Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa
File:                     ce773cd7-a29f-364b-b715-1a31d4511544.roa (raw, json)
Hash identifier:          KGTSnk7esRfGma2/iJew8yH/Fwq3kmagghUXsxh4fmo=
Subject key identifier:   0C:A4:5F:BC:9F:C6:4A:EE:8E:AF:9C:12:93:06:E0:DB:54:82:72:E1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC306CAAA7A77540F0AD260
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        72.31.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:06:ca:aa:7a:77:54:0f:0a:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=cfaa20ca-864f-4210-8ccc-ed35b7008575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:b8:07:ef:5f:62:a3:50:db:d9:25:e4:98:
                    10:92:fb:ac:42:a6:26:96:0d:24:56:13:51:2f:c6:
                    87:35:da:cb:4f:01:12:2e:84:c8:c9:29:65:d9:ef:
                    b6:0a:4b:81:4f:db:2e:38:df:b2:1a:47:4e:f5:09:
                    7d:b1:8b:09:06:d9:10:1d:32:7b:80:f2:e5:18:9e:
                    20:15:e0:af:c2:fd:a3:e4:b6:23:31:4d:69:1c:17:
                    10:16:c0:8a:24:08:cf:b9:b4:7e:6c:ce:a7:85:73:
                    eb:d8:a9:84:1d:f5:47:ea:44:64:d4:6b:05:cd:89:
                    1f:ff:c5:7f:6c:b2:48:e9:92:8e:f2:a2:4a:53:e2:
                    76:e2:e3:26:6a:db:58:42:16:11:f1:4f:d7:2a:12:
                    e3:0e:31:d6:8f:32:c3:57:27:13:bc:d2:0b:d6:4c:
                    49:d7:6d:64:b3:aa:6a:46:95:a4:4c:70:dd:fc:18:
                    0c:21:ea:31:e7:a0:e9:03:af:29:c5:1e:dc:96:12:
                    4a:bb:3a:18:e0:86:13:a7:7b:3e:61:84:f5:e9:e2:
                    8f:01:55:d4:7c:68:28:84:28:49:57:32:46:aa:f0:
                    2e:b1:bb:43:11:b6:f7:6a:c5:0b:c2:32:c9:93:15:
                    73:55:ac:99:77:f0:17:c7:f3:7b:93:50:0f:12:d4:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:5F:BC:9F:C6:4A:EE:8E:AF:9C:12:93:06:E0:DB:54:82:72:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:d0:2f:d9:fe:69:0b:b7:85:dc:f2:32:3b:e6:33:18:92:
         50:7e:79:51:cd:09:58:d5:61:30:ae:04:39:da:37:da:68:eb:
         8f:4b:78:ec:45:96:64:1d:08:53:b9:65:b0:70:f4:4c:32:00:
         25:47:9d:3a:c4:88:ca:5f:6c:d2:ab:1d:34:9b:7c:93:af:eb:
         a7:55:ea:83:c6:f1:9d:c3:56:51:4c:9c:25:9d:f9:cc:7d:ca:
         17:e7:5f:c1:f5:92:1f:b3:b1:1f:90:d8:32:e3:32:a7:03:fb:
         5d:8e:98:ee:a1:7b:ec:24:71:d0:76:45:6e:62:0c:28:fb:74:
         f6:61:96:8c:c9:a8:93:a6:27:cb:0e:00:cc:c6:5c:3e:aa:21:
         a2:d7:c0:59:34:d9:d5:0c:33:9e:93:d5:39:09:a1:1a:a9:01:
         dc:fa:f9:6c:21:e0:8b:a6:c7:2c:ab:82:d9:c8:7f:55:e1:21:
         ec:84:ab:ab:96:47:62:7a:cc:ff:dc:07:8c:70:c0:0d:8c:1d:
         49:87:5e:51:9b:60:44:11:ad:2c:5e:21:fb:57:b8:6c:08:c3:
         12:e6:39:a3:31:d6:6e:35:c2:f5:39:a7:c3:6c:44:32:7b:d2:
         5b:cf:b0:b5:a4:6c:b4:41:ea:b7:5c:20:f8:30:ae:c2:c1:31:
         65:03:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:29:20 2024 by rpki-client on console-fra.rpki-client.org