Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1ce48740-cf68-351c-ac50-9211874e865a.roa
File:                     1ce48740-cf68-351c-ac50-9211874e865a.roa (raw, json)
Hash identifier:          ZlgcH6zcvQcv38uJ1zsyR7dhYoVWfgr+J+EMg0KUZKw=
Subject key identifier:   18:FB:B4:00:D0:5F:A0:D3:20:86:CF:7C:9A:1E:25:DE:E3:91:18:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858373D6DB82D145C3A756D50B1C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1ce48740-cf68-351c-ac50-9211874e865a.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Mon 09 Sep 2030 04:00:00 +0000
asID:                     16787
IP address blocks:        72.31.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:3d:6d:b8:2d:14:5c:3a:75:6d:50:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Sep  9 04:00:00 2030 GMT
        Subject: CN=a8053eb8-bc28-41d0-a149-018ef6d8ff62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:94:d6:ca:fc:a3:20:63:84:d6:e7:64:9e:
                    9e:40:51:02:29:b8:d7:fa:e5:4d:ed:89:38:1b:7a:
                    99:5c:e1:a1:e6:5f:29:e9:57:c2:6f:04:ba:e2:d5:
                    c6:30:4e:01:d2:6e:4c:dc:5c:30:0b:7d:bc:b7:ed:
                    02:20:b7:cd:9f:dc:7c:fa:78:19:83:3a:55:18:d1:
                    c7:b4:1f:c6:3a:7b:b8:e7:7f:98:74:de:6b:b6:ea:
                    1a:bf:8c:e7:fc:2d:cf:36:45:07:81:e7:df:da:76:
                    e1:f3:ba:5b:10:fc:c3:15:b1:05:c7:ed:1a:b4:85:
                    ad:90:5a:5f:95:a9:04:d9:11:c3:ee:d7:01:7e:0b:
                    7e:3f:46:55:a1:66:85:25:6c:c3:aa:e1:f4:ce:f9:
                    d7:d4:fd:7e:16:88:5c:7a:26:67:80:9b:18:f7:fc:
                    03:4d:9a:55:b8:71:3f:0c:e3:6b:74:53:f7:bd:70:
                    67:7c:25:bf:65:ac:b3:f9:8b:6b:85:ad:93:cb:9a:
                    f6:cf:88:6d:fe:53:b2:3b:0b:d2:8f:1a:89:90:7a:
                    71:fe:8c:14:70:1d:83:c9:7f:15:3c:7a:e4:5f:03:
                    27:1d:0d:c1:31:45:b6:b0:91:36:14:5b:5c:21:43:
                    00:8f:b4:2f:18:ef:ba:4b:38:b9:65:91:1e:f7:98:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:B4:00:D0:5F:A0:D3:20:86:CF:7C:9A:1E:25:DE:E3:91:18:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1ce48740-cf68-351c-ac50-9211874e865a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:52:0d:09:39:3c:0a:b2:3e:9d:95:93:6d:1e:37:84:cd:
         4c:d7:4d:25:13:d6:84:42:fe:f7:ad:79:78:80:fd:1d:8a:8d:
         82:c9:bd:1a:25:48:f2:e4:35:07:b4:1f:d3:c2:a2:f3:51:cf:
         a0:88:54:62:57:02:f6:b6:9d:15:24:c6:74:e7:5b:69:9e:b4:
         ee:7a:0a:0d:0f:7c:ca:2a:04:4b:78:20:7f:82:07:aa:2e:b0:
         88:c1:ca:cf:65:84:60:7e:d7:a4:9a:0d:8a:80:a2:dc:57:9c:
         7f:cc:82:50:e5:01:ac:d5:24:07:34:23:e0:53:40:b3:10:2e:
         cd:65:38:71:1c:0e:62:48:5c:ba:ac:40:84:82:72:26:9d:b7:
         ba:ee:d2:8d:77:9a:08:3a:5d:7e:3c:b7:e6:47:99:20:90:70:
         33:97:7e:73:0a:42:4f:3b:e4:69:87:a7:ae:16:86:79:65:ea:
         ca:b8:7c:86:aa:bd:69:92:bd:99:3a:99:eb:6b:1d:34:b8:6d:
         69:36:78:c4:8b:03:a3:ec:6c:87:df:aa:3c:de:89:18:21:e6:
         69:ae:bd:91:72:c0:73:6b:a0:04:87:f7:97:70:28:0c:7e:b9:
         c3:cd:2a:65:b4:10:76:ba:3c:db:fb:2e:46:ed:bd:e0:de:84:
         91:54:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:51:37 2024 by rpki-client on console-fra.rpki-client.org