Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa
File:                     c35888ef-4cd3-3aef-af71-6a02f56f600d.roa (raw, json)
Hash identifier:          kp/AiHUrqbj57Qk4qg0R+elXHurdduR3gTgFjVCygzI=
Subject key identifier:   1F:AB:95:8C:68:89:03:18:47:1C:7A:38:20:04:01:9A:8E:ED:70:C4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC304720285DD1D9F2587C8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        72.31.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:04:72:02:85:dd:1d:9f:25:87:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=38b2f84d-4bbc-4705-b882-20033b93ce64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:c0:88:ee:9d:bd:9b:6b:05:b7:ef:7a:01:
                    35:00:e7:88:18:cd:e6:08:a1:2c:01:ab:23:3c:2e:
                    a8:fa:c1:40:98:f6:32:1b:c5:52:b1:da:55:07:ed:
                    01:95:c6:41:87:33:a1:90:ed:42:68:e7:25:9d:5f:
                    6f:64:62:b7:18:28:5b:66:3c:96:ae:f4:33:7f:5b:
                    92:53:a8:45:4d:15:57:f3:af:61:db:cc:15:17:b5:
                    a7:08:db:95:d9:d2:35:d4:11:1e:22:e0:15:00:98:
                    88:ba:3e:05:cc:e3:07:c2:73:a0:00:1c:fe:75:48:
                    e6:41:0e:52:82:e8:68:8c:fd:71:10:49:47:96:a8:
                    25:6e:5d:a0:02:29:30:95:3a:8b:62:c8:95:9a:14:
                    7e:76:76:38:ed:25:9a:b1:63:4b:3e:f3:56:7c:4b:
                    58:47:8f:9e:6e:02:df:c4:8d:15:c6:87:03:0d:d7:
                    88:ea:e7:f1:77:4b:bc:6c:22:69:e0:7a:40:e5:d7:
                    7e:49:9a:c8:00:9f:e2:f2:7a:87:08:4a:6b:1d:e8:
                    3f:2e:3a:23:43:59:cf:79:91:2b:8b:db:d9:2c:0e:
                    d0:0e:41:de:3b:4e:fb:53:22:fa:0f:e8:5e:ba:b7:
                    40:e7:f5:d4:00:b2:d9:47:e7:ad:f8:1f:6f:e0:15:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:95:8C:68:89:03:18:47:1C:7A:38:20:04:01:9A:8E:ED:70:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:66:ba:07:af:5e:bb:01:ea:1b:b1:14:4e:e4:be:9d:56:
         ba:8c:70:67:9f:8c:e2:51:88:c9:95:7b:29:9a:80:10:c6:2a:
         2b:56:7b:74:d3:d8:dd:38:67:b3:d8:e6:db:b2:db:17:74:c3:
         4a:27:c7:92:23:7a:fb:38:87:0f:3f:d4:df:38:74:7a:a6:3e:
         d2:9d:4d:c5:b5:fc:ad:b5:57:20:18:e2:88:8a:ac:77:cb:90:
         fd:16:21:4f:0f:7b:1f:b7:c3:3e:a9:07:a5:f0:96:45:99:8b:
         42:30:77:64:f8:32:0c:cf:df:24:88:5e:b6:f4:0d:78:68:f5:
         e7:59:de:bb:36:1b:aa:71:a0:2b:21:2c:68:ef:08:24:43:96:
         fc:75:c0:21:1e:86:a3:3e:16:9f:8c:9d:c1:03:c8:bf:34:f7:
         98:60:66:46:a6:0e:50:50:c1:5e:04:c3:1c:ab:bf:9f:a2:1a:
         e2:ae:4c:36:c0:bc:c5:b1:15:b6:1c:4f:1c:58:53:a8:30:d6:
         20:ba:d4:91:b1:f2:79:d2:e3:45:01:48:c4:5f:29:2b:6b:9e:
         1e:82:ef:a5:a4:6b:9d:ce:e5:c1:eb:0d:d3:8c:df:d9:64:cb:
         9c:40:5c:83:67:3a:03:af:40:11:bd:6b:f9:f4:03:b0:da:39:
         65:4f:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:37:17 2024 by rpki-client on console-fra.rpki-client.org