Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80e0db3f-3e01-3ddb-b98d-abea09073242.roa
File:                     80e0db3f-3e01-3ddb-b98d-abea09073242.roa (raw, json)
Hash identifier:          Qd6shx/mCpldbdiliKgCnuWqvs6apSvWEp9ub56zRSs=
Subject key identifier:   BE:E1:39:15:59:04:46:0E:12:AF:D5:9C:03:C6:5C:74:76:C2:DE:8A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E68AFE36856AA9D9FB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80e0db3f-3e01-3ddb-b98d-abea09073242.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e6:8a:fe:36:85:6a:a9:d9:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=bdc6c961-1a57-40fc-9ecf-5cba85960047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:e1:97:22:ae:ec:24:c2:0e:66:61:df:3c:
                    93:4a:65:ea:e2:7a:b2:b7:3f:89:41:35:34:d9:02:
                    bb:30:fe:7a:82:be:8b:d9:41:ad:9d:d6:db:21:69:
                    cf:d0:bc:60:6c:34:65:e0:97:30:e6:06:71:37:5d:
                    fb:5f:eb:a3:ca:3e:66:ff:9c:e7:39:8b:43:a8:68:
                    9a:1e:3f:84:38:86:4d:77:1b:d7:fc:d8:92:69:8c:
                    ef:f3:1a:30:a5:c8:2e:42:f6:fa:09:9b:55:8f:cf:
                    52:e4:3d:7e:51:16:27:25:44:fd:98:f1:14:59:92:
                    62:4f:04:ea:63:67:19:fa:4a:f1:85:7c:c3:c9:2c:
                    a0:f7:28:3a:0b:b4:cb:3f:0e:9e:26:62:54:01:d5:
                    96:64:64:c0:56:9d:2d:54:a6:b9:08:4a:1d:a8:53:
                    da:03:53:d6:75:d2:7b:3d:f4:dc:7e:7e:66:a2:dc:
                    52:0a:5f:e4:68:76:61:df:8f:df:9d:34:88:9f:36:
                    aa:46:18:76:c2:89:2a:b6:75:10:1e:15:0c:86:4d:
                    0c:18:61:c8:97:1e:9b:ee:0e:c5:db:bd:bc:71:b8:
                    f4:75:bd:21:ff:cd:da:eb:92:47:2e:34:0d:66:6f:
                    47:06:68:e1:0f:69:a3:e9:e3:f0:2d:e3:fe:d8:24:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:39:15:59:04:46:0E:12:AF:D5:9C:03:C6:5C:74:76:C2:DE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80e0db3f-3e01-3ddb-b98d-abea09073242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:89:65:b8:29:e8:bb:78:4f:28:e7:49:d3:28:67:83:14:94:
         dd:9b:e0:41:87:a2:9b:d3:91:c6:76:63:87:29:2a:4e:2b:3f:
         de:da:e7:5c:51:ef:38:eb:c1:d8:b3:f3:99:4a:b5:1c:69:b2:
         52:b2:3f:10:d6:b0:2a:02:63:6d:fd:71:bf:89:98:cd:ca:45:
         c8:a4:cc:6b:3c:a7:b8:49:93:a9:6f:5e:df:35:f2:e2:d1:59:
         02:7b:f5:58:1f:39:66:28:61:36:dc:08:48:09:1a:32:e1:10:
         ce:73:07:58:13:d6:a9:95:07:7f:cb:e4:e6:f7:81:b8:0d:25:
         74:16:3c:65:e6:6a:5f:6a:38:b2:90:66:c7:a9:46:c8:4b:b0:
         63:09:d8:b2:c5:ff:3d:4d:12:4c:7a:60:85:90:86:d4:45:c1:
         b6:5a:08:8c:a0:9f:ff:e7:ca:03:06:dd:ca:3e:be:20:cb:3c:
         83:0a:d4:84:bb:cc:4c:75:aa:a0:2e:68:f3:d5:1a:4c:d6:be:
         ec:b2:10:3c:3b:62:cd:db:52:8a:e7:2a:5e:05:55:0f:62:0c:
         01:c8:53:40:cb:4c:59:3e:ea:78:ac:24:ba:9d:6c:46:9d:b2:
         0a:58:4c:ba:89:15:bb:f1:62:c7:f4:e4:46:28:f6:fa:ff:a5:
         8a:12:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org