Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/fd8cbed2-1c0a-31a5-b0e4-6072fdd5cb03.roa
File:                     fd8cbed2-1c0a-31a5-b0e4-6072fdd5cb03.roa (raw, json)
Hash identifier:          WSEq/uuPq9SYOpkYMdyTDyeymDrNuTDGtm/ew+gLWgI=
Subject key identifier:   B0:E5:31:40:5D:FA:09:C9:B6:33:AE:FB:B8:A3:48:12:2F:A5:28:4B
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F4328584582A89AAA588BAA4A87454280
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/fd8cbed2-1c0a-31a5-b0e4-6072fdd5cb03.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     6939
IP address blocks:        72.14.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9a:aa:58:8b:aa:4a:87:45:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=380c39cb-a51e-49a0-a1d8-1864991e0407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:4b:a9:ba:ee:61:4d:d3:54:1c:d7:84:c2:
                    93:1d:65:99:e0:02:81:70:b0:96:fd:f8:07:41:40:
                    b0:6b:a3:86:65:2d:8c:63:35:51:a7:21:54:42:c4:
                    e5:23:3a:c6:d3:70:77:89:86:65:46:08:10:40:76:
                    e2:f4:b2:2b:c5:ed:67:c4:a6:84:f6:93:3d:1b:5c:
                    31:2d:e1:f4:2c:dd:bf:0c:b9:1e:a0:6f:37:bd:29:
                    9b:f1:1b:af:c8:3e:d6:c1:42:bb:a3:46:c6:42:b2:
                    da:51:95:d3:99:63:bd:3f:8d:cf:53:8b:fe:9e:0c:
                    fe:e0:5b:37:45:ac:56:2d:17:a4:19:ad:c9:5f:66:
                    f9:6e:b0:94:bb:c4:61:68:8d:04:80:94:e0:2f:36:
                    ef:9a:29:68:50:89:82:d7:5b:22:01:6f:ee:2a:45:
                    ec:7d:1a:5d:8c:a3:f2:70:f1:1f:6e:b7:a6:8d:7f:
                    da:c7:41:8d:75:6b:46:fe:b6:14:aa:54:5d:95:b3:
                    64:b0:69:c8:e1:d8:86:a1:29:4d:46:f9:a7:f8:d0:
                    bf:b4:24:fd:e8:84:0f:c6:48:5f:0a:27:a5:bd:ab:
                    79:b6:49:16:ba:c4:98:2a:10:32:79:1a:4f:89:2a:
                    4e:c4:3e:9f:23:d4:41:90:ca:73:b9:95:a8:0e:15:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E5:31:40:5D:FA:09:C9:B6:33:AE:FB:B8:A3:48:12:2F:A5:28:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/fd8cbed2-1c0a-31a5-b0e4-6072fdd5cb03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:60:81:0c:71:a5:4c:c3:b4:3e:34:b3:ce:6e:3e:80:b2:07:
         86:01:c7:2d:22:4f:05:8d:b7:aa:1b:05:0d:7d:41:3b:9f:38:
         91:99:55:63:d7:c7:67:3a:a1:93:a9:6e:6c:4e:ac:37:5e:31:
         e9:b6:1b:0d:5a:e3:9a:b0:7b:84:d4:11:9a:9e:48:9c:21:55:
         61:34:bd:f8:25:1f:e9:6e:27:9b:93:df:48:f2:53:7f:a6:f4:
         67:8f:ab:bc:b4:0e:ce:d5:78:01:84:77:26:86:1c:8f:51:17:
         54:cf:c3:1f:65:06:9a:19:9e:82:f5:0c:be:c7:70:62:72:dd:
         e4:87:77:d4:32:e6:98:47:02:53:5a:bc:5e:0b:6a:c8:d6:2c:
         e7:48:53:ce:78:dd:16:3e:68:72:a5:c9:14:7f:77:6e:43:33:
         67:57:b6:3e:2a:97:10:49:2d:d1:d3:dc:e7:b5:10:2e:9c:e9:
         af:e5:f3:92:07:cd:05:ee:ec:a8:7b:ef:d9:bf:27:d4:89:4a:
         e3:b1:e8:52:a1:7f:0f:c7:c9:5b:6c:78:32:26:27:e3:cd:e6:
         25:39:67:ca:e9:58:36:76:f3:5d:45:50:00:07:db:16:a5:4e:
         27:d1:f8:4b:ec:1c:d7:49:f0:2c:98:23:aa:c9:f7:25:2a:84:
         1a:ac:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:16:01 2024 by rpki-client on console-ams.rpki-client.org