Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
File:                     8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa (raw, json)
Hash identifier:          Sw3toYC0tCICr7lidDpduJsbP7u5QUIvVMRcNjqRMbI=
Subject key identifier:   E7:53:7C:56:89:7F:CA:86:7C:DF:D6:04:A4:FD:F6:E0:85:86:4C:EF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F94FCAE9B11488D495500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.31.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:94:fc:ae:9b:11:48:8d:49:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=38eeee08-d8e0-4282-9e18-9ff262e8c597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:b6:90:e4:f4:a2:c9:ea:ab:d6:b5:b2:a1:
                    2b:7d:e6:42:3d:4b:5b:cd:87:0b:03:d0:84:da:2f:
                    c9:3a:02:f1:a4:4b:aa:2e:27:3b:45:38:8a:14:4c:
                    9c:ea:7d:44:02:78:19:92:4b:3f:ad:65:a6:ab:80:
                    27:76:a2:79:a0:3c:88:88:e3:41:c6:f5:3d:eb:95:
                    71:e2:41:68:d6:a1:b3:87:0c:db:65:98:c2:61:4c:
                    7d:7f:69:67:3e:d1:d6:6b:b0:f6:06:d0:f8:ec:22:
                    c2:93:99:fb:86:da:55:7d:f4:e9:27:9c:22:2b:bc:
                    3d:9b:34:08:57:2a:bd:f3:be:dc:84:19:24:3f:c0:
                    98:ce:34:3d:1b:2e:7f:b5:17:c9:db:1e:7c:bc:bd:
                    78:ac:7d:b8:92:83:ae:54:0d:bb:26:34:f4:9f:6f:
                    ca:5d:61:dc:e2:4c:df:72:4d:26:e7:17:a4:54:e7:
                    15:b0:b8:15:00:bb:0c:68:76:15:bf:35:8a:a9:9e:
                    6b:e1:6b:0e:63:b9:1f:3b:90:db:75:ca:dd:53:db:
                    0d:5d:99:56:cb:a8:ba:2d:e1:fa:86:c8:15:cd:64:
                    46:b5:32:8e:77:8c:e0:5d:ea:27:1c:2f:22:11:e9:
                    23:24:35:98:47:90:52:7b:99:86:c9:89:a6:36:9b:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:7C:56:89:7F:CA:86:7C:DF:D6:04:A4:FD:F6:E0:85:86:4C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8d1639cf-dfcb-37a4-ae19-752a2e7240f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:84:f8:92:40:ca:97:a3:65:12:a8:2f:7c:3a:29:0a:5b:6e:
         61:3f:a1:a1:ba:ee:04:93:1b:24:f0:3f:a6:fe:41:cd:6d:79:
         f4:f1:25:6a:39:64:55:92:4f:80:34:9a:59:71:9c:b9:f7:04:
         f2:1c:0c:02:5d:a5:0d:41:11:e3:53:66:f9:c4:04:f5:3b:9a:
         1d:f7:c8:a3:0a:22:f6:a7:f4:90:3c:47:e5:9d:7d:dc:72:57:
         41:d6:03:0b:56:d2:5b:88:7d:7d:1a:d9:c1:8d:0f:90:6f:51:
         b8:a2:a4:68:85:d1:70:01:48:78:99:24:21:10:1a:83:85:50:
         c6:6e:e3:c8:4c:bf:a0:b1:47:4f:56:fb:05:49:16:ae:b1:97:
         80:df:04:25:6b:99:a1:e7:f0:f1:09:ba:0a:e9:79:68:f0:b5:
         f5:66:cf:bb:38:60:f3:7f:fe:46:da:d6:cc:88:59:a3:85:21:
         8e:36:83:ad:16:5a:a3:d1:3d:63:95:b1:66:d1:ab:f1:7e:be:
         90:a0:99:4d:ba:08:41:c8:3c:1b:25:43:69:c7:bc:f5:25:66:
         44:cb:83:03:30:a8:f1:3b:98:be:b0:2d:0c:44:ad:7d:ee:d7:
         9d:6d:d3:5d:f4:b6:34:b1:1e:13:92:b2:50:53:09:ec:2b:b2:
         84:7c:95:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5T8rpsRSI1JVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MzhlZWVlMDgtZDhlMC00MjgyLTllMTgtOWZmMjYyZThjNTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJC2kOT0osnqq9a1sqErfeZCPUtbzYcLA9CE
2i/JOgLxpEuqLic7RTiKFEyc6n1EAngZkks/rWWmq4AndqJ5oDyIiONBxvU965Vx
4kFo1qGzhwzbZZjCYUx9f2lnPtHWa7D2BtD47CLCk5n7htpVffTpJ5wiK7w9mzQI
Vyq9877chBkkP8CYzjQ9Gy5/tRfJ2x58vL14rH24koOuVA27JjT0n2/KXWHc4kzf
ck0m5xekVOcVsLgVALsMaHYVvzWKqZ5r4WsOY7kfO5DbdcrdU9sNXZlWy6i6LeH6
hsgVzWRGtTKOd4zgXeonHC8iEekjJDWYR5BSe5mGyYmmNptYBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdTfFaJf8qGfN/WBKT99uCFhkzvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGQxNjM5Y2YtZGZjYi0z
N2E0LWFlMTktNzUyYTJlNzI0MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWE+JJAypejZRKoL3w6KQpbbmE/oaG67gSTGyTwP6b+Qc1tefTxJWo5
ZFWST4A0mllxnLn3BPIcDAJdpQ1BEeNTZvnEBPU7mh33yKMKIvan9JA8R+Wdfdxy
V0HWAwtW0luIfX0a2cGND5BvUbiipGiF0XABSHiZJCEQGoOFUMZu48hMv6CxR09W
+wVJFq6xl4DfBCVrmaHn8PEJugrpeWjwtfVmz7s4YPN//kba1syIWaOFIY42g60W
WqPRPWOVsWbRq/F+vpCgmU26CEHIPBslQ2nHvPUlZkTLgwMwqPE7mL6wLQxErX3u
151t0130tjSxHhOSslBTCewrsoR8lU4=
-----END CERTIFICATE-----
Generated at Mon May 5 19:53:12 2025 by rpki-client