Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7e9c7e38-0452-3fa6-9469-9fff9cad6c4a.roa
File:                     7e9c7e38-0452-3fa6-9469-9fff9cad6c4a.roa (raw, json)
Hash identifier:          h+zUKd26x1Ut4Gxc2b10tHHwltSYlTXR3gUld2pSvEc=
Subject key identifier:   0B:E5:B6:4F:FB:28:ED:88:1A:A9:5F:92:92:AD:10:D3:BE:89:F7:7D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D7E9BC2468C2F07567100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7e9c7e38-0452-3fa6-9469-9fff9cad6c4a.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     7018
IP address blocks:        72.14.92.0/24 maxlen: 24
                          72.14.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7e:9b:c2:46:8c:2f:07:56:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=dd58d1e2-bc8a-4586-abf1-16c0b1bb2bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:1d:87:7f:eb:b6:51:16:b7:a4:82:4b:52:
                    90:47:b2:1c:b7:51:17:bf:b9:89:f0:46:71:7d:3f:
                    ee:3d:39:8d:4e:ad:48:0b:a6:80:b9:fa:1b:59:d3:
                    e6:b1:a0:76:a3:fc:57:63:fa:4e:6e:76:1e:18:6a:
                    f5:ae:78:0e:fe:3b:2a:ff:0e:aa:ad:df:87:ff:4d:
                    35:11:1c:fe:0b:91:34:ab:17:e9:c1:88:61:94:0e:
                    c6:cf:27:73:ef:cf:bc:c8:4d:cc:b0:be:54:dc:97:
                    1a:09:d9:d2:a5:5f:59:a6:b6:e6:10:43:ea:ff:62:
                    b9:f3:b6:06:e5:72:0b:41:af:1d:0d:79:26:c8:55:
                    99:b8:e4:52:ee:1d:7f:82:70:00:1d:b7:c7:b6:f4:
                    fc:60:5d:5b:d9:9d:71:5d:f7:64:04:8c:dd:d9:c7:
                    50:78:09:40:20:a9:ac:7f:91:1e:07:6a:da:bc:b0:
                    46:04:dd:6e:87:02:b6:6a:ea:1c:1b:e8:07:81:c0:
                    3a:3c:1f:70:39:f3:d4:60:5d:47:e6:43:46:a4:2b:
                    f3:70:df:2b:85:76:8f:4a:9d:b1:f1:dd:71:ae:2b:
                    b1:f6:0c:c0:10:1a:f0:73:d4:8f:31:fd:6a:72:d6:
                    ef:8a:92:40:ee:7f:ae:f0:bd:cf:9c:31:90:d4:94:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E5:B6:4F:FB:28:ED:88:1A:A9:5F:92:92:AD:10:D3:BE:89:F7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7e9c7e38-0452-3fa6-9469-9fff9cad6c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.92.0/24
                  72.14.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:16:e8:1a:6a:cd:e9:fb:f7:36:de:c9:c5:11:e6:6d:7f:
         62:af:2e:9a:61:0b:6f:b8:9e:ea:d4:cf:04:fb:c1:df:bd:ae:
         b6:06:05:4e:83:31:1f:76:7b:f7:8c:5b:bb:67:00:91:50:f5:
         75:95:fd:75:83:33:e8:ec:fb:3f:ca:f1:ed:ec:9a:d6:af:46:
         70:ac:b0:cb:99:7a:56:16:52:d5:fc:93:9f:3c:07:da:cc:ec:
         ef:cd:5f:10:3a:c1:d5:34:23:37:b9:c0:c2:bd:ef:8e:f4:6d:
         cd:35:96:4c:cb:bf:77:22:a8:81:41:b1:52:05:e6:2f:c3:bd:
         9a:d9:89:8b:88:c9:3a:08:8d:ec:3d:b3:07:f2:f2:10:23:bc:
         21:a4:d3:04:34:f0:1f:56:36:de:9f:1d:28:4c:da:22:65:ba:
         ae:66:34:8d:6a:dd:2e:58:b4:26:c6:15:38:9b:ad:47:2d:73:
         28:4e:50:8a:04:23:96:16:ba:e8:d7:ce:73:3d:81:d6:50:ac:
         e0:fc:7d:7e:29:ba:db:43:9a:14:00:97:f1:7f:a3:42:e7:16:
         9f:6d:e3:36:0c:6e:8c:70:2b:64:c8:46:14:8c:5b:f5:01:08:
         6f:62:27:12:24:bc:54:3a:c2:bd:43:92:b0:f6:aa:7e:60:c7:
         01:50:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:49:31 2024 by rpki-client on console-ams.rpki-client.org