ee:0b:94:d8:a3:72:
         5f:8a:53:58:bd:e0:77:1b:53:29:07:d3:4a:03:89:ff:46:29:
         19:fd:ee:b8:1d:df:1c:88:8f:66:4b:51:b0:15:d4:c1:37:ab:
         b9:16:73:55:76:1c:79:4c:d8:17:58:9d:8d:c0:51:ce:1f:45:
         5f:61:80:69:ac:77:54:ca:18:a9:c2:1e:8c:7f:01:59:b9:5c:
         b9:9e:9d:7d:83:4d:a8:13:2a:1c:8d:b6:8c:5d:7f:01:ea:98:
         0b:e3:d8:8f:8a:09:fb:50:ac:84:03:26:90:8f:dd:f3:6d:b1:
         c0:e9:52:62:19:12:24:65:3a:d4:1b:cc:65:3c:ea:ed:af:64:
         81:14:f9:5f:ac:f9:ae:92:2e:5f:ef:df:b9:f0:25:f0:42:97:
         a8:75:db:a2:31:b6:5d:b7:1c:8f:38:6c:91:68:43:4f:50:06:
         f6:77:78:fe:a5:de:f7:d0:cd:35:a3:a0:22:1a:c1:79:bf:e0:
         01:19:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:37 2024 by rpki-client on console-fra.rpki-client.org