Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da0c3205-c6b5-3aca-afd8-705371930f23.roa
File:                     da0c3205-c6b5-3aca-afd8-705371930f23.roa (raw, json)
Hash identifier:          lv0ywbNo4+MiUkxINVLKrt0cQzffVgFm1GDVxJpo2UY=
Subject key identifier:   53:C8:82:C4:35:90:C7:6E:EB:13:BA:43:55:C7:53:11:2C:0E:53:AE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858484AAAE02DA6E5CC874935E680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da0c3205-c6b5-3aca-afd8-705371930f23.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     397630
IP address blocks:        72.14.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e0:2d:a6:e5:cc:87:49:35:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=7baa95b4-4da7-4715-baeb-698e71af813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:d2:d4:70:22:c5:be:c4:c9:29:76:26:9f:
                    49:18:93:86:f8:a6:90:06:aa:6a:5c:1e:94:7f:11:
                    a7:7f:54:c0:22:50:46:be:d3:df:8d:33:ab:e3:3e:
                    84:6b:ce:75:96:3a:85:19:8f:d4:69:61:2c:80:83:
                    a0:be:96:26:f4:24:0a:94:01:26:c1:27:35:06:ad:
                    ad:7c:af:48:7a:16:07:a7:82:60:6d:e0:5e:15:50:
                    8a:ba:ed:1d:13:85:07:02:9a:bd:b8:15:c0:14:5c:
                    47:fc:3a:6b:1a:e1:61:89:ba:19:b1:9b:11:e1:74:
                    6a:a6:cc:86:35:78:ab:70:75:ae:b4:5e:8f:8c:0a:
                    3e:c1:89:f1:13:ee:e9:24:66:0d:af:f9:f2:8b:02:
                    79:4f:0f:cd:70:b4:d6:0b:2b:4d:94:1f:62:b0:0c:
                    6e:09:f9:c1:ca:a0:48:6d:f5:59:b9:95:9b:a7:45:
                    36:65:d5:ce:0f:35:c3:88:41:6d:19:c9:4c:a3:6b:
                    66:99:1d:b7:b3:fd:3b:60:01:5b:41:ea:19:49:60:
                    c6:40:ca:be:17:a9:23:94:76:c0:b0:2a:0d:92:65:
                    27:1a:fb:88:b6:d4:d7:cd:6a:40:61:ae:21:6e:b7:
                    d6:dc:ae:0e:67:4d:c9:bc:33:82:36:35:6f:5c:fa:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:82:C4:35:90:C7:6E:EB:13:BA:43:55:C7:53:11:2C:0E:53:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da0c3205-c6b5-3aca-afd8-705371930f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:e2:c3:e7:53:85:ed:d0:ef:79:7e:bf:94:26:19:af:95:
         36:8b:56:b4:fe:55:b2:71:27:0e:be:20:fb:62:eb:34:40:e9:
         ec:6b:ad:e7:6f:ce:e4:0e:18:f7:d3:fe:d7:bc:67:dd:ff:75:
         ef:fc:68:14:34:3b:94:89:fa:a3:b1:c3:0b:0c:63:66:ef:5b:
         d9:18:61:80:f0:40:e2:24:f3:f1:9a:33:f2:f8:2a:7b:d1:c2:
         c1:e7:d7:87:e2:cb:f0:ca:64:38:7f:d9:1c:9b:1f:da:7c:ec:
         84:f5:2c:96:14:4d:3a:93:50:c0:51:63:05:97:56:c3:da:e3:
         ca:df:a9:25:94:fa:c5:f2:cf:df:47:08:57:c6:33:5c:11:77:
         eb:67:95:01:c2:b9:a5:04:75:43:bc:81:e2:cd:2a:fe:7f:20:
         33:cf:e6:f1:3e:bd:29:05:45:9a:2c:2b:65:82:35:ff:5c:72:
         5b:47:e9:d6:c2:e8:69:7b:c2:59:50:fa:80:fc:6c:ab:00:6e:
         78:df:2d:54:8a:f2:a7:c1:3f:61:b8:f3:18:a8:0c:52:02:e7:
         85:2c:eb:31:5e:a0:2b:00:05:7c:75:0c:94:87:1e:8b:73:60:
         8e:57:c1:30:ad:f8:0f:f0:67:74:c9:66:6b:57:81:2c:ed:08:
         83:e0:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:17 2025 by rpki-client