Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa
File:                     12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa (raw, json)
Hash identifier:          ltgFiIhEnchhYmPZMMBs33CT845qC7AIG/AkE/VL9m0=
Subject key identifier:   19:AD:DA:57:C6:99:EF:7F:63:57:21:E3:A3:EC:1B:3A:48:02:E0:B2
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F43285847C8D9D1AD87FE43BD53EEB800
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     22926
IP address blocks:        72.14.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:d1:ad:87:fe:43:bd:53:ee:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=7afbcbe4-9fdd-4873-a294-4e670f9341f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:a2:c1:d2:72:44:46:00:f2:02:4b:d1:ab:
                    7c:13:cb:e6:48:cd:1a:05:04:a2:a1:34:ab:dd:60:
                    61:fe:99:6f:5e:92:6d:40:57:77:69:41:9e:40:22:
                    b9:b4:8d:61:af:cc:1e:4e:d8:3a:37:6c:bb:9d:a5:
                    39:61:21:06:c6:7e:7b:8d:11:6f:62:93:67:87:8e:
                    7d:67:b6:d5:8f:f7:c4:f5:b6:36:bf:4d:39:e3:4c:
                    aa:43:90:dc:af:c0:6e:82:3e:61:3c:91:f8:43:42:
                    ba:b1:31:dd:d8:1e:b1:18:5e:0e:dd:48:d8:d5:ae:
                    6f:b9:cb:58:e6:1b:b9:ef:8e:3c:7e:93:da:a1:a9:
                    8f:88:bb:3f:15:4a:f2:dc:eb:38:13:56:5f:2b:c1:
                    ff:64:94:1d:3c:4e:66:51:d2:bf:49:0d:e6:0a:5f:
                    5e:22:f6:de:3b:25:75:a5:be:06:48:fa:96:e1:91:
                    32:55:0a:6b:21:c0:da:80:47:59:c1:ef:95:11:47:
                    f8:a6:7b:2c:1e:9c:6a:90:a2:c9:16:38:a3:85:b2:
                    3d:0e:c6:8f:8d:cd:ba:76:45:08:33:42:3c:62:d1:
                    8d:a3:3a:e9:77:a4:e8:1c:e2:54:22:7e:f1:b9:2f:
                    51:5a:7e:f2:5d:89:24:e4:0b:12:03:ea:36:e6:0c:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:DA:57:C6:99:EF:7F:63:57:21:E3:A3:EC:1B:3A:48:02:E0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/12bdae9b-92c6-30b3-b3cf-cfac2791a664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3c:cf:e4:9e:58:65:08:7a:21:0d:b8:e6:dc:6e:bf:c1:ca:
         89:4b:66:64:37:fa:cc:b1:c9:c7:58:f7:02:b9:cc:37:94:5d:
         38:55:bc:50:bf:ce:a7:09:6e:8b:b1:02:bc:60:06:66:ad:06:
         77:26:14:aa:77:06:3f:14:d4:3f:80:6a:d7:3c:90:f0:f6:25:
         01:89:e1:ad:42:cc:d2:80:08:ad:a9:f3:cd:3b:6c:84:c2:de:
         56:fb:07:6d:5d:3e:85:ef:2d:91:8f:5e:2f:d9:ad:33:d7:56:
         fa:16:35:98:91:29:cf:ff:cb:10:85:23:ce:d4:26:f1:c9:43:
         66:a4:20:3c:23:30:69:8e:70:c4:d2:da:7d:75:9e:1a:ee:89:
         41:8a:82:ae:8e:9b:fd:d1:44:14:9f:77:96:3d:54:0b:8c:08:
         bb:b1:6c:25:4b:39:8b:aa:59:e4:0c:32:ed:dc:6a:ad:be:21:
         b4:75:62:24:fb:ca:fe:71:77:df:04:eb:5c:33:09:95:4f:88:
         58:a8:d0:17:60:5b:2e:2c:cf:85:3b:26:fc:89:0d:80:37:0f:
         49:fa:fc:1a:32:ff:1d:e6:5e:39:6a:d6:1a:72:25:74:5c:1b:
         60:02:fb:56:ac:02:5c:8c:4d:6c:1d:b7:a7:a4:92:7b:b9:ba:
         e1:21:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:16:45 2024 by rpki-client on console-ams.rpki-client.org