Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/736fb653-6c7f-347c-8f52-133e102bdd7c.roa
File:                     736fb653-6c7f-347c-8f52-133e102bdd7c.roa (raw, json)
Hash identifier:          QO1RSyLQTUpLWJLbsoZ3g3J4MA1kjvdxMQta4wwxfT8=
Subject key identifier:   4E:E9:D5:38:B9:9E:99:F4:45:68:6F:50:16:43:54:67:FF:18:AE:BD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E1F1043A8E2EE47F5000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/736fb653-6c7f-347c-8f52-133e102bdd7c.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e1:f1:04:3a:8e:2e:e4:7f:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=1c2bde83-e3c2-490d-b630-47c67fd89b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:d8:28:cb:0b:07:d2:94:86:29:43:21:c3:
                    f1:80:67:95:a1:e9:2f:46:2f:c8:97:6d:f1:72:87:
                    0e:76:61:5f:28:6e:00:b5:69:5a:d0:7e:90:1c:3f:
                    54:7f:c2:09:47:62:29:fa:f8:be:04:0a:86:eb:f2:
                    ff:62:54:0e:c1:0c:68:e7:6f:59:e0:05:4b:7c:7a:
                    65:3b:3b:e7:6b:75:88:8d:1e:0f:95:d7:8c:71:4b:
                    5d:40:17:be:a1:ad:b2:6e:bc:de:19:42:1b:c8:ff:
                    a0:b6:7e:d1:5f:33:3e:73:98:4a:b4:1f:bc:5c:29:
                    85:db:58:db:66:e1:1f:b3:c8:f2:4d:bf:91:ba:da:
                    81:3d:cc:57:5e:87:f6:1a:d4:b5:2d:6d:fe:c1:36:
                    ed:d6:d4:60:ff:b0:2d:bb:cd:3c:c8:12:19:b9:fc:
                    cb:ec:6e:30:df:c6:dd:3d:f4:71:54:dd:73:49:ba:
                    aa:99:df:b5:98:a2:f0:33:5e:93:a2:c0:1e:d5:18:
                    fc:e9:21:5a:0b:b1:fb:d1:5c:a0:04:04:36:2c:ef:
                    63:8e:89:ea:09:0f:9f:5a:3a:ae:b3:e7:b5:06:e5:
                    49:de:e0:35:d8:38:de:0e:0f:84:81:8a:90:9d:c1:
                    5d:39:81:a4:2a:0c:ff:94:b8:f7:e3:20:55:05:bd:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:D5:38:B9:9E:99:F4:45:68:6F:50:16:43:54:67:FF:18:AE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/736fb653-6c7f-347c-8f52-133e102bdd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:0d:89:6f:8d:14:87:e9:05:d1:51:34:c0:dd:76:62:0e:
         8b:5b:c3:50:d1:0b:77:cf:4d:0a:51:c6:3d:81:ac:0e:50:35:
         a4:30:a5:39:04:6f:1b:7d:e7:ff:f1:65:bd:75:66:80:ab:bf:
         1d:f4:f0:fb:56:f2:1f:99:b7:b7:b8:87:01:ed:02:fb:fd:c5:
         26:9a:9c:db:56:11:76:57:5a:27:df:7e:13:b3:2e:e7:ca:1f:
         d4:97:1f:47:21:97:87:4c:bb:f9:33:58:9c:44:1b:fe:ff:b7:
         c5:67:d8:30:4b:aa:fd:c5:ce:94:8a:54:8f:54:48:8c:20:03:
         8b:70:3b:e7:c5:b0:e7:83:05:68:e2:ba:c5:27:54:9e:c0:fe:
         7c:25:83:b2:e7:80:2e:82:36:53:61:4e:31:60:33:de:71:87:
         04:a7:c1:c2:ba:b7:1b:dc:e7:40:b8:8f:2d:5c:c7:2c:2e:47:
         e7:d9:09:90:62:60:2a:cd:ce:6b:65:8f:30:1c:2c:f5:9c:43:
         eb:95:29:70:c1:8a:fd:e0:f0:47:1d:6a:dc:1a:71:5c:ac:a3:
         72:96:a0:bf:10:3f:06:22:02:da:d9:97:95:41:a2:68:c4:b4:
         11:4c:56:8f:b7:b9:00:07:57:45:9a:60:8c:46:b9:d2:54:5f:
         04:31:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org