Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f29eec1-5975-36b8-b180-82df52fcc96f.roa
File:                     1f29eec1-5975-36b8-b180-82df52fcc96f.roa (raw, json)
Hash identifier:          7h7w1inb20P0egpYtdyxsx/t3K+1DghnQCZhzzaaPm4=
Subject key identifier:   F2:A7:D3:BB:0E:AC:D9:64:4F:C3:5C:E2:DD:41:70:73:AB:E0:DB:44
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FD281562B04BB24BDF00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f29eec1-5975-36b8-b180-82df52fcc96f.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fd:28:15:62:b0:4b:b2:4b:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=3455cfff-2e76-4a6a-ac11-9362c0c078a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:3b:79:46:02:c2:e5:68:4b:4e:cd:b0:d4:
                    f7:42:89:0e:3c:73:92:ab:a9:60:ad:4b:7a:c4:ea:
                    94:a1:02:ff:0d:25:20:b4:b4:25:ce:fd:ae:5d:54:
                    ef:0e:c5:98:c7:27:83:07:1d:fb:4e:db:89:33:fc:
                    43:e1:fb:c4:cd:54:0b:37:77:e8:d3:69:9c:c2:c1:
                    f0:24:8d:56:a9:2e:15:be:5f:ab:ed:13:04:d2:7d:
                    60:e7:1a:10:ef:aa:c9:3b:26:73:06:15:50:1c:a9:
                    80:0c:51:a4:5d:81:e8:86:fd:af:77:54:70:a3:68:
                    1c:b4:bc:1f:8e:5b:8d:ec:00:25:04:cb:7f:61:e8:
                    01:52:e1:d5:90:65:a8:d2:77:ad:b8:d9:5d:90:41:
                    06:09:7f:04:99:30:dc:23:00:60:b8:43:8a:93:a8:
                    ab:4f:4e:c1:63:e6:04:d2:72:8e:6b:aa:25:2e:03:
                    0b:ba:65:96:6c:6a:60:0e:04:2b:50:e5:d7:a5:fc:
                    fd:92:3d:64:71:76:87:8f:cd:62:90:48:8a:56:f2:
                    76:bc:fe:5b:65:4c:c7:ca:ae:be:4e:2d:54:a0:75:
                    92:de:0f:a8:e1:63:b0:56:6c:99:c4:16:4f:f2:6b:
                    d7:e6:75:f2:73:ae:b6:1c:a7:ae:e2:db:43:88:62:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A7:D3:BB:0E:AC:D9:64:4F:C3:5C:E2:DD:41:70:73:AB:E0:DB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f29eec1-5975-36b8-b180-82df52fcc96f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:02:7f:75:fc:94:db:50:56:76:8f:c6:19:06:9c:9c:0c:27:
         cc:b0:e8:2e:9e:a8:ce:a4:62:5d:fc:cb:aa:1d:dc:5d:d6:52:
         d0:5f:28:6f:84:6e:a9:4a:87:ed:47:aa:3a:b4:c3:d7:03:24:
         af:96:60:4f:da:d7:19:32:4c:1c:f9:30:b9:81:0c:d1:e6:ff:
         85:ca:e3:85:18:d2:ad:56:55:98:48:fa:46:17:ca:d8:ee:77:
         85:11:6c:a9:eb:95:38:72:28:80:10:db:6c:21:84:31:00:dc:
         85:90:9f:d5:40:66:4c:76:5d:db:12:af:c5:e8:8d:1b:b4:76:
         9f:40:86:d8:b4:6f:c1:66:9c:62:85:de:81:b6:88:07:4d:43:
         9d:6d:ef:c6:de:31:b8:1b:8f:52:9f:25:4d:b3:3e:37:36:1e:
         4e:85:4d:d0:cb:b3:75:f3:f7:91:45:22:b5:33:eb:43:f8:d1:
         af:f5:f2:1d:d7:f4:1e:14:c1:65:88:ba:54:0c:52:5a:ad:cf:
         be:fe:88:16:9a:6f:49:e5:cc:98:24:9d:83:0c:1c:7d:08:19:
         3a:c9:a7:a1:7d:c4:82:61:f2:02:cb:32:f1:2d:ec:47:69:90:
         42:8d:65:c4:4f:b5:69:b1:44:e9:5e:8d:ee:ad:e1:cb:cd:1a:
         27:27:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org