Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
File:                     ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa (raw, json)
Hash identifier:          zZI3IibIg5LnXoEmnm/+YMVAe5kVmGaVc+d0MPG78Ps=
Subject key identifier:   C8:57:F1:B9:60:17:1D:91:5B:14:DC:40:EF:47:E7:BA:09:85:9D:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F978F54CA514BB682CF00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.31.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:97:8f:54:ca:51:4b:b6:82:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=21289176-f024-47e5-918f-da0493e03e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:86:e3:0b:a1:20:18:b5:83:0f:ed:25:a0:
                    57:e7:a1:be:32:f7:29:d4:83:34:dd:e0:74:1c:a4:
                    3c:72:0a:7e:e7:f2:86:01:a0:8a:e3:90:9f:90:c2:
                    d4:0b:eb:2a:47:9b:e0:b2:78:c2:79:99:bd:6c:7c:
                    6e:68:58:32:14:1d:46:d0:f4:86:01:ab:31:62:2f:
                    99:5f:09:0d:0e:e8:8d:52:54:c3:59:ee:3f:12:4e:
                    92:5f:33:62:16:83:d2:07:99:40:f8:2c:f2:61:b0:
                    5b:cf:9c:04:a3:9a:0a:70:ba:25:04:5f:3c:43:98:
                    d9:b4:fa:49:0a:c0:8b:ee:2b:41:55:c3:d1:78:b3:
                    d1:a6:1b:a3:c2:74:29:62:0d:81:74:54:be:00:93:
                    46:7b:9f:ca:94:db:b1:45:70:32:8b:f4:83:20:a0:
                    1f:6a:37:94:4a:5f:95:a0:ff:2c:c4:c7:ad:c2:a3:
                    10:80:82:3b:f8:82:81:8c:9b:c6:e1:e5:6b:44:7f:
                    1b:da:d0:c9:c0:97:14:b9:80:f5:fe:17:7a:27:ba:
                    d6:cb:03:06:87:25:e8:c1:b0:56:5a:dd:16:30:8d:
                    2b:77:54:1a:ec:6a:b9:90:6a:81:0b:01:56:03:37:
                    38:c7:68:bb:87:da:44:c0:9a:bc:0a:06:89:04:04:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:F1:B9:60:17:1D:91:5B:14:DC:40:EF:47:E7:BA:09:85:9D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac5ed7f3-5de1-3600-9ec0-e8ec11af816a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:44:67:6f:67:74:f5:22:ab:f6:38:e6:f1:44:a6:18:37:
         78:5f:eb:d8:5d:84:f6:bb:f5:3f:7e:fc:af:3b:67:3d:92:89:
         b8:9e:a5:11:da:00:6f:88:ac:57:7d:cc:f4:9c:e3:4f:32:e1:
         55:12:c5:15:7a:61:0b:6d:56:97:b9:dd:09:18:64:40:10:3a:
         3b:26:ac:38:9b:43:a0:c9:12:81:90:f4:de:f6:a1:de:09:6f:
         08:18:a2:49:5c:d2:ad:da:44:56:fd:03:72:05:24:46:c1:05:
         9a:cc:26:a4:0e:d7:e6:e9:74:ab:5f:d1:22:d5:83:91:ee:55:
         d9:0d:79:39:34:32:31:58:3c:7e:77:6c:f6:61:81:3e:98:84:
         0e:83:b9:62:f8:c4:5b:47:52:4d:14:65:53:8b:f4:4a:24:eb:
         e1:4b:a4:5c:ab:bc:82:93:17:2e:0f:d7:29:7c:c4:15:fc:fa:
         d6:36:30:95:36:9d:47:8e:90:ee:ae:3d:68:59:91:c8:d3:81:
         94:2a:9f:ea:fc:d2:57:49:28:21:f6:ac:41:a4:44:4b:63:ac:
         8e:4f:36:89:7c:a4:e2:a4:ff:96:b8:fc:92:f3:10:3a:d1:96:
         ba:b9:35:5b:d7:95:0f:b7:84:c1:22:ff:fb:7a:c0:78:44:9f:
         07:fd:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:37:40 2025 by rpki-client