Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa
File:                     b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa (raw, json)
Hash identifier:          qG4pFJF2Zru8U8rSD3x/qHbLyd6gAnlMG1lGAtCgEkg=
Subject key identifier:   CE:41:16:D1:BB:0B:23:13:7E:21:45:59:48:C8:94:AC:1D:B1:5D:3B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F70E516EB8AE65391F720
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        72.31.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:70:e5:16:eb:8a:e6:53:91:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=a9adf479-5955-44a1-bf64-1e0e45245c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:f2:43:19:f9:e9:0d:74:45:66:50:57:f4:
                    95:b5:f6:60:54:2c:e9:42:b4:a7:5e:ca:b9:f3:b9:
                    dc:f7:0c:58:ef:c0:0c:56:57:77:e0:dc:51:01:da:
                    ed:fb:c0:e8:d9:d1:9f:2f:b6:24:63:80:d3:b4:a8:
                    47:88:3f:90:65:bc:f1:cf:80:1b:9c:cb:84:5e:6f:
                    c3:00:cb:1f:ad:a9:3a:7b:cd:5e:2f:c2:e0:68:c9:
                    6d:56:2f:9f:5a:a9:58:fe:b6:7b:80:ae:42:1b:85:
                    7b:61:b1:f6:b0:e0:9e:d2:a0:22:8e:b1:1e:83:d3:
                    2e:a9:1b:73:f2:61:6a:e0:78:48:ce:a1:77:2a:7c:
                    c8:56:82:c8:4e:21:21:80:bc:26:32:d7:52:83:47:
                    60:6c:a2:8f:42:5c:95:d4:90:ff:2d:b0:d1:38:35:
                    e0:b6:2f:3a:54:79:bc:0c:8b:5c:5b:b5:20:26:c0:
                    ef:7f:d0:53:e2:28:16:ac:54:dd:79:5e:69:14:ed:
                    08:b3:e0:b7:9c:69:0d:e5:df:4c:d3:37:f5:cc:4a:
                    76:dc:fd:96:9d:3d:a0:2b:2a:03:50:9b:38:a5:d1:
                    68:4d:79:58:5b:86:a1:a3:75:10:19:40:3f:66:f9:
                    e3:88:15:a1:03:c3:8e:8f:8c:d1:aa:e3:62:67:6b:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:41:16:D1:BB:0B:23:13:7E:21:45:59:48:C8:94:AC:1D:B1:5D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c5:42:23:75:c5:62:e0:4f:5b:c2:8c:ca:1f:bb:1f:f9:b5:
         6a:9c:9e:f8:16:e5:2f:03:5b:b5:4d:e9:0f:8e:bc:15:c5:d3:
         fe:94:c1:4c:26:d5:e1:9e:e9:18:ef:6f:f9:d6:01:d4:3b:cc:
         68:76:a5:ef:b7:4b:2c:1b:79:6f:16:f9:bc:8c:8b:4f:e1:4f:
         3c:cc:67:17:1e:66:d9:a4:92:ef:6c:d1:02:64:58:e9:02:1f:
         32:92:84:cd:9d:8d:f1:c6:b7:ad:21:c2:f2:9f:22:e7:da:9b:
         28:ce:f5:ad:79:ef:4c:78:04:71:0c:2a:23:1a:10:b0:b7:1a:
         cc:21:dc:31:d1:5e:39:a8:dd:13:66:59:b4:a4:fa:28:63:cb:
         66:e3:93:00:bc:f9:96:0d:a0:9c:f1:e4:a0:78:f3:06:34:36:
         f8:2f:df:2a:0c:55:53:2e:b9:e1:36:e7:9c:83:9b:62:9b:12:
         4a:af:3e:21:75:b1:45:b0:2a:11:00:99:79:fd:87:b0:a9:bc:
         93:09:f6:de:ff:b9:7f:6f:45:83:ec:95:70:13:52:78:24:61:
         ce:12:ed:c8:c1:96:3d:a6:70:15:64:c0:08:19:53:bb:05:0e:
         ce:32:a8:3c:e3:58:e0:7c:98:dc:f3:6d:bd:05:61:83:e5:3c:
         46:62:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:10:05 2025 by rpki-client