Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
File:                     ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa (raw, json)
Hash identifier:          /hnSUPvnZmCTCbXZcqcvRyxN2tcKOX7CpY/89FSlgUE=
Subject key identifier:   9C:01:7A:AE:38:DA:38:87:5A:D2:9D:45:5D:9D:79:1A:6B:DF:16:17
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068F0F6F4C1CD015FDF380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.31.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8f:0f:6f:4c:1c:d0:15:fd:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=fc3ce5f8-63a9-4525-8c27-fd923586bffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:88:92:d6:5b:d7:d3:6b:b0:f8:08:65:e9:
                    1d:0b:06:a1:37:3d:ba:79:78:95:8c:ab:c2:a3:55:
                    03:6c:fa:c5:3c:93:c6:a8:5f:bb:e8:0d:72:aa:45:
                    22:c2:38:55:0a:33:2a:bf:33:0a:fb:dc:ee:29:86:
                    83:85:90:d8:2d:f5:07:ae:ae:ac:e2:ce:1a:85:aa:
                    79:82:ab:92:4f:7b:70:fd:64:8c:58:9b:27:13:d9:
                    9f:f3:6d:78:6f:fe:63:9b:b0:45:5c:f3:db:d6:f6:
                    a7:68:f9:b5:a9:8a:fa:20:0d:fb:5b:57:77:05:08:
                    8c:49:95:1a:eb:f6:f4:4b:dd:1e:7d:24:6d:ce:9d:
                    3b:67:9e:49:51:d5:16:ae:92:54:3e:39:b6:30:7c:
                    e5:3b:5d:32:2a:02:30:36:eb:fb:9b:15:0a:69:10:
                    60:3b:25:6e:60:00:e0:3a:5b:16:af:41:e6:7f:5c:
                    fc:3f:4c:d8:2b:22:25:3c:1a:96:7d:d9:f1:f4:09:
                    de:6a:6a:3e:a9:0c:9f:69:5a:3a:85:a8:85:75:9c:
                    1c:8e:e4:15:0e:c9:3e:cb:dd:40:fc:d3:f1:b3:67:
                    87:28:13:43:35:ee:88:9d:6d:6f:cd:e4:4f:f5:e5:
                    e4:c6:41:52:e2:2e:a8:13:46:d4:f6:61:4d:ad:b3:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:7A:AE:38:DA:38:87:5A:D2:9D:45:5D:9D:79:1A:6B:DF:16:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:86:d1:fa:75:b0:bf:a8:4f:5e:5b:72:ab:ab:21:f2:e1:10:
         61:9b:b0:bc:0a:96:98:b8:d9:9a:71:5a:e3:48:7c:63:bc:91:
         fb:6a:02:9c:56:15:8c:5d:54:cb:04:19:6d:82:26:4f:d8:f0:
         b4:05:65:cf:0f:7e:ea:4d:3c:90:2c:4e:13:80:b4:21:4d:4d:
         3a:4e:4d:d9:3b:1a:c9:40:d3:4a:9b:f5:08:3c:a3:14:ab:cb:
         b6:81:12:27:ba:e4:b9:81:04:2f:88:79:79:18:38:b3:b3:48:
         f3:6c:ce:27:80:08:9c:2c:0b:78:d0:07:d0:b7:63:a8:13:8a:
         14:c5:8c:1a:42:a8:b2:ff:c5:23:f6:29:87:94:27:c7:75:36:
         c9:61:5d:77:35:f1:8b:57:a0:ce:2c:e0:63:89:52:78:73:59:
         9b:9c:b5:16:63:11:3f:a2:34:99:a7:43:1d:82:89:0b:f3:73:
         80:ce:06:f1:31:d9:9c:e2:f7:40:b7:48:48:d1:14:46:08:b2:
         0c:44:47:c9:8c:dc:b1:6e:24:02:28:d5:12:33:93:d3:87:32:
         8a:2b:0b:3d:25:78:37:e4:e2:52:f0:08:f9:be:a8:ad:22:7d:
         97:4e:3e:e0:78:6e:8b:06:5f:bf:ed:b3:64:3f:eb:b1:50:85:
         6a:4d:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:06 2025 by rpki-client