Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
File:                     14801496-2113-3ff3-8286-6329eebc5a7f.roa (raw, json)
Hash identifier:          FoDIGewht7uKPLbKBhAnOK7vJtr17oYt9X60oQYwEJc=
Subject key identifier:   DF:8E:78:B5:DC:62:B0:CA:FC:02:6F:E1:C3:81:ED:4D:F3:78:48:99
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584582A89E143609850FAA236700
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        72.42.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9e:14:36:09:85:0f:aa:23:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=bee36d32-163f-494e-8b1b-438a8bd08d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:b3:f8:dc:32:69:ff:7c:c2:37:e8:24:e0:
                    33:1a:c8:89:03:3f:26:17:70:02:25:23:92:56:92:
                    31:01:d6:ed:a0:f1:ba:a7:be:cc:1c:61:90:c5:df:
                    0f:90:7e:1b:97:45:52:be:d1:5e:58:d7:9b:b4:02:
                    c3:58:0a:8f:44:31:41:b2:45:ed:bc:09:20:0f:b8:
                    fe:6a:43:2d:54:7f:5b:d7:f0:d2:3f:bb:a5:03:2e:
                    9b:93:a0:82:5d:dd:de:8b:8e:f8:d7:07:99:96:ce:
                    33:36:38:7e:e2:dd:a2:76:69:3f:87:da:2e:8a:cd:
                    6d:59:7e:66:61:98:fc:41:cd:83:5f:7b:f0:a5:31:
                    65:03:b8:e1:b1:c2:6a:c7:d7:0b:58:51:a8:1d:a9:
                    d4:82:a5:6e:50:d7:17:8c:fd:ec:b5:ec:1e:a5:ff:
                    02:2d:0c:ef:a6:7e:35:82:bc:59:e6:ae:6a:6b:c9:
                    66:97:bc:16:3f:8d:3c:86:72:46:b5:fe:a0:04:9b:
                    00:68:c2:93:bc:b6:da:97:c3:cc:3c:aa:1f:0a:87:
                    ec:f3:ae:54:3e:90:b2:40:dd:77:e6:d6:8e:d7:b1:
                    6a:ac:14:d6:c2:fc:77:03:9f:62:ec:09:08:0f:a8:
                    fd:12:fa:13:91:d4:d1:8f:69:a3:57:a3:e5:e0:a6:
                    c4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8E:78:B5:DC:62:B0:CA:FC:02:6F:E1:C3:81:ED:4D:F3:78:48:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:19:e9:ee:12:5c:ae:f1:f6:de:3a:7d:9a:df:5e:d4:70:
         b8:5e:a7:3f:19:ec:c6:6c:2e:21:40:75:65:84:31:7e:ca:06:
         52:ef:ac:6b:d4:df:bc:70:0e:1c:0a:97:85:a8:63:e4:1c:00:
         16:4d:05:47:48:8f:41:97:9b:f1:36:19:7e:a6:24:f3:ee:e8:
         22:ed:57:21:94:38:da:50:78:19:a9:fb:74:3d:be:61:67:3a:
         cc:84:39:7a:42:7d:f7:93:63:ab:1d:04:5a:f2:61:7d:9e:a1:
         66:90:40:90:3f:2a:7f:02:ca:0e:2e:e1:09:de:3d:be:d9:1f:
         f8:7e:d3:8e:ef:7c:a2:d8:8e:9a:2e:96:ad:24:3f:f3:0f:56:
         c2:1f:d5:d7:d9:2f:a6:64:b0:58:aa:0a:72:8d:77:82:d4:c8:
         d5:4b:63:cd:53:d2:b8:5e:c8:24:3b:28:1e:72:3b:c3:8b:4b:
         54:8e:a5:85:1e:ca:dd:fc:ec:1d:cc:c5:1a:e6:cf:f1:aa:81:
         2c:de:d2:2f:d3:4b:1f:70:0f:03:56:c9:45:18:33:9b:5b:25:
         5c:8e:8f:11:d3:92:5e:66:54:10:64:c1:b8:0b:22:89:d6:9f:
         24:2f:e9:0f:41:c9:71:99:54:7e:8a:67:04:11:21:37:0b:5a:
         09:c3:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:31 2024 by rpki-client on console-fra.rpki-client.org