Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/583223c3-d7c2-395b-810f-87e20f373dfa.roa
File:                     583223c3-d7c2-395b-810f-87e20f373dfa.roa (raw, json)
Hash identifier:          zJZTtdlBXX6ftJ6KY0bkrh25OT/3tZDBbSTLp0o+s8A=
Subject key identifier:   D4:82:C8:02:45:B1:A5:7A:5E:F5:E4:D2:12:F7:7A:33:C5:2F:6E:DA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838AC0A4DC63E8606816B8C4A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/583223c3-d7c2-395b-810f-87e20f373dfa.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        72.31.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:0a:4d:c6:3e:86:06:81:6b:8c:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=c664709d-1b8f-476d-b616-bcb72fb3f4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:a0:8b:e8:6b:26:3a:56:b2:c9:62:67:68:
                    7d:aa:15:75:a6:bd:be:4c:a5:c4:0a:19:f2:5c:c8:
                    3a:31:49:ea:99:26:68:10:3e:39:2d:2b:29:7e:a1:
                    c9:07:10:98:ba:f2:01:46:61:50:f6:10:56:16:6e:
                    c4:07:18:5d:f5:30:3f:d3:38:8c:f2:93:8c:57:93:
                    ca:3d:32:8f:08:8b:7e:a1:20:6a:0c:37:f8:76:db:
                    84:17:3f:75:1b:7c:52:e0:fa:a3:4f:b5:85:eb:13:
                    fd:0c:b4:58:6b:1f:17:5e:8c:b2:f2:0c:a0:95:41:
                    d0:50:22:4c:dd:52:1c:8a:32:3b:5a:80:c6:5d:3e:
                    5b:a2:a2:9b:e0:36:dd:7c:92:c0:04:c3:26:ac:b0:
                    12:85:22:89:bb:6a:ca:c5:ad:06:bc:b6:2e:f1:37:
                    67:97:38:db:46:98:fa:35:f2:72:10:57:a1:1c:bc:
                    fc:31:21:c4:0d:ef:31:09:aa:87:ca:6b:39:0d:3e:
                    a9:63:ed:2e:03:ce:5b:09:aa:e2:92:ca:cd:51:23:
                    66:69:32:57:b8:ba:ee:8c:cd:99:20:93:36:3f:38:
                    f7:77:37:cf:d3:b6:5a:8c:f2:17:c8:8c:27:6a:97:
                    f5:94:d0:44:af:26:1a:a7:ab:dc:d0:a5:43:2d:f6:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:82:C8:02:45:B1:A5:7A:5E:F5:E4:D2:12:F7:7A:33:C5:2F:6E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/583223c3-d7c2-395b-810f-87e20f373dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:74:c3:74:5c:c9:72:d8:53:88:25:38:a0:34:e3:2a:92:e6:
         6e:cb:a6:8c:83:d2:fc:9c:57:cc:f3:79:f9:4b:d5:de:b9:62:
         3b:5e:21:b1:60:6b:55:cb:55:77:0a:3f:15:41:88:c1:b7:8d:
         89:c3:fa:a3:8d:f9:6a:d7:f4:c3:26:01:81:87:a2:10:ce:cf:
         2d:16:e8:4d:f1:64:c5:75:af:e4:ba:a3:75:3a:d1:67:61:e1:
         3e:5e:5a:f1:38:5e:6a:6e:4a:ba:26:85:a8:65:d0:a6:82:d6:
         ff:06:dd:b5:46:f8:5d:5a:02:aa:02:38:35:66:fb:a3:2c:b1:
         35:1e:8b:d5:6f:47:c2:d1:87:c7:1a:1e:79:2f:f0:e1:37:84:
         11:15:0d:f0:86:a2:6e:d6:b9:08:89:3e:c6:d6:d6:bc:dd:7a:
         00:0d:4e:45:65:09:53:f2:a9:c8:0a:68:fe:75:94:8e:d7:05:
         a3:0b:ec:5f:f1:e4:1d:f1:24:ed:ee:a0:52:fb:ea:8f:84:e7:
         97:22:20:76:57:ad:94:f3:ef:0a:ee:e9:24:b9:8d:13:7f:39:
         e3:5a:99:73:e7:02:29:8a:b4:ba:42:03:3a:fc:e8:73:73:bb:
         b0:e9:dd:e7:d3:5f:da:1a:f5:d0:d7:ff:6d:55:13:63:06:aa:
         22:c1:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:04:27 2024 by rpki-client on console-ams.rpki-client.org