Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
File:                     e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa (raw, json)
Hash identifier:          0UbrHSW7qCbpN1Gcr9+fzqvSed53AAw7s5/HvBDTWnY=
Subject key identifier:   DD:ED:15:4E:02:26:2D:DF:E9:6E:AA:E9:2F:73:B8:47:E7:89:84:30
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3060E98CD8D1033114A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        72.31.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:06:0e:98:cd:8d:10:33:11:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=46b751e5-1f4b-4180-bfe8-1d282960bc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:4f:cc:c1:62:38:ee:f6:09:51:72:ad:5d:
                    a9:7b:57:46:80:86:a8:75:5b:23:11:1c:20:ef:ed:
                    77:a3:50:6b:60:68:8a:4a:70:50:b5:ad:73:cd:dc:
                    bc:48:17:9e:98:09:c3:02:a8:15:75:bb:cc:af:7f:
                    c7:44:7c:44:91:13:46:bd:26:8c:53:94:57:8f:2e:
                    ae:5b:4b:3f:9b:4c:2f:13:0a:f3:68:4a:81:36:84:
                    b4:d9:0f:39:62:a1:bc:13:15:81:f8:96:c0:eb:f6:
                    cf:49:f0:b1:51:8c:5d:d6:df:fc:14:4b:c3:af:48:
                    60:3e:3d:4f:d9:c6:52:0d:d2:04:73:9a:d3:d8:2d:
                    84:e0:26:bc:23:df:f2:e3:51:96:4e:8e:5b:dc:5f:
                    f0:90:e0:52:4f:32:5d:1e:c9:88:97:e8:72:68:67:
                    95:fb:73:c1:41:e1:b2:a6:8f:90:be:08:cc:17:0c:
                    cf:11:75:37:e5:b1:51:7d:3c:5a:1a:56:65:52:a4:
                    94:3f:f1:8d:cc:b4:38:c4:60:c6:39:fa:10:d1:38:
                    a5:46:84:e9:be:97:c6:38:06:b6:db:08:8a:3b:89:
                    60:bf:e3:ca:ee:5f:dc:0d:e4:7a:3e:71:54:7c:1a:
                    d4:57:6d:d6:8c:98:8b:b5:df:61:e1:c0:df:61:f4:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:15:4E:02:26:2D:DF:E9:6E:AA:E9:2F:73:B8:47:E7:89:84:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:27:c5:a8:23:25:88:bf:19:11:ca:2b:05:5a:12:75:08:8c:
         fa:7c:55:ee:ff:e0:09:83:34:9c:3b:66:ec:57:73:70:6f:b2:
         9a:c6:53:50:a0:08:8d:4f:f9:cd:12:78:23:3a:5b:3c:26:53:
         a6:28:fc:70:91:10:e1:bb:ce:0b:b2:31:1c:ab:f8:37:87:66:
         79:5c:ef:6c:f3:51:23:f4:07:5c:76:ce:90:bf:3e:0b:61:b4:
         34:f4:8b:c0:5b:cc:7b:19:4e:a8:be:e5:04:c6:37:da:fa:80:
         27:b9:de:65:41:aa:d1:17:b0:45:ab:9e:15:dc:42:e4:c8:9a:
         81:f1:47:67:09:4d:7c:ca:64:5b:3a:c8:7f:7f:51:5c:85:39:
         82:9f:69:17:e9:44:65:d9:17:1c:18:8e:c6:f7:c1:7c:5c:5c:
         5a:17:cb:05:36:a7:c4:d1:e3:08:11:cb:11:8f:fc:2a:6a:79:
         19:dc:c6:7b:49:2a:55:a4:8a:fc:46:b5:6f:ee:95:b8:7f:c0:
         cf:90:e9:0d:23:7e:90:16:2e:a0:3e:63:ec:cd:f2:83:87:c4:
         33:da:90:24:d5:0a:61:a5:1c:23:92:6c:7b:e8:0b:ee:93:9c:
         5a:59:fd:9e:b6:33:f5:38:1e:31:0f:1c:4a:1a:e4:2f:7f:eb:
         89:b1:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:47 2024 by rpki-client on console-ams.rpki-client.org