Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29cb14ec-589f-3a99-ade0-3c22933a048b.roa
File:                     29cb14ec-589f-3a99-ade0-3c22933a048b.roa (raw, json)
Hash identifier:          ErPoNvX3L8mpd8f6jSjp+fRZ1N74VgU0PEX2/sQPbt0=
Subject key identifier:   60:D3:86:AF:5E:68:65:B7:20:3B:20:55:B2:63:53:FC:F6:EA:14:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FDABD90292F439D7A180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29cb14ec-589f-3a99-ade0-3c22933a048b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fd:ab:d9:02:92:f4:39:d7:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=7326b942-365b-4e48-8392-0d1e49d1c668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:b6:31:7c:bf:f6:7d:35:fe:b7:32:e5:22:
                    57:bd:91:d5:1d:99:8d:70:75:dd:34:3a:79:ad:54:
                    3e:a2:c9:63:0f:44:83:83:74:de:4f:41:cd:9d:15:
                    ee:22:94:d1:7f:4b:e8:eb:cc:38:81:31:96:76:4b:
                    7d:c8:17:40:5c:1b:02:08:b4:e4:18:87:7a:71:9b:
                    f2:93:40:ec:b0:bd:8b:eb:66:2a:8d:bb:d7:36:be:
                    27:e3:cf:d1:48:74:db:ec:f6:53:0e:3d:9f:5e:fd:
                    13:b6:f9:25:ef:33:9f:b3:76:66:3c:0c:56:c7:84:
                    ec:8e:cb:a9:37:34:2c:0c:77:02:7d:8e:a1:0b:c9:
                    b0:5e:fa:f7:99:c9:c2:8e:81:2a:19:44:1b:65:d2:
                    36:74:ed:b1:22:88:2d:06:6f:44:51:7a:10:6e:d0:
                    9f:a0:13:70:b1:79:24:2b:02:74:ed:fb:cc:3d:cb:
                    d1:64:0a:bc:7f:27:8e:9f:b8:d1:d5:63:13:b6:be:
                    1b:e1:a2:c0:fe:04:f6:13:b3:2f:a3:19:e0:cb:47:
                    e0:8a:6f:05:d3:96:48:2b:a7:57:52:de:49:98:43:
                    7c:ad:59:fa:48:58:97:a6:da:0e:90:b2:8e:41:f6:
                    43:22:47:10:3a:3e:5b:a1:b4:94:6c:2f:de:ff:92:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D3:86:AF:5E:68:65:B7:20:3B:20:55:B2:63:53:FC:F6:EA:14:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29cb14ec-589f-3a99-ade0-3c22933a048b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:f1:59:ce:2e:59:a2:e0:d4:a6:69:23:39:04:45:31:b9:
         9d:95:66:b8:5f:82:49:c8:02:1c:bf:02:a5:4d:dd:94:a9:26:
         99:af:2e:52:4c:f7:49:42:82:47:ec:07:28:cb:3f:9b:23:18:
         c2:77:39:7a:d4:37:cb:5d:f3:20:0c:f3:ae:4d:01:b1:7f:15:
         ed:78:88:ed:19:de:f8:9a:ce:b5:e4:76:cf:f9:a7:63:1a:65:
         59:e3:c6:48:28:12:31:84:43:ca:b7:e9:aa:c2:91:77:1f:19:
         a6:ac:b8:d7:52:ef:a3:a2:e9:28:21:69:cc:d0:ad:7f:ef:11:
         86:91:01:01:34:a8:bc:b2:4c:30:d8:d0:29:09:21:5f:cb:bf:
         58:79:fe:5d:6b:a6:20:84:99:90:91:8e:7b:f4:7c:47:5d:d9:
         ef:ad:e0:c9:ea:9f:2d:9e:34:f9:9a:56:7f:c1:e8:b0:14:b2:
         0d:35:16:4c:47:bc:62:1a:42:8c:32:fc:13:a8:07:ce:90:94:
         7f:1d:e8:f8:61:c5:e0:6d:ff:c9:8b:2a:45:d5:d5:ae:13:e8:
         61:d1:33:21:07:8f:64:77:b1:c2:7b:a4:be:ba:2d:e5:fc:7c:
         03:3b:45:93:1f:e3:e5:18:4c:59:05:e5:00:35:c9:25:ae:03:
         63:fa:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org