Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
File:                     5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa (raw, json)
Hash identifier:          Lp4XEmWYW8lKhvsaRlrLzM6ob9v/mNSQlfrIuht79VY=
Subject key identifier:   6C:67:7A:CC:3D:A8:37:15:C0:97:AD:49:05:3F:62:CB:26:93:53:DF
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285847299B26B5FFC2E24360E34AC0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     54032
IP address blocks:        72.233.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:26:b5:ff:c2:e2:43:60:e3:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=7131e3e5-c8e4-4636-8bd3-5d8108792d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:99:e4:4c:72:d5:0d:73:4b:e0:6d:5e:bf:
                    32:43:0a:91:5c:5c:e1:5d:fc:44:c1:09:b3:d5:e1:
                    15:21:6d:a2:04:b8:ae:30:f7:c7:f8:6d:77:26:ee:
                    f7:97:16:1d:b0:65:2b:67:c3:fc:03:92:15:65:f1:
                    ec:3a:ff:aa:66:50:9a:ea:2e:70:10:0a:c9:15:38:
                    64:4e:88:f5:e5:54:e6:6b:a0:e2:42:4e:28:e1:46:
                    84:61:bf:05:fe:f1:2a:c8:4c:bd:39:60:ce:c0:1e:
                    42:9f:c6:c4:a8:3b:f5:6a:77:be:bc:f7:0d:bf:9b:
                    41:e0:92:1e:14:51:31:a3:d8:7b:65:57:da:3d:91:
                    d0:c6:5e:96:b5:d9:b4:91:c8:72:ce:3b:61:3a:8d:
                    df:0e:c8:0b:95:d3:99:ae:ae:11:3d:89:8e:88:60:
                    91:c0:bc:f1:32:c1:3a:d3:6a:ce:54:6a:07:18:ff:
                    40:e6:51:83:30:48:ef:4c:8e:7f:2a:8b:5e:8c:e6:
                    ad:97:68:b4:83:7d:80:8f:08:d6:29:09:8e:bb:37:
                    69:36:7f:ec:6d:e0:ae:3c:ef:6d:bb:37:55:b6:46:
                    b7:7b:5c:92:01:02:9b:b4:47:33:91:36:b0:c2:1f:
                    76:9e:07:c1:94:2b:2d:5f:62:88:40:c6:27:28:d3:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:7A:CC:3D:A8:37:15:C0:97:AD:49:05:3F:62:CB:26:93:53:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:fd:66:f4:67:e0:26:05:1a:57:93:f9:93:76:a7:d0:88:
         67:21:3b:86:39:22:78:a3:26:58:43:f1:76:3e:24:f6:fa:ea:
         28:66:76:23:dc:c3:52:99:b8:57:56:1c:ae:4d:e4:2a:62:db:
         5e:59:c6:a9:b7:90:76:2e:ee:86:a0:6a:fa:c7:15:01:df:40:
         5a:22:dc:8c:cd:1a:e7:a7:66:91:0a:7a:21:6a:27:ab:cd:f3:
         4f:76:8f:82:6f:45:ef:e8:53:2e:7b:ee:7c:ec:ec:15:1c:3d:
         f5:d6:a7:62:4d:93:cf:96:1e:b1:5d:20:af:87:cb:72:c9:1a:
         a3:0a:17:76:ff:24:9c:30:53:a9:60:ce:a0:53:2c:e7:11:2a:
         e6:6c:18:50:f9:f7:ab:51:90:0c:bc:5a:8b:b4:72:5b:d9:4a:
         8d:11:45:25:74:59:9f:6c:76:77:2a:0b:77:70:6a:d6:c3:f2:
         62:e9:b9:31:95:24:f8:ba:11:52:68:92:63:da:9c:4e:30:58:
         79:b0:18:04:e3:e3:f7:50:0e:11:c0:63:60:d7:28:fa:9f:0f:
         9f:59:d2:fe:08:63:99:5a:25:65:56:5f:d8:a4:67:e9:a6:f6:
         a9:93:c7:8b:0c:c4:0e:c6:0c:e4:7c:14:0a:66:6a:a1:e5:28:
         4d:45:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:48 2024 by rpki-client on console-ams.rpki-client.org