Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa
File:                     7654818c-dc53-3730-ba27-2df80fc36fca.roa (raw, json)
Hash identifier:          5RSE/nKl2U9GhjBLsbV94w/74DugKW93hwMLyqDB9v0=
Subject key identifier:   FD:DA:1E:4E:96:46:4E:8A:5A:87:31:24:E2:71:8A:B8:9B:5E:57:EC
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847686B8CFC711E68D5AECDE940
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     27310
IP address blocks:        72.29.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8c:fc:71:1e:68:d5:ae:cd:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=53cf5877-1323-49b2-b929-6d9b06f761ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:71:c9:ea:a2:39:0c:1c:00:1d:77:1b:55:
                    f8:c6:38:e7:9e:89:f4:00:33:63:4f:d8:b7:6f:90:
                    14:2d:07:2f:50:da:45:a8:a1:39:2a:ec:e3:67:db:
                    7c:44:54:68:1d:b4:ff:48:0d:b8:dd:17:63:ad:5e:
                    12:02:02:d6:cc:4f:b0:ae:ff:2f:96:03:10:3e:9e:
                    6c:91:df:63:71:42:f3:2c:1b:1f:22:f6:01:a8:25:
                    58:4a:bf:e9:d7:ad:75:f1:33:e4:d0:80:b2:a7:a6:
                    fa:5f:15:13:4b:16:20:e9:7d:1d:9a:a8:bb:c4:28:
                    0a:0f:f1:5e:6c:28:95:57:51:de:88:df:a7:87:96:
                    c1:bc:16:bf:d0:3e:61:39:cf:ab:ab:fc:27:2f:25:
                    30:37:c7:ae:3f:47:6e:4f:54:9c:82:96:ae:6d:24:
                    57:e5:12:e1:48:c4:55:9e:02:35:bb:0b:5c:64:4d:
                    2c:76:37:a5:87:43:e6:5a:a6:f5:1f:ba:48:fc:0b:
                    75:19:30:fd:70:b2:92:43:24:bc:e3:7a:f7:f4:62:
                    16:0f:25:d4:78:10:d0:85:41:38:56:2f:2c:ab:8a:
                    e1:bd:09:81:69:c5:86:b6:9c:71:e2:b3:5d:fc:e1:
                    6e:2c:9b:26:04:5b:0f:29:05:42:a9:1c:31:49:8a:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:1E:4E:96:46:4E:8A:5A:87:31:24:E2:71:8A:B8:9B:5E:57:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:82:6c:28:47:92:d1:15:bc:23:4a:21:74:8a:b4:88:08:
         d2:5c:1d:57:50:4c:63:c9:32:64:d3:74:41:d2:07:86:b9:14:
         d9:45:b1:b4:e4:ce:d4:70:2c:47:a2:f2:13:87:cf:0d:f2:c6:
         5a:ff:f4:8d:60:81:99:c7:2a:fc:b0:ac:cb:04:92:94:9e:74:
         b6:da:6d:cb:ef:23:40:c7:55:39:85:73:54:d9:ca:3f:38:27:
         09:b4:fe:50:ad:fd:bb:ab:90:41:56:b8:b6:b9:80:6c:cd:44:
         a3:c1:e6:7c:a4:e2:44:04:18:7b:4a:97:df:79:e9:9b:2e:13:
         e2:11:f0:e8:1e:69:a8:85:c7:1c:36:7a:16:c7:29:c3:3b:d1:
         bc:99:ae:6d:d1:9e:0d:98:21:61:de:1f:ac:9b:18:57:e0:39:
         4a:70:c2:01:89:e6:a2:f7:09:2f:fe:b5:b7:61:88:16:90:69:
         1b:a0:1b:09:41:40:5b:cc:38:b4:30:84:c5:5f:94:75:55:73:
         eb:e4:4e:3c:02:52:69:ea:d2:90:b3:22:34:6f:7b:c5:f5:49:
         a1:a1:ff:33:b1:4a:0d:38:68:5b:19:9a:65:1b:cb:f7:d8:ff:
         a0:57:84:c1:25:e3:39:3c:cc:6c:d2:f3:0a:b9:64:ad:c5:a9:
         21:c3:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org