Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa
File:                     ce773cd7-a29f-364b-b715-1a31d4511544.roa (raw, json)
Hash identifier:          F3+k+BLhLyZ8NVRcHgQfIaeK3DkRh5ZLAKqy67N8qlY=
Subject key identifier:   D6:61:FD:ED:48:CB:7B:09:6B:E3:9A:84:08:55:08:A1:33:F9:7F:6F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FCABF8F21E742BA26400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fc:ab:f8:f2:1e:74:2b:a2:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=9e6ed0ca-84ac-4fc6-8b28-5f29be8482d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:91:27:9e:3f:4f:4a:81:74:21:cf:c2:a3:
                    78:24:f6:66:39:07:9b:b0:24:a1:d5:51:e0:a3:4c:
                    3f:26:73:f0:74:88:25:14:f9:70:fe:87:fe:46:ca:
                    1c:5b:3e:29:ce:7b:83:e1:d3:02:cd:b5:d7:fc:e5:
                    49:cb:8a:27:bc:23:66:e2:88:44:dc:cf:62:1b:02:
                    cf:a3:35:1c:f2:a5:ab:84:8c:db:a8:6b:cd:e6:eb:
                    f5:60:ac:9f:01:df:f7:3c:1e:6f:40:bc:45:95:b6:
                    89:dc:82:7d:1d:3c:18:5d:64:20:30:ef:24:e0:0b:
                    60:d7:1b:48:27:85:7a:c4:f5:f1:b4:89:8c:75:e2:
                    ff:62:a3:78:6a:24:c5:3e:55:dd:bc:90:b7:f2:a7:
                    0e:f9:ad:13:3c:e2:38:fa:c4:b5:59:36:5c:26:67:
                    7b:18:26:79:f4:51:9a:0d:bc:8a:ca:0b:cb:ff:0d:
                    63:13:c9:33:80:0c:12:7d:96:39:94:b6:3a:49:2f:
                    ee:49:94:86:cd:b2:4c:ec:9f:9f:e6:1a:a2:55:e8:
                    73:7a:9a:5d:2f:06:f8:53:c1:79:59:b4:3d:7c:de:
                    72:50:5e:88:a4:ab:8e:33:12:3e:80:cd:8c:ea:83:
                    72:bc:e9:56:7a:f2:d6:2b:7e:54:11:91:03:a2:39:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:FD:ED:48:CB:7B:09:6B:E3:9A:84:08:55:08:A1:33:F9:7F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:07:c3:b9:14:ac:f6:5c:66:71:43:95:b4:b5:56:a2:e3:bf:
         09:3b:4a:71:17:5f:ad:4c:43:35:b6:60:a1:64:d0:f7:b0:d0:
         1c:20:b2:d4:22:e8:70:28:d2:15:c1:ae:ea:64:50:1e:aa:db:
         97:dc:76:ce:56:c6:37:47:81:fb:4b:7c:2a:c5:a9:62:0d:90:
         87:47:62:9f:42:99:43:38:55:b6:95:23:b9:2b:b8:66:f0:e4:
         9e:3d:46:bb:96:fb:49:89:ec:c8:74:82:28:9c:38:9a:bf:c6:
         1f:c0:5f:31:87:06:60:97:09:0b:1b:17:9b:e4:24:d4:7d:0a:
         8f:a3:54:d3:f1:d4:25:03:93:2d:88:cb:73:91:c3:79:22:5e:
         7e:f4:d7:8c:81:0a:d8:a1:ec:17:36:6f:2e:0a:4c:09:5f:45:
         56:f2:b7:81:d8:3e:fa:8a:63:97:df:db:3d:03:fc:84:c3:a6:
         f2:7a:b3:8f:64:a5:36:96:52:e6:db:3a:f6:94:2e:e0:7d:49:
         6f:f8:c0:57:41:42:f7:58:71:49:82:2d:99:e8:f3:1b:4b:72:
         f3:07:23:53:c5:47:08:9f:4e:19:55:d6:b3:8a:a5:c2:10:d6:
         17:67:ea:b7:64:76:eb:7d:44:e8:40:c1:f0:9b:ec:ee:01:1d:
         cc:a6:04:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org