Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55fc5be4-7586-3654-9105-35f770575035.roa
File:                     55fc5be4-7586-3654-9105-35f770575035.roa (raw, json)
Hash identifier:          FkwBCSvjwJOJL0xAP9Yh9MtZ0kDhUPSFwK0f9P7YIsE=
Subject key identifier:   97:69:E3:BB:E8:A7:64:AB:D6:BB:3E:F7:B5:AB:DF:FB:6F:BA:63:1A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5DECD1721428AAB70DD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55fc5be4-7586-3654-9105-35f770575035.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     16787
IP address blocks:        72.31.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:de:cd:17:21:42:8a:ab:70:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=fcf0fa31-90d4-4e9f-a8ea-ae3463aa79cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:e5:5e:df:b0:78:3a:ee:2a:fa:3a:9d:25:
                    e0:59:f6:31:07:d4:09:0e:ea:97:9c:a0:46:ac:3f:
                    ce:63:41:50:33:cd:2f:96:03:76:56:d8:f1:43:27:
                    e7:d9:e8:6a:45:48:4a:77:e3:cd:ea:2a:54:6b:b3:
                    55:f7:56:e3:57:6c:21:13:16:ff:fe:95:3e:2b:b2:
                    fe:a9:55:d8:ce:1f:fa:05:fe:0d:fd:d9:98:d9:35:
                    9c:5c:53:2d:26:c3:35:cc:40:cb:fe:6c:14:5c:84:
                    2f:4c:33:f2:8e:04:29:b9:3a:9b:ca:cd:a7:03:63:
                    c0:66:af:0f:77:e1:fd:2c:65:6c:b6:9d:65:5c:22:
                    02:ff:e8:13:ef:07:61:1d:5e:46:91:03:00:23:9b:
                    ed:4a:6d:33:21:19:97:4a:c8:7e:3c:81:c9:5d:0a:
                    7f:70:f7:91:42:b0:d2:9b:c5:43:ac:17:6e:20:34:
                    93:39:00:41:c2:2c:9f:db:89:65:58:11:f7:9d:7b:
                    3f:9c:78:42:4d:45:17:21:2c:e6:a7:d3:f7:18:9b:
                    a3:18:ab:a2:40:08:b7:fd:72:69:fc:92:a4:94:7b:
                    f2:c5:6a:18:08:24:eb:23:bc:a2:aa:eb:14:7d:4a:
                    21:9a:f0:e6:68:d2:c2:f0:b1:86:d7:b5:06:06:68:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:69:E3:BB:E8:A7:64:AB:D6:BB:3E:F7:B5:AB:DF:FB:6F:BA:63:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/55fc5be4-7586-3654-9105-35f770575035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:8d:8a:86:ac:f8:83:81:4e:b3:bf:ab:e6:70:46:e4:f1:
         d2:41:eb:71:04:ec:38:c3:7d:b6:27:37:27:9e:41:e7:1d:e5:
         f6:19:db:74:63:25:8d:ca:cf:6a:af:f7:e0:58:94:a1:c6:68:
         13:6e:73:63:14:c0:3c:b6:01:bd:d8:91:1b:3a:a5:3f:bf:81:
         00:ef:bd:0a:2a:2c:33:0a:ca:73:f2:57:4e:a7:55:13:74:f6:
         12:41:9b:29:52:eb:0c:96:22:f5:69:d1:20:13:29:0e:80:08:
         b2:e9:ab:aa:8f:ce:e0:8f:2b:20:32:d2:a5:74:8e:24:4d:8f:
         9e:91:ed:c5:91:66:9f:61:65:00:92:3b:aa:48:c6:c6:65:52:
         76:31:6e:c1:98:a7:db:c9:8d:ef:ab:72:27:08:93:b3:ae:1f:
         ef:e1:3c:a3:a0:04:d6:3d:28:eb:6f:b6:e2:d5:e3:6c:f7:dc:
         5d:a6:da:b6:01:ae:db:23:85:f9:74:be:38:8a:2f:bc:59:8c:
         3e:19:47:63:99:1f:18:11:98:50:03:9d:bb:c6:4f:6a:d8:a4:
         44:93:d4:5a:a0:71:23:59:7b:10:a2:9b:16:f3:92:69:94:d1:
         6a:ef:df:7c:db:33:c3:81:cc:ad:1f:7e:73:ef:83:aa:ac:5c:
         4d:b9:36:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1d7NFyFCiqtw3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZmNmMGZhMzEtOTBkNC00ZTlmLWE4ZWEtYWUzNDYzYWE3OWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp3lXt+weDruKvo6nSXgWfYxB9QJDuqXnKBG
rD/OY0FQM80vlgN2VtjxQyfn2ehqRUhKd+PN6ipUa7NV91bjV2whExb//pU+K7L+
qVXYzh/6Bf4N/dmY2TWcXFMtJsM1zEDL/mwUXIQvTDPyjgQpuTqbys2nA2PAZq8P
d+H9LGVstp1lXCIC/+gT7wdhHV5GkQMAI5vtSm0zIRmXSsh+PIHJXQp/cPeRQrDS
m8VDrBduIDSTOQBBwiyf24llWBH3nXs/nHhCTUUXISzmp9P3GJujGKuiQAi3/XJp
/JKklHvyxWoYCCTrI7yiqusUfUohmvDmaNLC8LGG17UGBmjwnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdp47vop2Sr1rs+97Wr3/tvumMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTVmYzViZTQtNzU4Ni0z
NjU0LTkxMDUtMzVmNzcwNTc1MDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB+4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWzjYqGrPiDgU6zv6vmcEbk8dJB63EE7DjDfbYnNyeeQecd5fYZ23Rj
JY3Kz2qv9+BYlKHGaBNuc2MUwDy2Ab3YkRs6pT+/gQDvvQoqLDMKynPyV06nVRN0
9hJBmylS6wyWIvVp0SATKQ6ACLLpq6qPzuCPKyAy0qV0jiRNj56R7cWRZp9hZQCS
O6pIxsZlUnYxbsGYp9vJje+rcicIk7OuH+/hPKOgBNY9KOtvtuLV42z33F2m2rYB
rtsjhfl0vjiKL7xZjD4ZR2OZHxgRmFADnbvGT2rYpEST1FqgcSNZexCimxbzkmmU
0Wrv33zbM8OBzK0ffnPvg6qsXE25NlE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org