Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2666fc56-2e0b-3cf2-a5b7-eb7d3b664778.roa
File:                     2666fc56-2e0b-3cf2-a5b7-eb7d3b664778.roa (raw, json)
Hash identifier:          DOno3WgfUW1ij/DJGIHz5z2fdzdBJ8zsUYhztSw7qI0=
Subject key identifier:   14:38:C1:8C:AA:E8:2D:54:38:E9:79:66:03:61:48:4D:C8:6B:00:BA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E454840D9BF44FE8E280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2666fc56-2e0b-3cf2-a5b7-eb7d3b664778.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        72.31.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e4:54:84:0d:9b:f4:4f:e8:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=60762312-17f8-4eaa-bf20-d711214d16c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:36:66:32:f0:b2:12:f6:a4:9f:5e:f9:5e:
                    e2:1b:f4:51:5a:a2:60:1b:67:23:f1:96:0c:2f:3c:
                    2d:e7:3d:5a:0c:a6:a8:f7:67:77:97:1e:3b:e8:e0:
                    44:28:69:c6:80:66:11:14:f4:c5:a2:f9:6a:a1:ff:
                    5b:6b:0a:93:85:c6:58:ec:f8:7f:75:e2:8b:48:82:
                    20:d0:04:e6:b0:b2:8a:f6:68:a1:80:c2:75:0a:ff:
                    c0:91:ad:26:75:fc:cc:e8:e1:be:b3:20:88:57:38:
                    b5:c4:fd:6d:bb:7d:8f:f0:f5:77:4d:51:f3:dc:e8:
                    2a:54:bf:26:a1:46:85:d5:43:32:21:0a:a5:c6:58:
                    88:94:b9:11:65:67:3f:d3:4b:64:6f:ba:c3:c4:c0:
                    ce:71:17:df:70:10:02:b8:c5:62:9b:64:85:03:36:
                    0d:1f:30:ae:68:5f:8f:0d:8f:b5:a6:31:e1:c1:a8:
                    14:20:7d:3b:d7:da:98:0b:ad:9b:58:8c:ac:1c:df:
                    b7:73:4f:6d:ca:1c:87:87:65:ff:02:83:39:ac:fb:
                    dd:27:28:52:e7:6c:5b:0e:1b:4c:1d:c2:c1:2b:4d:
                    2f:63:9f:b1:17:bf:3a:c7:4a:d6:ec:b3:7c:fd:05:
                    e0:37:d8:dd:2d:95:8d:85:f0:95:01:22:38:1d:b5:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:38:C1:8C:AA:E8:2D:54:38:E9:79:66:03:61:48:4D:C8:6B:00:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2666fc56-2e0b-3cf2-a5b7-eb7d3b664778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:6c:9b:d6:d0:d9:f5:71:2c:e1:b6:1e:09:7b:4a:b5:b8:
         8e:c8:6c:bc:57:c0:c3:48:45:65:b0:92:e7:82:21:6d:96:9c:
         f6:67:ea:9b:c0:20:a2:75:86:cc:22:aa:9d:c0:72:07:fe:d1:
         ae:03:8c:58:b0:b9:ed:24:b4:23:0e:55:c4:de:4a:42:c5:f5:
         21:38:c2:e0:8e:81:4a:4b:e1:b7:96:45:f9:aa:38:dc:31:65:
         1d:f7:b0:f2:9f:07:b5:4d:c1:db:bd:31:15:0a:a5:71:ef:20:
         9f:66:8f:30:01:43:3d:52:26:24:00:15:bc:da:0c:3d:36:e2:
         3c:b6:c6:f6:9a:72:b4:ed:85:48:a2:df:48:f1:d5:03:31:e6:
         b6:c7:e0:8b:5a:f3:d4:b3:0c:7a:6d:b7:64:d3:83:c6:8a:f8:
         3f:90:e5:ec:c1:f3:bd:b8:20:35:7a:5e:b7:55:3e:0d:36:b2:
         74:d3:95:08:ba:79:fc:39:b7:ba:bc:b8:93:50:a4:e5:77:ae:
         36:fb:63:12:26:0f:6d:22:dc:9e:5a:d9:e8:79:2a:55:56:b2:
         1c:00:83:c8:f7:e5:a0:1b:57:a0:fb:75:50:c3:a7:31:63:09:
         90:d0:77:8e:88:a4:12:6b:ca:0a:8b:bb:3c:83:6c:80:cd:12:
         07:65:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org