Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/237c14e0-2dfa-3506-ae99-b261d777bae1.roa
File:                     237c14e0-2dfa-3506-ae99-b261d777bae1.roa (raw, json)
Hash identifier:          QLnsaBfIku8KozEO+c88K5xuL1/R3iAIbbu7dCw2aag=
Subject key identifier:   15:CD:24:29:99:FD:62:CD:79:3B:6B:AD:62:0D:95:72:F2:9B:CF:88
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DAF53B1574AB44F2E8100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/237c14e0-2dfa-3506-ae99-b261d777bae1.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        72.131.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:af:53:b1:57:4a:b4:4f:2e:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=a2e4035f-fb48-42aa-89dc-533b4a0c30aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:47:1a:b0:e1:be:15:be:e9:84:aa:ca:ca:
                    87:65:50:71:2c:1b:e1:b0:0b:e8:3f:f8:42:28:9a:
                    5b:f8:bb:bf:1c:35:00:b8:34:3f:a6:5e:9e:dc:91:
                    a0:8c:7a:4d:72:3f:1a:28:97:9f:2a:ef:e1:d8:13:
                    15:b3:c4:b3:d1:c0:11:1d:2a:c9:bc:b3:85:06:31:
                    e8:02:68:b1:7b:41:39:e9:27:a4:e0:52:85:de:37:
                    b8:d1:79:40:06:25:e9:9c:99:8a:65:eb:28:d2:4c:
                    81:61:4d:2c:2f:2c:1d:1a:19:7e:76:6e:d4:c9:be:
                    40:49:20:50:7a:90:6a:ba:36:ba:35:e1:01:92:58:
                    9d:0d:d3:df:22:19:76:96:35:44:9f:e4:66:3b:95:
                    7a:22:a5:4a:71:08:eb:3a:df:fa:a3:d2:bc:e7:a5:
                    ca:c5:5e:91:ad:cb:f2:22:51:62:92:8f:5f:20:19:
                    d5:9f:28:b7:82:a5:2a:25:eb:53:a1:d4:6e:49:d8:
                    18:d2:13:9c:53:83:ed:24:f0:83:37:f6:5f:f7:46:
                    c5:10:5f:ad:f4:cd:74:bc:69:f2:cc:99:c2:d6:c1:
                    04:fb:c5:9a:f9:98:cf:6b:92:e4:c6:eb:2f:13:56:
                    7e:4c:36:7e:7f:d7:4f:2e:d0:50:2d:b4:80:31:d3:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:24:29:99:FD:62:CD:79:3B:6B:AD:62:0D:95:72:F2:9B:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/237c14e0-2dfa-3506-ae99-b261d777bae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.131.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:a6:24:8c:bb:b7:7f:f8:16:49:09:1e:b2:d0:59:6d:df:
         ce:81:aa:33:39:b2:cb:fa:85:26:a5:ee:f6:56:1c:77:b6:e5:
         5b:85:86:72:f0:19:bd:33:e7:f7:ac:09:64:bf:84:b1:ca:49:
         92:f9:46:f9:75:e7:9c:34:dc:17:0d:fc:4b:e2:92:28:1d:04:
         ad:42:56:88:a1:9e:20:36:ba:88:30:f2:2f:85:db:94:c0:f2:
         d4:cd:ff:1b:89:b3:e9:59:71:f8:29:f3:7d:78:f4:c1:a0:0b:
         04:9a:1c:43:97:da:20:cb:53:e0:54:76:72:89:30:a7:67:fa:
         c4:7f:d9:0e:2d:df:79:5a:30:5a:92:cb:73:85:80:06:c1:2f:
         3a:c3:05:6f:78:a1:2f:fc:f6:a9:e4:62:3c:66:02:ff:de:c5:
         ac:9c:08:42:2d:ad:67:8e:38:60:80:38:ec:b1:e7:53:86:9a:
         12:e8:ec:f0:fc:fe:14:1a:23:55:65:4b:fc:cd:37:04:0e:8e:
         44:54:3d:e9:43:9f:ef:c7:d7:8d:17:ed:84:ab:0b:a5:cf:b7:
         72:a2:1f:b1:5d:76:87:85:55:e8:8d:4a:16:7f:bd:c4:11:ca:
         f8:10:5f:30:8d:4f:89:51:21:72:55:93:54:24:bf:e4:9a:aa:
         99:1b:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:43 2024 by rpki-client on console-fra.rpki-client.org