Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
File:                     7d4835f7-8713-34b0-b001-5d466717879b.roa (raw, json)
Hash identifier:          uP+FWzgTWhfEohblxNhJSChPjER1+OiA5aZ2Olvt1Ts=
Subject key identifier:   56:E7:BB:D7:F9:83:CE:D4:22:8B:34:DD:55:1D:8B:55:97:3A:7A:0F
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285847299B26D82A204176FF771740
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     54032
IP address blocks:        72.233.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:26:d8:2a:20:41:76:ff:77:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=dbdd4688-0096-43bc-9250-f582f51e41a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:f0:83:5e:31:53:03:e1:3a:b1:3f:d6:bd:
                    f8:86:c4:2a:57:6b:a6:44:d9:44:80:48:78:2c:3a:
                    df:73:e9:3c:7f:0e:5a:72:f5:a9:47:1d:30:20:31:
                    6f:46:1d:22:8c:d3:55:5a:38:51:f7:bd:5b:9c:bc:
                    8d:68:6a:25:57:47:df:b6:9c:24:af:42:55:33:21:
                    bb:7b:94:3c:33:9f:67:6e:d8:9e:51:2a:94:c5:31:
                    f1:4f:f9:cf:ba:75:a8:34:c7:b2:d2:66:99:fc:e8:
                    6c:43:ee:f6:eb:f7:3f:b0:22:9c:7b:6c:33:7c:78:
                    5b:48:52:0c:c6:65:2e:c6:5f:bc:34:ad:8a:13:16:
                    62:9e:08:44:f0:25:34:5f:e9:ad:f9:f0:dd:6d:0a:
                    06:f6:8a:6b:f6:b2:6f:e5:41:63:e4:36:55:f2:ab:
                    03:1c:d4:53:f1:58:44:28:ec:00:e0:d8:d1:23:af:
                    a4:ed:e6:23:ac:90:66:41:37:d3:55:f3:5b:86:f4:
                    c4:cc:4d:66:af:43:30:19:58:5d:33:3a:a0:e0:e1:
                    17:72:52:bb:b2:09:d9:a4:8e:ba:3c:2b:5d:9e:71:
                    09:09:af:92:52:bf:f6:aa:af:7d:48:72:64:47:a9:
                    61:6c:1a:c1:62:d3:d1:c2:b9:88:e2:bb:7d:0c:2f:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:BB:D7:F9:83:CE:D4:22:8B:34:DD:55:1D:8B:55:97:3A:7A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7c:fa:40:f3:4b:24:3e:79:35:35:f1:b9:5b:b7:9f:03:5d:
         1e:9f:c5:43:eb:b2:fa:75:62:fc:ef:4c:6b:30:db:19:25:95:
         ec:f8:df:e0:b3:c1:39:36:37:2e:d0:e1:ca:3f:86:6d:cd:cd:
         9e:0c:b8:db:fa:ef:9a:2d:a0:e0:15:1f:3b:e8:98:c3:bf:98:
         77:c2:00:f4:9d:c3:80:aa:21:73:78:6c:91:fe:9f:23:e5:8c:
         a3:f8:60:3a:9d:06:d0:e1:9b:c8:4e:02:4e:c3:c0:3f:74:63:
         23:bf:35:ce:61:02:f2:9b:ea:77:4c:7c:54:4a:92:04:7c:16:
         36:8e:43:43:66:74:45:0b:ec:33:16:e3:fe:02:aa:5d:47:cc:
         80:92:65:81:b5:2f:43:1f:c2:7a:45:2c:c2:52:61:c7:1d:a4:
         0b:e5:a2:5c:b7:3a:61:dd:b3:2c:51:3b:9f:82:11:6d:40:7d:
         2c:72:76:81:9e:3a:3e:8e:29:10:bd:48:a9:4e:4c:e6:d7:7a:
         40:4e:41:1e:14:b1:1c:a3:e7:ae:3e:06:a0:e8:b8:ee:74:ce:
         fb:ef:bc:9f:1d:d5:4e:e0:50:d3:ab:f8:e9:f4:12:f6:6f:4b:
         57:45:ea:37:42:7d:b5:35:71:ac:48:82:0f:66:a7:f1:26:e9:
         df:79:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:48 2024 by rpki-client on console-ams.rpki-client.org