Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
File:                     c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa (raw, json)
Hash identifier:          a3vH/3cwExZGngTcjOtt761wS8+VgiQCTS4+b8qyn+I=
Subject key identifier:   CF:57:8B:17:4D:AC:50:71:A3:F4:62:F9:EF:9C:29:73:24:4F:21:56
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3047F0F615A39AB8FF080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        72.31.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:04:7f:0f:61:5a:39:ab:8f:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=23aedad7-c059-4b7c-bc14-03407d186c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:e2:e5:75:01:a9:0e:3a:7f:0e:08:7f:52:
                    ac:db:a5:55:a1:b3:5e:e9:06:6c:c3:af:88:34:68:
                    92:2c:26:de:bf:47:a6:1c:fa:0f:66:00:28:a7:ef:
                    d8:9a:51:c5:69:33:3d:2a:82:3c:37:18:11:9d:a3:
                    04:de:d8:99:a2:51:de:4c:e8:aa:77:5b:12:3a:52:
                    ca:fe:67:aa:61:64:81:0b:38:c3:2f:95:b5:09:a3:
                    18:ef:93:5d:16:7e:b4:b7:c2:3f:45:d1:1b:0d:01:
                    32:8b:b8:ec:8d:af:95:0a:b4:50:c7:e3:2c:f7:11:
                    22:9c:86:f3:05:7a:49:a8:aa:11:b9:65:c1:e7:41:
                    d1:a1:c2:23:da:44:f5:6c:e1:87:a9:4d:62:46:00:
                    20:76:13:14:ac:46:a1:70:2f:fe:45:ba:65:c4:71:
                    56:1d:90:2c:04:5a:78:82:de:f3:7b:5b:50:49:1a:
                    35:ce:8c:23:24:69:64:d4:8d:aa:dc:76:13:a6:6c:
                    15:43:95:52:b0:e6:b6:64:b8:4c:bf:c1:4d:8e:f9:
                    f9:cc:83:e4:4d:15:93:e6:7b:07:87:44:54:fc:ea:
                    e2:cf:91:16:db:58:62:d5:2b:53:13:ec:cc:67:46:
                    75:2f:19:51:11:52:28:b7:0a:d1:93:de:fc:6b:63:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:57:8B:17:4D:AC:50:71:A3:F4:62:F9:EF:9C:29:73:24:4F:21:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:61:df:62:91:1a:2a:65:3d:d5:bf:53:09:30:a1:3b:c4:24:
         f4:74:bd:1a:6a:da:08:7c:8a:10:d2:3b:b7:f3:4a:f1:41:c9:
         70:2d:6e:5a:87:24:98:d7:c5:fd:71:f0:f2:d3:e2:5e:29:91:
         40:4f:3c:d9:ae:e8:25:89:a3:19:cb:0c:0b:b9:7b:1d:f4:65:
         4c:63:7b:4a:f6:c2:ff:a4:a7:21:d3:1e:cf:f1:d8:4f:25:29:
         e8:ee:b8:31:ae:0b:97:a2:b0:77:13:cd:c3:5b:3f:df:bb:b2:
         2c:56:53:ef:10:ed:56:03:3e:06:7e:00:f9:1f:ae:7c:47:2f:
         e5:5c:8d:91:30:4f:d0:60:fb:be:d4:dc:ed:64:d4:d1:3d:95:
         d2:83:fc:80:ba:70:83:cc:cd:59:ca:75:c2:e8:f5:0b:78:51:
         89:d7:09:c2:ad:bf:a1:c1:fe:b1:ff:f5:3e:75:0f:70:f3:b6:
         dc:02:12:ad:30:d4:60:ad:92:e5:66:3c:c7:fb:22:b9:82:aa:
         5c:f3:aa:64:2b:2d:8e:55:83:f3:2f:10:86:3a:54:26:e9:c1:
         7a:a4:95:99:4c:42:7b:d0:8c:2a:10:67:8c:4e:b8:75:de:f1:
         85:41:03:f2:ce:b6:f3:84:62:e8:28:0d:6f:c8:10:e9:1d:33:
         87:fe:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:13 2024 by rpki-client on console-fra.rpki-client.org