Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d4aadbb7-eb0c-389a-ae80-dfd1c9fa3ca1.roa
File:                     d4aadbb7-eb0c-389a-ae80-dfd1c9fa3ca1.roa (raw, json)
Hash identifier:          ie7p8mZF0rIVwlL/W2ueJ8fwOqCI/BEWV1nMbD62hxM=
Subject key identifier:   EB:2A:14:CF:E2:11:D8:A2:5D:4C:71:26:43:B1:F1:37:87:FD:4B:26
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838AC0A5C9E5E70BBB114373A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d4aadbb7-eb0c-389a-ae80-dfd1c9fa3ca1.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        72.31.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:0a:5c:9e:5e:70:bb:b1:14:37:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=013b6702-ff3a-46c7-a593-59cf45d33daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:09:56:d5:9a:d6:6b:5e:2a:b6:4d:9b:22:
                    ff:2f:8d:18:e4:83:f0:c0:15:fb:d7:25:f8:3a:f1:
                    6e:1b:91:b9:2c:3e:65:90:63:df:9b:93:fa:38:81:
                    b1:dc:33:88:aa:f1:07:e7:5e:73:43:60:2f:df:d6:
                    ba:ca:77:f3:cc:49:42:70:83:d3:e7:88:66:e1:90:
                    8e:59:c7:c2:ab:55:23:ac:ce:5d:a5:f0:17:b5:4a:
                    65:c0:99:8f:e7:4d:62:45:63:c7:dd:f9:e8:2a:d5:
                    90:26:1a:00:89:c2:be:db:77:bc:9a:01:44:66:5b:
                    56:38:d4:79:a5:9c:2b:70:a2:27:5e:2b:36:2b:cb:
                    07:e3:02:82:6c:67:ad:89:3a:47:14:ec:e1:8e:59:
                    94:e6:cc:8f:34:a0:50:41:c3:40:c0:91:d1:85:c2:
                    f8:48:bd:ad:8b:5f:12:03:43:22:2a:3d:ad:79:c4:
                    4b:e2:d8:96:a1:49:47:0b:c6:ac:4d:49:78:89:07:
                    bb:af:f4:56:85:d5:9a:6a:92:b8:57:57:85:00:ca:
                    15:9b:3c:e8:b6:ef:58:8d:c3:97:41:9a:de:13:69:
                    d1:78:3b:7d:2b:68:e9:d4:35:1e:56:08:17:81:4c:
                    d2:2a:30:cb:32:55:f2:eb:3b:38:43:fb:9d:6f:f8:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2A:14:CF:E2:11:D8:A2:5D:4C:71:26:43:B1:F1:37:87:FD:4B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d4aadbb7-eb0c-389a-ae80-dfd1c9fa3ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b1:a4:09:c5:05:6d:88:da:36:24:f5:1a:b5:ac:9b:17:94:
         37:7c:01:25:25:52:bf:03:80:fd:e6:47:24:2f:bc:57:cd:a8:
         ff:9d:17:ea:96:38:7d:0c:ac:ca:28:70:eb:2f:e8:48:f3:6d:
         d0:a3:c8:8b:c2:cd:04:d8:32:ed:3c:8c:f5:dd:88:af:b7:c2:
         e0:37:15:3b:ed:11:9b:cb:f9:15:58:09:2f:6e:0b:48:6a:b0:
         44:b7:f0:d3:4a:de:55:92:b3:15:3f:93:22:6d:1e:76:8c:b0:
         b6:44:ff:0b:3d:3c:fa:2d:e5:5f:6d:85:89:5e:f1:77:5f:46:
         82:93:db:c6:45:b0:be:f5:6b:a9:f3:83:5d:0a:77:f3:d8:11:
         2a:17:1e:56:68:5d:35:68:c3:12:c8:9b:2d:32:25:88:59:45:
         0e:ea:02:7e:6b:63:7d:e6:dd:fb:11:54:6c:b6:ad:00:49:4c:
         7b:09:0b:e6:53:93:df:35:31:1f:bd:1a:64:fe:71:88:11:3f:
         c0:0c:75:26:9b:0b:e4:82:70:e4:a2:34:36:be:5e:41:c3:d8:
         d6:9a:60:eb:4d:93:96:d3:96:07:de:59:c6:e8:57:f0:c6:7c:
         8b:89:2b:81:9d:bc:f8:80:2a:b6:1a:69:f0:a7:3b:a1:4e:5b:
         af:19:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org