Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/972b1e10-f6b4-3122-948d-b4b58529815f.roa
File:                     972b1e10-f6b4-3122-948d-b4b58529815f.roa (raw, json)
Hash identifier:          zOxHimXYc5sfNeL5cfXl3sHdXRMZhaxRIwAX57wtt+w=
Subject key identifier:   77:34:B1:2F:EC:EE:8D:36:CB:E9:AD:3F:6C:B2:B0:81:2E:ED:F2:10
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858373D6B8EEEB08E03D2BC11B580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/972b1e10-f6b4-3122-948d-b4b58529815f.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Mon 09 Sep 2030 04:00:00 +0000
asID:                     16787
IP address blocks:        71.46.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:3d:6b:8e:ee:b0:8e:03:d2:bc:11:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Sep  9 04:00:00 2030 GMT
        Subject: CN=2ea125c4-5488-4f82-abf9-7f062d8acf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:7a:cc:8c:c5:bd:74:01:2d:50:ab:5a:d1:
                    fe:78:0e:ef:c1:a5:80:65:10:54:32:0c:68:b9:7e:
                    68:4b:60:22:93:1a:57:c0:28:89:a1:eb:11:fb:06:
                    b5:1a:d1:1f:9d:fc:01:3a:e5:5b:28:42:a1:15:a2:
                    03:e6:3b:ab:42:a2:b5:b5:b2:1f:e3:a2:2f:5c:fa:
                    bd:33:a3:c9:78:ff:b7:a0:15:fa:6c:3b:61:10:1f:
                    aa:23:78:87:75:17:3a:31:9b:f0:e4:c1:5f:9e:d6:
                    8a:95:05:9d:98:bd:a9:18:34:4f:4c:f6:34:e6:85:
                    74:5f:e3:5e:1d:38:73:62:39:21:7f:f3:03:e6:c2:
                    b4:1c:85:6b:53:52:59:95:17:cb:8e:c0:04:1e:ef:
                    54:09:b7:28:10:05:10:d3:02:ff:5e:73:55:7d:a3:
                    3b:44:dd:a2:23:6d:23:c1:47:8d:62:c5:e5:83:23:
                    cc:ff:c9:1d:5e:2f:a2:89:96:c3:38:ca:a0:28:a8:
                    18:37:98:d1:6d:7a:8a:3c:53:dc:b5:49:9a:c6:f2:
                    24:74:0b:0d:75:b9:24:65:a3:35:e8:4c:4e:55:1f:
                    fe:c6:dc:2a:b1:8a:c2:d5:58:92:ab:07:11:8a:fd:
                    4c:23:44:47:9a:c4:cc:55:bc:a5:67:1d:fc:85:9b:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:B1:2F:EC:EE:8D:36:CB:E9:AD:3F:6C:B2:B0:81:2E:ED:F2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/972b1e10-f6b4-3122-948d-b4b58529815f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:78:72:50:dc:8d:6c:5e:31:33:42:61:3c:90:2e:3a:ca:
         f4:6e:1b:85:d6:b5:4e:d4:c7:3f:63:b7:bd:80:34:9c:77:36:
         24:fb:ef:d4:cb:ed:37:5b:45:c5:12:18:95:ff:e2:c3:ee:dd:
         e8:75:42:6f:87:64:1f:fc:4f:35:98:79:39:07:cf:29:c5:f9:
         46:cb:56:1e:34:eb:23:9a:22:07:66:5b:41:eb:72:f0:c6:4e:
         28:48:a6:f8:8a:f4:48:36:92:53:9f:bc:f0:bc:7b:c2:64:e4:
         9e:29:2a:1a:27:50:c6:e3:c3:a8:0a:d3:a1:b9:e8:a2:f9:5a:
         71:22:e4:c5:0d:3f:84:63:4d:e4:4e:f6:3e:97:42:a6:ba:66:
         f5:e5:bd:b3:f9:cd:af:a5:58:df:96:9a:3b:d6:0a:f6:56:10:
         94:1f:b7:cd:e7:4e:b9:c3:24:0a:3b:56:c2:b5:2c:7f:e3:af:
         78:15:35:fa:90:a9:bf:6b:8a:22:de:89:be:ce:7d:aa:f6:b4:
         2f:77:cc:90:21:f8:ab:57:f7:b3:4e:ec:7c:dd:97:d0:79:54:
         31:ef:ef:9d:cb:11:e3:33:d4:bf:3a:a2:86:94:6b:f3:b0:5d:
         80:e5:ed:94:62:41:fd:d9:97:50:21:b6:e6:80:a0:0e:21:15:
         aa:a1:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:01 2024 by rpki-client on console-fra.rpki-client.org