Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f53971f0-265b-3fdb-8558-93fc75755329.roa
File:                     f53971f0-265b-3fdb-8558-93fc75755329.roa (raw, json)
Hash identifier:          3IvK+PIoEzm2fzgsDU26fist+fYwKEQGYvlX1iNzxn8=
Subject key identifier:   3C:92:C7:94:26:8A:CC:1E:27:54:50:DB:E9:9E:AF:5C:D0:0A:13:70
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6F0102008994E7479A40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f53971f0-265b-3fdb-8558-93fc75755329.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.31.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6f:01:02:00:89:94:e7:47:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=260100ce-9a46-4941-a805-33dcc8c2f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:ff:66:40:54:93:68:1a:16:9c:16:b3:ae:
                    26:b0:c8:8f:06:85:80:8f:16:e7:f7:1a:02:cf:9a:
                    9a:8a:0c:e4:ec:26:b3:dd:af:55:82:28:99:c3:57:
                    6f:da:3c:7e:56:6a:cf:32:d9:68:4b:b8:6d:b2:1f:
                    d7:70:29:ce:04:7a:e0:c0:eb:5f:d6:68:fa:83:78:
                    3d:72:41:86:c1:b2:de:81:05:99:38:79:79:c2:7d:
                    3d:fb:ba:aa:60:66:3b:c4:0c:27:cc:3e:69:7d:df:
                    2a:a4:86:88:ff:f0:3a:2d:9a:8a:8c:fa:69:ca:a4:
                    41:66:a6:88:51:79:99:0b:ec:0c:9a:5f:40:60:e8:
                    d8:d8:9f:4d:14:df:1e:aa:01:69:be:cd:d0:30:b5:
                    d8:8c:cd:83:35:b4:f9:bd:c1:5d:39:11:eb:f6:12:
                    bd:d6:11:97:85:50:e2:4b:9c:22:fa:76:f1:29:86:
                    da:c9:fa:d9:3f:de:df:4f:39:7d:77:36:70:f0:50:
                    d9:f1:60:16:ca:e0:fc:12:51:05:43:f0:44:c4:81:
                    b0:5c:fd:b3:98:be:21:2e:11:a8:71:16:57:a8:26:
                    73:24:20:86:8a:0d:5e:6a:69:ae:1d:8b:a7:0e:7a:
                    81:13:a3:a8:e3:a1:f8:7d:0e:0b:82:0a:aa:15:e1:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:C7:94:26:8A:CC:1E:27:54:50:DB:E9:9E:AF:5C:D0:0A:13:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f53971f0-265b-3fdb-8558-93fc75755329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:56:7e:57:3f:4e:83:89:da:0f:0f:cf:78:dd:83:45:2d:d0:
         0d:99:da:e6:6f:1f:5f:23:3b:25:63:f9:6f:03:6a:b1:b7:09:
         c2:db:41:5b:f5:a1:aa:37:f5:bf:7b:4a:b9:2e:15:b1:aa:ce:
         5b:7d:75:f9:32:6c:b1:7d:44:7e:d7:a9:74:0c:1e:15:f3:1b:
         04:76:a7:e2:e4:87:12:f9:55:53:61:b7:26:2e:04:0d:fc:0b:
         4f:8a:f6:1d:ef:c0:1e:cf:3c:67:e3:e9:9f:53:9f:8a:69:65:
         f9:16:95:9c:34:0f:65:5e:42:33:96:0c:8f:c1:ef:d3:f6:6b:
         62:40:a9:0b:cf:0a:37:e8:d0:d0:24:ac:36:c9:dd:87:ad:15:
         0b:28:a6:c1:6c:1c:3d:d5:50:2a:49:98:73:8e:0a:3e:6e:19:
         8d:8c:05:d5:92:67:51:48:6b:43:94:9b:a1:46:e3:a2:9d:f7:
         19:60:c3:8f:bf:ba:7c:35:4f:b9:91:28:7f:90:ed:25:35:e3:
         36:ca:fc:33:e9:7e:5c:1e:db:82:46:a7:5a:04:c8:58:11:91:
         de:7c:bf:b4:23:0e:8a:21:cd:09:ae:07:f1:c8:7e:e2:26:b0:
         02:76:0b:f1:aa:b1:47:4d:35:99:af:dd:96:dc:f8:60:38:31:
         9d:e2:eb:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P28BAgCJlOdHmkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MjYwMTAwY2UtOWE0Ni00OTQxLWE4MDUtMzNkY2M4YzJmNzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMv/ZkBUk2gaFpwWs64msMiPBoWAjxbn9xoC
z5qaigzk7Caz3a9VgiiZw1dv2jx+VmrPMtloS7htsh/XcCnOBHrgwOtf1mj6g3g9
ckGGwbLegQWZOHl5wn09+7qqYGY7xAwnzD5pfd8qpIaI//A6LZqKjPppyqRBZqaI
UXmZC+wMml9AYOjY2J9NFN8eqgFpvs3QMLXYjM2DNbT5vcFdORHr9hK91hGXhVDi
S5wi+nbxKYbayfrZP97fTzl9dzZw8FDZ8WAWyuD8ElEFQ/BExIGwXP2zmL4hLhGo
cRZXqCZzJCCGig1eammuHYunDnqBE6Oo46H4fQ4LggqqFeFuOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDySx5QmisweJ1RQ2+mer1zQChNwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjUzOTcxZjAtMjY1Yi0z
ZmRiLTg1NTgtOTNmYzc1NzU1MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFWflc/ToOJ2g8Pz3jdg0Ut0A2Z2uZvH18jOyVj+W8DarG3CcLbQVv1
oao39b97SrkuFbGqzlt9dfkybLF9RH7XqXQMHhXzGwR2p+LkhxL5VVNhtyYuBA38
C0+K9h3vwB7PPGfj6Z9Tn4ppZfkWlZw0D2VeQjOWDI/B79P2a2JAqQvPCjfo0NAk
rDbJ3YetFQsopsFsHD3VUCpJmHOOCj5uGY2MBdWSZ1FIa0OUm6FG46Kd9xlgw4+/
unw1T7mRKH+Q7SU14zbK/DPpflwe24JGp1oEyFgRkd58v7QjDoohzQmuB/HIfuIm
sAJ2C/GqsUdNNZmv3Zbc+GA4MZ3i6wg=
-----END CERTIFICATE-----
Generated at Fri Jun 6 03:55:36 2025 by rpki-client