Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fe9b230f-914b-3f3e-ad92-959d69c0a596.roa
File:                     fe9b230f-914b-3f3e-ad92-959d69c0a596.roa (raw, json)
Hash identifier:          7/SY6G+McwWgOGl8eGjltG6oKtO6/gY2Z99TPStwhYI=
Subject key identifier:   5C:E4:44:3B:7D:A1:68:54:F8:06:C6:E1:DE:66:34:66:30:5C:03:1B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068E23A1A549BA8C099780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fe9b230f-914b-3f3e-ad92-959d69c0a596.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.31.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8e:23:a1:a5:49:ba:8c:09:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=517c6ea4-5744-4079-b783-ab8a054dcc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:98:d4:55:95:f6:bf:98:57:11:b8:1a:43:
                    aa:36:52:d6:17:4d:99:d6:a9:b5:7e:4c:5e:79:9b:
                    9e:06:a9:14:ac:88:d0:24:e3:97:9d:b1:df:2e:f2:
                    68:7f:ee:ba:b3:a2:03:17:83:20:9b:43:63:78:7a:
                    14:8c:7f:20:b4:77:6e:88:72:3f:82:56:62:0a:04:
                    9c:dc:5e:3d:7e:7a:c1:50:09:da:b5:88:1f:0b:72:
                    f8:22:46:68:e4:dc:69:8b:b1:1c:97:ab:50:22:d2:
                    85:2d:8c:00:3e:53:c4:d3:d6:35:cf:20:64:e7:05:
                    a8:6e:ab:22:18:71:db:e7:e2:ab:d6:4b:06:6a:16:
                    a7:1e:bc:a2:66:01:f9:dd:4a:0d:b9:1e:a2:5d:97:
                    a7:7a:08:39:38:a7:ed:e1:ee:71:df:63:35:68:ea:
                    e1:a6:9e:c0:ae:1b:2c:cf:fe:af:ef:d2:c1:97:da:
                    1c:56:2a:29:23:74:b7:d3:a8:5c:c0:93:29:c7:d3:
                    49:77:8d:0f:6f:7f:48:14:73:25:2c:5f:a6:13:74:
                    fb:9d:f7:87:cc:14:ed:cc:cf:4f:9d:95:04:f5:96:
                    27:07:c0:e9:95:9d:19:22:9d:da:ed:24:7b:e9:e1:
                    5e:38:8e:35:57:6c:5f:9c:e9:f9:bb:88:30:5c:47:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:44:3B:7D:A1:68:54:F8:06:C6:E1:DE:66:34:66:30:5C:03:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fe9b230f-914b-3f3e-ad92-959d69c0a596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:48:0a:f0:45:b3:04:5f:8a:cd:82:94:7f:c0:b2:12:11:ce:
         8f:11:b2:8d:b5:af:e0:66:04:38:00:8d:c9:18:f1:1e:94:40:
         27:1d:79:20:0a:18:8e:8e:1a:b9:44:34:89:c9:ca:ff:e6:43:
         a6:1f:65:58:c6:8a:11:22:f3:b1:e9:19:71:9d:91:12:76:f2:
         47:b6:25:86:7d:da:a8:02:9e:30:0b:4d:90:ea:95:57:a4:34:
         1c:5f:e6:ca:65:9b:ad:bc:0a:f4:e7:1b:00:32:9b:cb:6a:c6:
         0f:11:d0:74:44:3f:65:3e:33:1d:a4:6c:19:0f:e5:5d:5b:cc:
         5e:e4:1a:6a:c3:55:af:3d:4c:b6:aa:ac:4f:e3:16:ca:01:bb:
         28:08:5d:47:f0:21:3b:6f:52:4e:4f:00:75:78:a0:50:e7:37:
         eb:47:67:d9:63:8d:70:2c:f5:9b:49:29:76:47:37:39:ba:40:
         e6:90:a6:bd:11:22:10:b8:6e:d1:13:06:f9:f7:53:35:e4:d5:
         69:5f:7c:e8:34:ff:e1:07:d2:80:9a:95:26:8c:a3:ce:77:36:
         bd:93:3c:7b:55:dc:f7:10:7a:92:f7:3e:e6:fe:6a:d7:1e:fd:
         dc:d8:e4:f8:fa:d4:49:a1:35:46:b0:43:0f:01:98:78:83:07:
         fd:49:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:23 2025 by rpki-client