Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5fa4db64-3d06-34e5-b46f-0f0233391e9d.roa
File:                     5fa4db64-3d06-34e5-b46f-0f0233391e9d.roa (raw, json)
Hash identifier:          wR4u0R8Cm9vUwetZtIOYrFCeuZf+tpnps4m5djm3J6Q=
Subject key identifier:   00:81:9A:4B:76:D4:93:79:91:8A:9E:F0:A0:94:BA:C5:01:55:DD:34
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE141F378537ECBC67CA80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5fa4db64-3d06-34e5-b46f-0f0233391e9d.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        72.31.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:14:1f:37:85:37:ec:bc:67:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=71bc78d1-e639-454a-85bd-a825e7df83b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:0a:02:a2:21:2b:98:9f:9f:64:5d:73:f1:
                    ff:34:eb:c6:6c:25:4e:d1:0b:de:10:6d:f1:62:c0:
                    b4:6f:31:e8:19:7b:1a:ce:6c:4d:7b:38:06:64:5c:
                    7c:d3:db:e2:2b:ad:84:e5:10:81:ca:58:2c:54:0c:
                    a4:fa:83:65:5b:0c:69:92:b4:4b:d0:3d:82:75:64:
                    70:c1:f5:54:48:91:10:ae:3b:ff:26:24:72:5c:b3:
                    f5:5f:a1:c3:b9:1f:c0:cf:9b:30:27:46:85:32:67:
                    15:a3:5a:f1:c9:bc:d1:7d:ca:3a:a2:20:7a:1a:c3:
                    22:27:4e:c5:cd:61:2c:92:73:56:67:be:36:05:51:
                    ba:71:81:07:6e:9b:8c:be:3d:ba:44:1d:f2:6b:06:
                    e7:86:02:a7:d1:b7:2e:cc:72:22:47:b3:1c:a4:13:
                    76:1f:a3:8b:de:f5:aa:79:64:87:cb:10:1b:35:ab:
                    c4:74:c3:72:5c:38:fe:bd:ef:41:dd:2f:22:75:3d:
                    07:44:6c:7a:f0:02:98:4d:05:79:65:43:47:f0:a9:
                    e6:86:5a:b8:a8:78:da:74:92:7b:01:de:7a:a9:d7:
                    fd:66:80:df:8f:f1:c6:23:64:96:90:13:c6:0e:f4:
                    c9:d4:01:f1:b5:58:ac:54:85:11:24:ae:46:e7:44:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:81:9A:4B:76:D4:93:79:91:8A:9E:F0:A0:94:BA:C5:01:55:DD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5fa4db64-3d06-34e5-b46f-0f0233391e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:40:08:e4:d4:b5:48:cc:8c:2b:00:b7:8b:3e:d1:e8:fc:b6:
         45:cc:c4:03:8f:29:e9:e9:05:ef:12:45:35:aa:78:34:b7:17:
         bb:d9:79:d9:1d:21:a4:be:f9:50:91:58:6c:cd:8f:5c:98:78:
         d7:fd:a6:35:31:47:a2:50:7c:74:a7:70:8d:8c:86:20:aa:1f:
         4c:89:b0:f8:ef:4a:65:61:b6:16:c2:c6:dd:8c:46:1f:35:3d:
         ab:51:69:3b:84:d9:38:1c:f3:08:e4:af:b0:00:5c:4c:04:04:
         ce:96:44:34:95:47:01:57:de:84:e3:9a:44:2d:9c:b3:99:7e:
         11:9b:41:5f:ae:4a:51:b0:8b:8c:f7:af:d4:4d:1d:79:44:3b:
         6a:b3:6d:b4:34:8d:8f:65:86:4d:13:7f:8a:54:7f:81:28:d4:
         b6:c2:4a:07:65:52:a8:1f:d0:dd:d8:3d:cc:b2:cf:60:dd:53:
         12:2a:6c:0e:74:e8:dc:04:74:dd:a6:60:49:b7:74:7f:32:60:
         f1:5c:84:ef:63:db:a5:fb:6a:b2:53:41:d1:62:18:fb:ed:c9:
         42:d6:f3:d6:50:a7:b2:9e:98:61:8d:fd:f1:97:4a:f9:be:e9:
         ae:6f:4e:1c:eb:2c:d3:43:7e:dd:db:fc:97:0b:97:4d:9d:58:
         23:ea:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org