Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/14754284-06b0-3068-b872-231fdf9fbf88.roa
File:                     14754284-06b0-3068-b872-231fdf9fbf88.roa (raw, json)
Hash identifier:          1JVmkIvM2qXJKcgSVW8+lqXrERZxjLnjSJ8e+ir2QNU=
Subject key identifier:   0C:0C:DB:A1:39:17:DE:DD:FA:77:05:CE:88:6B:2D:B2:C3:DB:72:5C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9640DFCE1DF212C65780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/14754284-06b0-3068-b872-231fdf9fbf88.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.31.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:96:40:df:ce:1d:f2:12:c6:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=4fb43e63-6306-41e4-8a51-ff1994c25481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:7f:27:a2:03:28:dc:ef:a7:0f:c4:71:e3:
                    7e:4c:87:5f:b4:3f:65:2b:77:2a:e4:51:56:9d:4d:
                    be:30:e1:00:b5:bd:52:1a:b3:71:3b:9c:8a:f4:c3:
                    1d:79:29:8b:80:cd:dd:b3:b9:a6:45:10:90:2a:06:
                    bb:29:67:a0:08:e5:bc:6f:34:5d:0f:ab:82:6f:ca:
                    a2:25:71:03:4c:4c:31:e2:e8:13:ef:48:e0:29:18:
                    e8:d0:14:f4:46:61:d7:ed:7a:90:3c:9f:ae:aa:2e:
                    a0:50:66:22:94:81:4c:40:c0:59:1c:71:d2:ee:e0:
                    90:81:65:2c:ae:82:1a:2a:d1:17:bd:21:d8:19:48:
                    70:72:25:c4:a3:c5:f4:5f:e1:f5:71:7f:bc:a8:47:
                    c8:e6:6e:9b:d7:f9:b7:fa:52:4a:70:aa:8e:2b:c4:
                    57:e5:e9:3f:a7:05:bc:f2:2a:f8:b8:fc:8f:e0:a2:
                    28:e7:b5:a5:a5:14:4f:d0:a2:22:6c:d5:f8:ab:55:
                    d0:4d:5e:27:43:30:94:79:17:de:a6:fa:93:b4:b5:
                    24:1c:06:0e:55:21:a5:3c:2a:fb:c4:09:54:93:73:
                    18:78:58:59:f6:81:9b:84:10:3e:20:d4:c3:4a:52:
                    c2:2f:92:1a:fc:39:73:79:1e:5b:12:c8:5c:8c:1d:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0C:DB:A1:39:17:DE:DD:FA:77:05:CE:88:6B:2D:B2:C3:DB:72:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/14754284-06b0-3068-b872-231fdf9fbf88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:12:b8:95:fb:be:ed:13:2b:60:bb:ff:67:6f:79:b3:b8:6c:
         af:a9:9d:93:0b:b6:6b:1a:59:7c:67:f0:ac:64:9e:13:37:92:
         49:74:5d:be:9c:d5:63:af:a2:10:48:62:7b:c3:e8:06:47:8a:
         d5:72:57:e7:f5:be:ce:47:73:24:e2:4f:15:cd:3b:ba:d2:2f:
         c7:d1:b0:cb:ab:79:73:3d:40:c3:02:25:34:51:fb:2a:7f:c4:
         18:8d:7f:fb:57:a6:d1:14:7c:b3:5f:d0:49:6f:95:fb:25:44:
         b3:e4:db:fc:ee:bc:c8:9c:39:ef:7f:16:f2:57:91:9f:e2:b6:
         50:99:32:41:13:56:61:36:07:af:84:a7:4a:6c:a6:ac:22:0e:
         73:c0:1f:ec:72:e4:0e:aa:68:d5:09:4c:a0:ac:80:97:d2:6b:
         69:50:02:e7:11:4f:94:66:20:50:87:f7:bc:85:06:50:83:81:
         2e:c4:89:c3:27:49:65:07:2e:2e:fb:08:0c:11:79:40:0b:43:
         ec:15:24:20:74:21:b3:4f:9a:c9:ed:8e:ac:59:f3:96:bb:48:
         5a:18:0e:d6:c9:dc:70:d7:64:64:aa:4d:b2:52:dc:ac:10:7f:
         fd:51:25:43:b5:50:3b:ed:15:8e:e5:81:80:96:1a:77:2c:93:
         3e:4d:45:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5ZA384d8hLGV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
NGZiNDNlNjMtNjMwNi00MWU0LThhNTEtZmYxOTk0YzI1NDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZB/J6IDKNzvpw/EceN+TIdftD9lK3cq5FFW
nU2+MOEAtb1SGrNxO5yK9MMdeSmLgM3ds7mmRRCQKga7KWegCOW8bzRdD6uCb8qi
JXEDTEwx4ugT70jgKRjo0BT0RmHX7XqQPJ+uqi6gUGYilIFMQMBZHHHS7uCQgWUs
roIaKtEXvSHYGUhwciXEo8X0X+H1cX+8qEfI5m6b1/m3+lJKcKqOK8RX5ek/pwW8
8ir4uPyP4KIo57WlpRRP0KIibNX4q1XQTV4nQzCUeRfepvqTtLUkHAYOVSGlPCr7
xAlUk3MYeFhZ9oGbhBA+INTDSlLCL5Ia/DlzeR5bEshcjB1pHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwM26E5F97d+ncFzohrLbLD23JcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTQ3NTQyODQtMDZiMC0z
MDY4LWI4NzItMjMxZmRmOWZiZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkSuJX7vu0TK2C7/2dvebO4bK+pnZMLtmsaWXxn8KxknhM3kkl0Xb6c
1WOvohBIYnvD6AZHitVyV+f1vs5HcyTiTxXNO7rSL8fRsMureXM9QMMCJTRR+yp/
xBiNf/tXptEUfLNf0ElvlfslRLPk2/zuvMicOe9/FvJXkZ/itlCZMkETVmE2B6+E
p0pspqwiDnPAH+xy5A6qaNUJTKCsgJfSa2lQAucRT5RmIFCH97yFBlCDgS7EicMn
SWUHLi77CAwReUALQ+wVJCB0IbNPmsntjqxZ85a7SFoYDtbJ3HDXZGSqTbJS3KwQ
f/1RJUO1UDvtFY7lgYCWGncskz5NRaM=
-----END CERTIFICATE-----
Generated at Sat May 10 21:00:26 2025 by rpki-client