Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/634baca1-5c9d-30ce-a070-33fe851c4755.roa
File:                     634baca1-5c9d-30ce-a070-33fe851c4755.roa (raw, json)
Hash identifier:          gRbEwmPzazCFWOabemwTWg9SEULxXD1q0A5850r71U4=
Subject key identifier:   E3:A1:2E:BB:FB:CD:39:05:A3:82:03:D9:BF:81:B1:64:62:F9:A0:2E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FD1B991140AB442D39AC
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/634baca1-5c9d-30ce-a070-33fe851c4755.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fd:1b:99:11:40:ab:44:2d:39:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=240ea3fe-4b9c-4a7c-b10f-38632d363a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:bb:40:3c:bf:74:01:46:f0:7b:37:0e:17:
                    a4:d7:b0:87:f6:4d:77:a2:c3:5d:0b:33:c2:a6:f3:
                    1b:17:7e:4a:9c:10:51:dc:58:5a:2f:36:f9:9e:60:
                    85:92:36:c6:af:50:bc:e5:1e:c0:34:a8:cf:aa:ee:
                    1b:d4:71:b9:d7:58:d7:8b:10:b3:52:a3:24:e4:7d:
                    aa:9c:13:6c:ae:64:b8:4b:24:9a:ca:28:b5:2a:5d:
                    32:5d:91:84:31:99:28:37:a8:d0:6b:e0:03:08:8e:
                    c8:ee:a3:a3:7c:e4:04:5d:ce:84:69:7b:e2:f0:7b:
                    3a:a6:8d:3e:06:15:cd:40:ee:c0:f4:c5:42:6e:d1:
                    64:2c:4d:66:b4:27:29:0b:d3:62:19:b8:85:81:f6:
                    f5:c6:c1:b5:5d:a2:d8:34:f3:16:87:1d:09:b0:e6:
                    3b:bf:d6:55:0d:8f:fe:22:6b:70:05:f7:47:96:72:
                    57:ac:ed:fc:4b:64:da:41:8a:5c:b9:e3:8b:82:0b:
                    f9:e7:e7:58:79:b6:68:52:fb:e7:68:6a:0f:27:92:
                    da:87:55:c1:fc:cd:38:33:06:57:bb:25:3c:dc:69:
                    c0:a0:3c:5d:95:84:60:a1:de:ba:2f:02:bf:00:67:
                    15:5f:97:8c:07:23:be:a4:17:56:29:29:e0:eb:cf:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:2E:BB:FB:CD:39:05:A3:82:03:D9:BF:81:B1:64:62:F9:A0:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/634baca1-5c9d-30ce-a070-33fe851c4755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:55:9e:f6:36:52:fa:8e:cc:c2:9f:ab:5e:b7:69:0d:61:
         6a:cd:ec:52:7a:0a:74:70:97:18:51:86:d8:a2:5b:a5:d3:65:
         4b:31:ad:39:2e:c7:30:63:8c:a4:0e:e5:7e:58:4b:d7:a5:4b:
         7f:f0:41:f0:27:8e:3e:72:29:4a:dc:f0:dd:02:80:27:9b:b8:
         f6:69:4c:27:2b:c5:a1:b3:8f:c0:35:04:71:8b:9d:dd:a4:7f:
         f0:55:fa:bf:63:d1:af:e8:62:29:da:0d:66:a7:70:6f:6f:1f:
         dd:bc:5a:7e:d1:6a:c9:16:63:8b:b8:4d:bd:5e:a6:ea:ec:72:
         00:08:5f:c9:e6:5a:7d:01:fa:a2:e1:b3:68:8f:20:83:14:06:
         bf:55:5c:cc:0f:6b:40:b9:d3:e7:35:cb:4f:0a:b7:40:78:68:
         1f:aa:bb:74:b0:ff:97:57:17:56:7e:e5:3f:26:5d:9b:36:f2:
         8b:a6:82:e6:44:7f:77:16:fe:26:f8:16:8c:fc:20:8f:f5:46:
         3a:e4:81:f1:19:4d:a5:3a:f8:a0:f7:f5:11:d4:60:ab:bc:ff:
         2f:f5:60:77:fb:a5:a1:be:be:e4:b1:fe:65:72:1f:95:50:d8:
         22:e9:7b:cc:8d:b9:07:5a:88:00:8b:39:b7:c2:e2:5b:28:b8:
         cd:c8:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org