Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
File:                     e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa (raw, json)
Hash identifier:          S30EUU/L9piiXabZlCInv1+cYOdlUrG2cWU08iB+i2E=
Subject key identifier:   A5:F3:DB:03:03:D1:60:E3:9E:64:13:69:B6:69:4D:EE:E5:3E:D9:89
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068E9F3B14F18B0ECF5500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.31.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8e:9f:3b:14:f1:8b:0e:cf:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=04b21c12-9503-41ae-a641-584a40039aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dd:07:6d:0e:f9:6b:92:c6:ce:50:45:1f:b1:
                    12:87:ec:25:10:12:f6:89:27:52:da:90:30:6f:67:
                    e6:cc:c1:cd:a8:72:d7:fa:a0:01:a2:ee:a1:a4:cd:
                    d4:7e:e7:1e:f6:c3:13:26:58:37:f7:3b:ab:64:46:
                    8a:78:60:43:ab:de:8d:ff:23:be:ed:28:ec:69:2f:
                    82:74:b3:d9:d9:04:31:a0:55:a9:0b:e0:82:ab:3c:
                    aa:a9:cb:33:73:1d:65:5e:37:1f:00:70:9a:a3:12:
                    ea:75:69:77:2e:6d:39:5f:90:06:4a:9f:cd:5d:8a:
                    1b:63:ab:8a:f1:9a:1f:c0:aa:37:42:f6:19:35:95:
                    fd:5b:55:8a:62:63:c3:02:f0:fc:ea:c7:d0:f4:ce:
                    91:52:a5:f7:5f:b2:cd:e8:5f:9e:2c:5b:39:c3:06:
                    66:56:ff:fa:4c:f5:21:e5:3d:f1:b1:b6:69:fa:ee:
                    71:c2:a3:9a:d3:e4:19:2f:1e:10:ff:47:9b:8e:8a:
                    5e:ee:51:93:4f:2e:04:95:6c:5b:db:8f:e2:f5:d7:
                    7f:00:27:ee:5f:45:07:a2:1c:fa:3a:4d:be:8e:3e:
                    03:ec:cc:5e:59:02:65:cd:5b:78:90:4c:00:09:eb:
                    54:1f:8f:d4:48:a3:ae:d2:7e:31:d8:32:6b:90:34:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:DB:03:03:D1:60:E3:9E:64:13:69:B6:69:4D:EE:E5:3E:D9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fc:69:f4:78:67:63:b5:6f:9a:37:6a:f0:32:75:68:72:bd:
         4e:d3:23:1d:09:ba:54:3e:8d:2b:24:8e:57:5f:4d:8d:32:0c:
         b0:c5:1b:4b:7f:7a:3c:0c:d5:fe:76:09:54:aa:11:80:be:4f:
         4f:84:77:f4:60:0f:33:d0:b5:42:d3:c7:75:9e:bd:89:fa:3e:
         24:db:90:51:36:1e:04:76:eb:39:2a:2c:51:4c:fa:86:ca:c7:
         19:bd:9b:56:b9:e8:bb:f2:d0:47:80:31:5c:70:1c:84:7d:0d:
         c7:cc:be:61:d8:b0:c8:67:4a:e4:ce:d9:c0:0d:0a:81:e8:bd:
         09:5c:94:3d:b0:49:54:6b:9a:5c:9d:be:22:d9:b4:bb:6d:c3:
         45:03:fb:de:a5:cc:d8:46:31:04:60:9b:32:ed:0a:ac:f0:3d:
         33:41:32:0e:00:e4:5c:32:f7:36:16:b2:e8:5d:7b:ba:9e:07:
         b4:66:6d:7d:2c:03:90:30:fe:26:61:68:0d:14:a6:a3:2c:d4:
         df:0e:99:2f:b0:92:7a:71:76:34:4a:fd:da:80:58:5e:57:7f:
         db:da:98:80:75:fc:68:b3:77:8f:9f:1f:57:d7:35:b5:9a:7a:
         79:f8:bd:37:dd:d9:0d:23:38:54:b6:01:a5:ec:88:0e:5d:55:
         79:b8:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:34 2025 by rpki-client