Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/325a6902-1e90-36b2-8e06-3ffce941683f.roa
File:                     325a6902-1e90-36b2-8e06-3ffce941683f.roa (raw, json)
Hash identifier:          /te2Eb4ZMU5I+eoZXPSL5YN/LKBfIJ5lgD3JiGzx2ZQ=
Subject key identifier:   D6:7E:77:A1:D2:2D:04:DC:51:79:7D:42:9A:25:C4:7D:2D:D6:30:7E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838E3DA9457B3C9AC6CBAF88680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/325a6902-1e90-36b2-8e06-3ffce941683f.roa
Signing time:             Tue 09 Feb 2021 05:00:00 +0000
ROA not before:           Tue 09 Feb 2021 05:00:00 +0000
ROA not after:            Tue 02 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        72.31.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e3:da:94:57:b3:c9:ac:6c:ba:f8:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb  9 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2027 GMT
        Subject: CN=e015f120-7726-4675-ac29-3b2219ccb81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:96:07:69:bb:2b:5d:b3:cb:0f:fc:e9:e9:
                    9c:fc:8c:4e:42:75:ab:b2:68:41:03:0d:17:6d:b2:
                    c7:ef:79:b6:bf:09:f6:17:95:51:f3:36:3f:09:bb:
                    88:61:4b:b2:82:0d:b4:ec:22:cc:30:76:79:45:80:
                    8f:ee:a9:91:8f:2f:2b:63:32:11:6a:be:63:03:1d:
                    60:47:b0:a8:05:9d:6c:96:fb:76:b4:34:7e:82:63:
                    28:93:64:5e:df:11:4a:6c:68:91:54:23:05:8f:6b:
                    80:59:02:61:d2:0b:e3:da:db:f5:94:11:52:06:42:
                    2c:57:68:d6:9c:70:5d:e2:bb:d4:02:fc:f6:7e:cf:
                    ca:ba:e1:f0:08:95:b2:ec:cb:7e:56:a0:b7:aa:4e:
                    5c:ce:e4:da:41:a6:54:1c:0d:0d:ba:97:5f:51:72:
                    12:a9:c6:9d:3e:3e:2e:ed:56:e8:a4:e1:91:cd:37:
                    9f:cf:57:15:23:b1:5b:78:82:db:6e:16:1d:39:57:
                    d5:50:0b:90:91:5f:20:f3:2e:6d:38:05:f3:ad:5a:
                    f9:90:f5:c0:6a:7e:b4:0c:d7:ac:66:0b:91:2f:4f:
                    12:37:f6:49:95:8c:5b:36:41:15:11:62:f1:ad:b8:
                    28:83:e6:6f:e6:07:93:d9:7e:f3:99:86:5a:5c:ce:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:77:A1:D2:2D:04:DC:51:79:7D:42:9A:25:C4:7D:2D:D6:30:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/325a6902-1e90-36b2-8e06-3ffce941683f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:64:97:89:61:15:83:22:a5:9c:68:ec:b9:30:52:d2:31:
         67:b1:d3:02:87:8e:bc:1b:2e:9c:27:a7:2c:52:ac:83:0e:46:
         b4:6e:9f:43:18:73:72:9e:d6:a3:99:d4:90:e1:af:b2:6a:71:
         4f:3c:39:2f:db:d6:cd:15:d9:00:9b:e5:48:74:2b:68:49:2c:
         1f:e5:60:f4:64:9d:69:a8:f4:40:aa:77:f7:5d:15:a5:98:13:
         7c:d5:e8:27:9b:5e:e4:66:12:20:75:75:42:1e:d0:d9:78:67:
         d2:81:45:62:aa:e1:71:63:94:36:1b:cb:76:ec:90:1e:ab:4e:
         cd:10:48:af:41:d5:18:af:2a:3c:b5:45:73:e9:5b:c9:c6:7a:
         be:8c:f6:e1:ef:d8:7c:74:78:fe:aa:ef:08:50:b7:c5:ba:27:
         6e:fb:f6:46:78:b0:9c:ec:46:07:0e:78:05:45:42:61:bd:8a:
         46:e7:ab:1a:04:62:ec:b9:9e:39:13:12:e0:e0:a7:05:72:0c:
         2d:04:9b:1c:31:84:90:c1:f5:16:57:13:b0:f4:c2:0b:af:79:
         26:c0:35:21:82:3e:8a:d8:3b:4d:e4:7d:d8:a1:ba:75:b1:3f:
         61:d9:a6:b9:a2:69:fd:9f:f6:5e:be:6d:ac:14:b2:fa:dd:c9:
         40:20:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org