Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80e0db3f-3e01-3ddb-b98d-abea09073242.roa
File:                     80e0db3f-3e01-3ddb-b98d-abea09073242.roa (raw, json)
Hash identifier:          Dv/0oCAiphPrKv4Y2wKJ5UEOezWPXSyNtMAF5GApxOk=
Subject key identifier:   7D:CC:8E:6E:77:85:A8:CF:04:D6:20:B1:C6:F1:B5:D9:BE:1C:C9:3D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006682AA85F533520B2A380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80e0db3f-3e01-3ddb-b98d-abea09073242.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.31.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:68:2a:a8:5f:53:35:20:b2:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=ba04aa37-1a90-49fd-8e88-bf9caa5fab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:43:80:53:74:bb:ab:6b:92:bf:d9:7e:08:
                    06:c3:a0:25:fa:2e:c2:37:49:be:d9:a9:eb:a2:0d:
                    d4:2d:e7:32:5a:93:d9:4a:fb:dd:30:d3:68:8d:73:
                    7e:89:30:4c:ed:b2:24:31:dc:5d:40:3a:bc:9b:25:
                    b3:7e:22:3c:82:00:26:0c:d2:05:64:bb:14:f2:d8:
                    55:b6:6a:3c:5a:3f:73:19:69:d7:db:cb:e5:4d:ae:
                    6a:13:f7:b9:0d:91:6f:15:64:28:6f:a7:c2:a4:72:
                    3f:46:c7:2a:5c:17:2c:17:8c:a2:c0:d7:67:8e:56:
                    54:30:ba:90:c7:ea:f1:0e:3f:10:06:40:fc:8a:b1:
                    53:d5:d9:e1:97:54:7e:84:98:75:98:fa:8a:a8:1c:
                    99:19:b6:0a:2d:cd:d2:e2:ac:88:ab:cc:d1:12:87:
                    71:67:70:7b:02:1c:1a:e2:72:53:a5:8a:91:75:ff:
                    c3:22:2a:6a:5b:97:54:6e:af:7f:33:21:2d:b8:2a:
                    88:bc:92:9f:d5:e6:e9:d4:38:00:5b:5a:8d:8e:8f:
                    e0:82:c3:0b:9a:98:bd:d7:e6:48:e4:da:62:87:0d:
                    34:f5:c8:aa:79:4d:85:ad:90:92:eb:cc:53:26:c2:
                    c0:78:1d:ee:22:aa:aa:54:f0:b7:79:ad:1a:50:cc:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CC:8E:6E:77:85:A8:CF:04:D6:20:B1:C6:F1:B5:D9:BE:1C:C9:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80e0db3f-3e01-3ddb-b98d-abea09073242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d2:29:ea:2e:8a:fb:0b:b9:4b:56:ec:79:ac:45:ec:bd:2a:
         2f:f6:d7:87:c7:c1:1d:5e:aa:7c:28:10:b5:4a:59:cf:4d:e7:
         0f:34:8e:ff:64:30:00:ab:0d:1f:a8:29:09:0c:83:65:6d:5d:
         be:89:91:4f:70:d5:fd:8e:5c:99:d2:21:db:10:bd:3e:de:0f:
         1e:96:9a:db:7d:95:b2:4c:0b:b4:ef:cd:02:1e:d0:d0:e5:72:
         fa:db:a8:82:84:56:41:eb:fd:92:7e:b1:85:f9:91:99:55:f1:
         ac:f3:9a:1c:0a:25:05:db:49:6e:23:f4:a1:0e:b2:e3:ac:a9:
         38:3b:1a:46:22:bc:b5:e0:54:cd:b9:d0:e1:e8:4a:a1:b8:95:
         b4:71:5b:c2:c8:18:4a:5d:af:5a:61:20:f9:76:d7:94:1a:06:
         fe:60:26:31:74:84:06:77:10:15:2b:63:08:0f:42:b6:db:41:
         7a:94:69:50:9b:7b:d6:10:0c:58:64:78:e9:33:56:d6:e5:1c:
         06:9d:0d:47:9c:da:41:9f:dd:1a:81:8b:3d:c8:bd:ae:40:a9:
         bf:43:f4:fb:7d:ee:b8:8f:2f:e0:07:17:c5:fb:b8:1b:fa:00:
         bd:6a:da:5d:cb:6f:20:da:be:b6:e9:d5:2c:d3:c2:38:6e:fb:
         74:44:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:10 2025 by rpki-client