Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa
File:                     8dbc2972-670d-3384-8729-8987f2639e3b.roa (raw, json)
Hash identifier:          sZXsoqpibTai04c8IEDTjF+PSc4o1SyRUE6EG1tbVng=
Subject key identifier:   C5:25:99:D1:87:2E:D4:42:6D:60:88:CE:EC:CD:AD:B0:34:03:7D:53
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F432858475EA619226125F90B51AEE380
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     13977
IP address blocks:        72.14.76.0/24 maxlen: 24
                          72.14.84.0/24 maxlen: 24
                          72.14.90.0/24 maxlen: 24
                          72.14.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:19:22:61:25:f9:0b:51:ae:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=2033cbf1-1e34-4022-a8a9-535cf9d0baeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:6f:51:a0:66:82:75:bb:6e:bf:3c:b0:36:
                    91:04:83:6b:8c:60:42:30:db:6a:68:47:85:9e:1d:
                    c1:d7:1f:8c:61:a3:32:a0:7f:fa:5d:13:28:21:db:
                    0f:d5:34:22:80:00:c5:dd:45:7d:bc:e2:63:84:29:
                    7d:f0:5d:2b:3f:aa:6a:81:45:5d:45:de:d6:5c:0d:
                    90:0d:7f:1b:91:f1:8d:4f:ad:74:32:eb:ba:47:30:
                    7f:63:53:9e:44:7e:84:62:51:59:cd:da:cc:e0:a9:
                    ab:43:47:56:82:4e:33:82:14:90:a9:cf:70:37:a8:
                    88:d6:73:93:92:f6:db:cd:51:29:a7:df:56:3a:e6:
                    9a:a0:a9:9f:d5:7f:d0:5c:3f:fa:12:c1:b4:bb:35:
                    1b:d4:28:42:83:ef:5a:0e:69:fe:9e:69:88:11:50:
                    82:d1:16:4e:db:f9:31:5c:15:0f:84:89:b6:77:d2:
                    db:49:b7:f0:05:b1:05:ec:74:d0:f8:64:9e:9c:76:
                    65:f9:09:60:e5:47:9c:1f:f1:a1:53:fe:e5:c2:b9:
                    56:5f:bc:e4:02:b0:62:3f:c5:8d:37:07:e2:f9:3f:
                    d0:42:aa:8f:c2:0f:e0:3a:8d:50:e5:49:6f:3f:90:
                    03:05:8f:4a:c1:5e:e3:4b:56:a0:9b:0b:76:56:e8:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:25:99:D1:87:2E:D4:42:6D:60:88:CE:EC:CD:AD:B0:34:03:7D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.76.0/24
                  72.14.84.0/24
                  72.14.90.0/24
                  72.14.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:f2:4e:3c:45:5c:4d:be:c5:01:94:0b:7e:c1:b4:77:6c:
         be:cf:2d:c7:17:c8:27:fe:07:73:f9:be:c0:ee:d3:c6:7a:e8:
         a3:85:11:1e:85:71:31:ca:45:0a:3a:f3:8b:cc:29:18:60:4c:
         cb:3c:fb:98:93:e2:cf:9d:1f:fb:3b:4e:29:41:03:88:9d:3e:
         07:4a:41:d1:f6:8f:d6:62:6d:9e:98:e0:f0:a1:fe:53:8a:19:
         6d:cb:49:5b:cc:e9:27:bd:60:d1:1c:3c:e6:27:c1:e0:11:c6:
         0d:12:c9:1c:06:dc:58:b0:e9:a2:88:b3:ec:07:c8:4c:04:5d:
         d7:8d:9c:2a:0b:db:4a:5b:50:a5:fc:98:d5:56:0c:50:69:dc:
         2e:e7:c4:25:a9:1a:62:8b:f4:13:fe:54:48:65:8a:55:fa:e4:
         3b:3c:54:6e:e7:d8:b3:27:9f:a6:29:b9:a0:f9:ee:e9:e5:21:
         19:68:3a:9d:31:f7:ec:e4:64:9a:76:07:43:97:0f:e9:ba:03:
         c5:eb:a0:ba:85:2e:ce:b0:45:1c:cf:cc:ae:4d:96:f3:ce:44:
         2d:89:9f:5a:2e:14:1d:26:42:4c:89:25:b0:55:04:42:52:4d:
         e0:97:6c:00:30:ff:77:04:e6:fc:d2:1e:2b:d7:47:76:3d:bd:
         df:17:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:25 2024 by rpki-client on console-ams.rpki-client.org