Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa
File:                     38f83ce5-2988-37ed-a3dd-524801d41b91.roa (raw, json)
Hash identifier:          5M1fhhG1N+65EjRTYANq8GBXp80mhXMOkEW/RYrjUfo=
Subject key identifier:   0D:65:3D:9E:D3:F4:27:05:E4:20:D4:74:E7:61:96:D5:3B:B7:F9:3F
Certificate issuer:       /CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
Certificate serial:       010D0C9F43285845A6F3629669FD7BB058481280
Authority key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     393444
IP address blocks:        72.46.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:62:96:69:fd:7b:b0:58:48:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=47fc246d-14df-410a-8764-d1ba8bc298b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:19:4e:80:bd:6c:00:14:20:b9:75:7d:b2:
                    21:57:11:37:b9:7b:c0:0e:35:62:c9:3f:54:81:1e:
                    2c:1e:fa:23:b5:f4:74:43:de:52:fe:64:0c:c9:5d:
                    6d:08:f3:55:e8:45:07:a2:95:13:36:9d:3d:7c:4f:
                    85:61:ef:b0:76:0d:6f:fe:d0:e5:d4:5d:1f:99:2b:
                    12:4d:08:6b:1b:a5:8d:36:59:b3:57:3a:9e:3a:8a:
                    6a:77:46:a6:ec:30:e3:7d:03:4a:80:47:fc:90:a4:
                    0e:28:eb:14:63:fb:1e:8d:ca:de:f9:52:ad:21:9e:
                    c0:b5:2a:63:58:04:12:fc:81:b1:3c:4e:fd:d6:bf:
                    0c:78:75:77:e0:9e:60:9a:8a:e9:69:d3:df:af:27:
                    f2:fd:fe:b3:87:64:23:89:1f:32:64:9c:be:f8:ba:
                    2b:00:98:6d:ef:44:77:26:a0:92:23:38:3a:f8:1e:
                    4a:68:78:c8:b4:18:3c:99:6e:d9:ae:f4:07:5b:98:
                    37:a3:a0:0d:56:e1:93:25:d1:3e:5f:e4:c7:63:a6:
                    34:28:76:e5:cb:e3:cc:84:0f:b7:a3:09:5f:a6:3f:
                    df:a6:f2:8c:76:5b:27:24:37:e3:1f:48:66:d5:6c:
                    4a:23:be:d2:2d:d3:73:5e:33:d9:d2:9e:24:a3:cf:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:3D:9E:D3:F4:27:05:E4:20:D4:74:E7:61:96:D5:3B:B7:F9:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl

            X509v3 Authority Key Identifier:
                keyid:7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:32:47:40:92:04:55:35:b0:5e:97:75:f6:c0:ad:fe:0a:c5:
         ec:54:9b:23:60:2c:d7:da:ee:31:0e:2b:1e:a2:14:a6:bb:96:
         28:bd:bb:68:77:fb:5e:b6:9e:51:3a:44:47:00:56:ab:24:83:
         d2:5a:7f:95:fa:05:c9:32:ff:c0:f8:f7:27:1d:52:8a:2c:0a:
         0a:ee:b1:19:8c:0e:24:a9:2a:24:e9:30:27:1d:ba:43:34:55:
         e2:52:cd:f0:27:e6:a7:ca:50:ca:b3:71:9d:74:59:17:b8:55:
         0e:1f:42:5f:dc:82:70:99:6c:ed:19:fb:2b:ef:28:dd:08:c3:
         bf:27:5f:63:21:81:c6:45:5a:7c:b2:aa:09:6c:91:af:83:76:
         49:fb:f4:78:dc:e7:6b:65:8c:18:e6:6b:53:d9:ff:8b:7d:11:
         b9:b0:30:35:eb:8b:8b:80:a3:ec:e7:17:83:2d:ab:63:58:9a:
         ed:f0:6e:b2:9e:d5:9e:0c:4e:c0:03:90:6b:e2:01:0f:53:fa:
         aa:25:b7:54:87:fd:74:b8:c2:70:f2:a9:10:f5:cd:24:84:64:
         f5:a1:17:7b:38:c6:37:8d:b8:3f:1d:7c:ff:4d:ef:08:39:9c:
         73:21:50:6e:54:cf:23:b3:65:ea:88:94:9f:9b:95:ea:76:26:
         f4:d7:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:18:10 2024 by rpki-client on console-ams.rpki-client.org