Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d5c29531-e674-3384-bb61-d8e8eea99056.roa
File:                     d5c29531-e674-3384-bb61-d8e8eea99056.roa (raw, json)
Hash identifier:          67CQEJRhcCF8OpXReIx71b/Tw0x27DQzMziz80TZTng=
Subject key identifier:   72:81:30:C3:02:0D:BD:BC:A2:F2:8A:A6:DE:0A:BD:9D:4F:64:D5:D9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838AC0A60F9FEF8ACC8CA880AC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d5c29531-e674-3384-bb61-d8e8eea99056.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        72.31.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:0a:60:f9:fe:f8:ac:c8:ca:88:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=735740bb-cc0b-4961-a3df-a769676911f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:44:28:85:ec:13:ec:97:6f:79:ac:c1:fb:
                    70:00:1b:7b:00:84:30:24:3a:69:dd:11:3f:ca:de:
                    d5:d7:69:47:93:4e:a4:1c:54:bf:2e:26:44:38:f4:
                    5b:8f:90:09:9b:29:13:03:8a:37:18:d1:7e:89:ca:
                    85:aa:38:a2:dd:b0:26:26:f9:36:78:5d:bf:66:96:
                    34:94:df:d7:ae:90:e2:d3:38:60:16:84:55:78:0f:
                    47:3d:69:55:2e:07:00:47:2a:37:29:28:f9:d0:d3:
                    c0:4f:55:14:56:b6:c7:c5:b0:98:dd:cd:c4:eb:af:
                    c2:ac:46:fa:33:98:90:e6:7b:07:f1:69:ac:ae:4a:
                    2e:4a:42:b9:32:4f:52:32:fb:c9:4f:7e:a8:87:ba:
                    ca:0b:33:9c:cd:2b:f8:20:37:13:6d:9e:7e:06:31:
                    c6:3e:22:50:01:8f:9b:03:59:9b:5b:39:f7:a0:2d:
                    7f:11:1a:56:56:c1:e9:ae:b7:3b:e3:81:cb:d5:76:
                    ce:2b:cc:55:4d:69:bb:58:08:89:16:21:cd:3d:2c:
                    2c:ea:a7:23:84:f2:a1:e5:f8:a4:8e:d5:0b:64:e3:
                    8e:09:6f:52:42:ae:5f:01:b5:ae:e1:e8:1a:50:37:
                    35:51:f2:35:2a:12:6d:d8:e9:c1:cb:ab:3f:db:aa:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:81:30:C3:02:0D:BD:BC:A2:F2:8A:A6:DE:0A:BD:9D:4F:64:D5:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d5c29531-e674-3384-bb61-d8e8eea99056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:d8:b3:d9:9a:d0:55:8f:7b:bf:a1:14:c2:c0:10:77:fd:
         df:dd:42:49:0d:d4:10:6a:f4:63:d9:ee:cc:7b:8f:12:d2:8f:
         bd:37:96:50:ae:a5:6b:54:9b:47:20:5d:e6:e7:ca:22:6e:9a:
         ca:ed:a1:b4:8c:a7:33:1d:7a:3f:8a:22:1f:67:80:79:58:85:
         92:4d:ad:bc:f4:d3:27:aa:ab:d5:18:43:91:17:a2:2e:88:25:
         75:96:e8:8a:5f:62:08:4d:b2:c9:b1:ad:f9:4e:26:fd:27:91:
         18:d6:7c:ed:2c:c8:56:05:a2:7f:52:dc:42:0d:7b:9f:49:e8:
         02:e6:e1:7e:83:3a:c4:3c:2b:c3:5c:2a:77:be:a8:ea:61:47:
         2d:b7:6b:6f:cd:7d:38:eb:f3:31:b2:07:75:7c:3d:f5:30:42:
         28:c8:42:fc:f8:52:91:a0:fd:3b:c8:5b:5b:27:1e:e8:e9:d0:
         78:52:e4:7b:72:a3:50:27:1e:e0:f4:6d:85:8a:78:0f:f2:90:
         a7:a7:e4:cf:2b:e1:d8:61:7a:ad:a0:ff:6f:b3:ba:07:56:db:
         72:44:e1:2f:0f:dd:86:f9:4f:4e:cb:d6:80:dc:bf:ae:67:2d:
         a9:75:28:86:13:2e:fa:66:b4:38:6a:5d:b0:2b:2d:69:d8:ed:
         11:08:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org