Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/761f5dac-073a-38f7-ab88-0d6223aa735a.roa
File:                     761f5dac-073a-38f7-ab88-0d6223aa735a.roa (raw, json)
Hash identifier:          Z67+6WbvFGlY0pwNB8E56r6P2iaAxwMmpyDkqQknja8=
Subject key identifier:   83:A3:5A:10:01:30:74:15:82:19:24:D1:9E:8F:F0:33:A1:45:DD:12
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E3AC7674161911FDB180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/761f5dac-073a-38f7-ab88-0d6223aa735a.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e3:ac:76:74:16:19:11:fd:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=bb4ab898-edd6-45a8-9f36-d3ba902d0ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:77:ba:90:2a:58:18:e8:89:24:07:73:89:
                    8c:8a:6f:8c:56:ba:31:b1:2e:87:c2:23:3d:2f:af:
                    20:2b:af:3f:ec:bd:83:53:51:95:7e:0a:66:b9:a7:
                    48:f0:0a:a2:35:7b:4c:82:d7:70:bd:d0:51:57:f0:
                    2b:5a:3d:16:16:ad:1d:a6:b7:ce:5d:00:a5:5e:4b:
                    5b:e5:68:a0:ae:03:19:03:37:9e:c9:f3:be:b4:fb:
                    6a:1a:a7:bd:5c:ff:7a:e7:3d:4b:e7:c9:8d:80:86:
                    9d:a5:bb:d8:96:f3:3b:b8:46:59:73:79:4f:49:84:
                    ec:d3:f8:1c:4f:b5:dc:35:e2:5a:f5:5b:ca:54:bb:
                    48:9a:6a:a5:72:fc:09:a7:c0:f0:d0:1d:c7:0e:a8:
                    bf:8a:5c:9c:39:09:be:3c:0b:be:21:41:0b:83:34:
                    ee:1b:e1:c6:f2:8e:6a:a2:bd:08:20:1a:a4:1d:e4:
                    44:a5:47:51:b0:fe:e4:db:a0:c6:50:c4:b8:b9:2d:
                    61:d8:bf:b6:db:13:e8:5b:e1:57:a6:e8:4d:c4:43:
                    af:8b:8b:87:58:f2:1b:5a:23:48:4f:fc:45:99:9a:
                    bc:d9:d0:e8:19:49:ff:62:64:b0:03:e9:f9:7d:1a:
                    68:7b:95:bc:ae:2d:da:3d:b8:c4:a9:2f:36:fd:45:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A3:5A:10:01:30:74:15:82:19:24:D1:9E:8F:F0:33:A1:45:DD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/761f5dac-073a-38f7-ab88-0d6223aa735a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:be:e4:9b:1c:a7:92:75:58:c8:00:e9:15:37:13:4b:87:f0:
         00:d7:70:c0:bb:5f:40:aa:1b:5b:69:9e:3e:21:d0:39:f4:44:
         f3:be:20:09:a7:ab:33:b8:4d:f2:3f:c6:f7:8b:9e:fc:d6:0a:
         69:0f:02:01:8e:35:ff:6c:fd:f6:41:25:50:98:8f:72:09:e8:
         5d:45:74:9b:d6:82:00:0a:83:37:d7:8e:2d:67:f8:4d:cf:22:
         64:55:64:5b:f2:8a:5b:2c:38:b4:8c:99:13:57:92:af:fc:dd:
         ae:c3:a4:15:95:8c:d5:51:e7:ab:56:ee:32:0f:4b:75:7d:d1:
         81:7e:9f:66:a1:a7:39:09:a0:8b:30:5d:93:0e:e4:41:de:08:
         fd:22:53:51:9a:35:41:b2:2d:fc:d0:75:3a:ea:c5:c0:5a:41:
         61:67:f3:5e:df:a2:08:f8:f0:e8:79:dd:07:9e:b8:f7:17:7b:
         e1:1d:08:41:c1:4c:84:ba:0d:97:a1:73:d4:18:2f:5b:3e:99:
         e3:a7:d5:62:8c:39:47:fd:06:63:f2:5f:da:a6:e4:22:66:60:
         b4:de:d4:aa:32:8e:fa:ec:a4:1a:45:e9:22:db:1b:63:61:c2:
         eb:00:8e:7b:3d:3f:7a:9a:3a:af:cf:30:cb:d0:ed:c0:79:4b:
         8f:af:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org