Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/491fd809-2b8a-3df5-b870-e15a174f2cee.roa
File:                     491fd809-2b8a-3df5-b870-e15a174f2cee.roa (raw, json)
Hash identifier:          iGGEEt5DDF1t+DRoFw8AXpUT7kFIPle0eOW72tGGHgg=
Subject key identifier:   F0:00:61:D5:C2:6E:6F:CC:CE:37:31:20:E6:2B:40:B8:CF:91:21:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30664BEBE8AC5BA3DD7F0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/491fd809-2b8a-3df5-b870-e15a174f2cee.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        72.31.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:06:64:be:be:8a:c5:ba:3d:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=85dce7f8-d8e2-4bc3-b4b9-d729eedc4e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:a3:e1:db:6d:25:2a:f8:d4:ca:31:16:28:
                    d9:dd:45:02:b5:5c:6b:f7:6d:af:12:98:dc:66:1d:
                    a6:c2:ed:99:a0:8c:6c:d1:23:56:a6:57:e7:e5:d4:
                    f0:dc:dd:cf:21:08:db:60:43:91:91:34:93:87:da:
                    96:34:cc:28:f8:56:ca:a2:83:e8:df:59:2c:27:66:
                    8f:58:33:04:f3:63:ac:05:3f:89:81:91:ee:af:99:
                    f9:5d:03:d6:72:fa:0b:0a:8a:5c:1f:16:9a:34:4b:
                    a6:7d:bb:d9:03:be:6f:4b:67:d4:5d:33:af:e5:85:
                    7c:bd:85:a6:d8:e4:01:63:db:a0:d7:0a:7d:68:4b:
                    66:94:23:de:da:eb:79:3e:c6:21:0a:ca:87:9a:69:
                    94:a7:7e:f0:04:4e:7d:7b:7e:ec:b5:6b:f1:7e:4f:
                    82:1f:2a:77:5b:00:b6:04:b7:e3:87:7b:df:b5:7d:
                    86:37:fa:34:d2:89:7e:5c:4a:95:d3:06:0f:71:38:
                    5e:d8:4b:79:fd:a5:66:8a:48:67:23:95:e1:d0:a5:
                    e5:c8:b6:fd:63:b3:75:e4:5b:e8:82:d5:9d:f8:2a:
                    8c:e7:87:f2:9f:ce:b7:7d:81:e7:65:bc:5e:c2:11:
                    97:dc:82:4a:bc:a3:13:c2:ec:5d:c3:83:70:00:29:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:00:61:D5:C2:6E:6F:CC:CE:37:31:20:E6:2B:40:B8:CF:91:21:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/491fd809-2b8a-3df5-b870-e15a174f2cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:e2:9b:c1:7f:3f:f9:0b:d6:35:9a:c6:46:87:e7:76:2d:
         b4:3f:87:63:2c:31:a7:39:7b:bb:ba:e6:cf:0e:f2:73:14:6c:
         18:a3:8f:bd:06:38:fa:20:96:17:07:0f:25:64:ca:fb:f6:14:
         43:89:48:61:84:c5:3f:56:e0:6c:b8:19:8a:9d:80:70:0a:ec:
         0a:2e:b0:da:f3:4d:95:bf:cf:21:b7:fc:d5:5d:c8:f2:5e:69:
         79:7d:46:ca:2b:7f:f9:7d:d6:1c:43:95:e2:53:e1:f2:df:b7:
         9c:75:b1:f8:79:82:74:b1:9b:a2:6b:21:c3:6c:81:6b:a5:d3:
         11:51:da:73:70:3a:27:53:77:d8:a1:90:9a:70:d3:0a:6f:b9:
         ac:ca:61:f8:1b:25:5e:ca:4a:1c:56:bb:f2:04:4c:fc:29:ef:
         86:b0:21:ec:30:50:2f:1e:e6:05:96:4a:2e:11:57:e4:55:db:
         c2:f5:94:84:ee:1b:9a:28:4c:4e:78:8d:0b:21:b3:27:f6:10:
         1f:46:f2:d8:93:bd:74:36:b6:aa:5f:de:17:d8:2d:e3:b0:b9:
         fb:8d:ab:e2:f9:d8:ed:1b:53:b7:0d:be:56:4c:29:bf:e8:ee:
         c7:b6:fa:d1:da:34:81:1a:dc:9e:e5:6f:65:be:00:8f:88:3e:
         28:fb:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:44 2024 by rpki-client on console-ams.rpki-client.org