Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
File:                     e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa (raw, json)
Hash identifier:          m6kUjZFX+oKMKWzMdPGAPKfJXIhsdyRpRn6umg1IhPo=
Subject key identifier:   BA:DB:0B:FA:6F:CF:15:5B:7D:C9:C5:FD:1D:29:D1:B4:21:45:C1:FD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FC260C1472170CCF3140
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        72.31.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fc:26:0c:14:72:17:0c:cf:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=c21129a6-a6fe-4144-9383-a5f5d7fddfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:98:b5:26:09:98:4f:c9:1e:02:d3:54:ce:
                    41:02:57:5a:90:25:20:fc:4e:e4:8a:e5:67:9a:0c:
                    61:7e:20:39:06:77:da:80:e7:42:29:60:8e:9b:75:
                    2b:73:1e:4d:b0:77:d8:c2:37:1f:06:04:79:0d:52:
                    51:c8:e4:56:97:a3:57:4b:5a:d9:4b:96:26:de:b4:
                    e1:03:93:0f:8d:de:04:aa:12:d4:6a:9b:e5:56:d6:
                    2e:7c:f0:ca:e5:bf:b6:d3:e1:71:a8:03:85:fd:ce:
                    9a:d1:8e:6c:6e:1f:56:70:ba:8f:a2:b8:92:f4:68:
                    5a:00:20:88:3d:9f:b3:e2:3a:da:c2:a2:77:c8:8a:
                    50:76:56:28:a9:df:63:22:48:9a:23:34:3a:60:30:
                    56:01:ec:35:f7:91:b8:ec:c8:9a:64:bb:1c:ad:82:
                    47:99:dd:19:f8:96:48:02:9d:78:b8:72:15:0c:88:
                    80:e3:02:0b:84:19:7b:65:34:7b:06:79:8d:9f:ed:
                    15:14:17:60:02:84:f8:23:63:d1:64:d3:07:19:2c:
                    1a:0a:8d:3d:12:5c:89:9e:44:4c:3d:5f:52:96:ae:
                    8e:de:61:64:02:d8:a9:b1:78:45:c9:c2:27:78:2d:
                    4c:3c:e9:c2:07:7f:77:3b:d8:66:fd:83:ec:ba:fa:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DB:0B:FA:6F:CF:15:5B:7D:C9:C5:FD:1D:29:D1:B4:21:45:C1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:53:03:cb:70:41:d4:93:e0:f6:6b:94:56:25:80:55:ce:72:
         6e:3a:ab:6a:13:d9:c4:07:d9:26:8d:fb:07:e6:2e:20:5a:50:
         fd:b7:8b:b4:9e:0f:68:90:a6:c1:b6:02:03:a0:32:b4:eb:e7:
         4b:f0:ad:60:59:a0:92:24:77:80:92:43:a9:6e:f1:14:86:08:
         ac:63:0a:d9:af:90:28:5a:fd:cd:dd:d2:3b:7b:7e:a3:d5:66:
         04:fb:e5:d6:79:d7:2d:31:c9:6c:a9:99:9c:08:31:ca:20:ae:
         e8:f9:b7:81:14:5a:c0:66:93:38:f6:be:13:db:39:e4:7e:6f:
         71:48:0c:17:3d:7e:7c:84:f4:03:52:c9:8b:80:5b:f8:97:22:
         2d:f8:8f:c3:41:8e:8c:f2:65:11:4e:ec:5a:93:2f:bd:ab:4e:
         c3:40:85:df:72:3a:29:46:6f:56:bf:c5:cf:e1:87:65:b3:b3:
         7e:f1:d4:e8:a0:b1:aa:55:16:61:ae:3c:c3:20:e8:5f:9e:ff:
         58:ad:91:bd:52:40:c0:b1:8b:9a:b1:69:48:d3:ee:0f:53:40:
         83:15:8c:f9:50:bd:a6:c4:43:57:97:42:16:ef:32:3a:5e:07:
         f6:27:6e:69:9c:ec:b5:64:51:1e:61:3b:a3:70:95:53:96:49:
         27:8b:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org