Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa
File:                     6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa (raw, json)
Hash identifier:          6ys61yNssoxiwq8WCYbIt8sfb8wKjf+CtCsDwNvFusQ=
Subject key identifier:   7D:E1:76:46:CC:B1:D4:9F:83:4F:F0:BB:8D:49:75:EF:88:48:4B:EE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DCFE564B5
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa
Signing time:             Tue 15 Oct 2019 14:49:40 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        207.71.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:cf:e5:64:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=47d9e7e0-010a-42e3-a02f-e42b6bc27732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:6c:17:a5:f6:8b:98:73:20:5a:7a:27:3d:
                    3d:10:b7:d0:31:30:62:55:19:da:5e:27:62:8a:1f:
                    50:1d:1d:91:ea:7e:7c:25:ab:9f:8e:77:a3:51:dc:
                    cc:4b:3e:d3:f4:b7:0d:b5:88:70:61:0f:96:e0:70:
                    17:2a:47:98:50:c0:25:0f:5b:8c:26:1d:1d:53:68:
                    d1:5d:be:00:a8:47:1b:5e:47:df:76:20:9b:ba:e2:
                    c3:94:60:70:61:e6:5c:97:8a:0f:31:dc:be:4b:0d:
                    d5:e7:f0:d6:31:3d:37:20:ee:5f:d8:e9:b9:b5:d8:
                    12:ef:39:b5:cc:43:83:2f:a0:81:72:09:ea:7f:87:
                    b2:42:d4:de:2a:f5:76:5a:ef:0e:a8:e7:9d:22:3d:
                    94:c7:9e:ed:00:41:3b:a5:c3:5f:6a:5f:d6:90:ca:
                    5b:1c:82:2e:3a:af:4e:32:cd:58:4e:b9:87:e7:ee:
                    7e:35:96:a3:dc:b5:c2:bf:ba:05:e0:d4:83:29:c4:
                    a6:9e:35:35:5c:05:42:9a:7a:10:e1:fe:da:6b:c6:
                    f9:f2:00:f9:6a:95:b6:13:10:a3:71:cb:2e:25:f0:
                    05:42:46:63:ad:ca:ff:63:4c:cb:83:92:5a:f0:9f:
                    c7:e9:65:70:57:a3:60:a2:ab:c4:d9:ce:94:b9:f2:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E1:76:46:CC:B1:D4:9F:83:4F:F0:BB:8D:49:75:EF:88:48:4B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.71.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:33:1b:3b:7a:f9:5a:04:dd:a2:60:dc:59:ac:8b:ef:f5:ee:
         fa:b7:05:55:f0:82:2a:c3:79:75:54:81:43:ec:87:48:01:25:
         6b:f8:b8:46:b0:9d:da:96:7b:be:7d:9d:56:f4:c6:b5:06:41:
         98:6a:08:7b:83:96:26:0a:ea:07:3a:13:7b:ed:d7:67:c4:10:
         71:ee:bc:f2:6d:7e:f4:02:dc:71:86:22:76:f1:00:9c:c3:87:
         0a:b4:c0:3b:0f:92:64:36:90:51:0c:47:6d:af:a9:eb:80:72:
         08:a2:0a:e2:ca:30:1a:cc:12:89:42:76:8d:f8:9c:e2:af:9b:
         f0:55:43:f7:2d:ee:5d:71:73:fc:7f:d1:9a:2b:ef:da:81:23:
         41:74:83:de:46:f0:6d:a3:2a:7d:ae:75:b7:a6:c4:04:9d:0a:
         56:82:94:f5:5d:98:78:b0:19:e5:f4:9b:11:65:86:cf:53:40:
         c4:9a:e0:1a:52:91:bb:4b:b4:bb:2c:56:5b:f0:b6:f5:2a:01:
         62:61:59:c9:90:71:06:7c:78:76:f5:11:30:3f:6c:b6:43:ec:
         e2:d9:fb:57:09:f5:d5:7f:c5:51:27:e9:7e:90:52:ca:71:2c:
         b4:e5:6e:4a:0a:c6:0b:2a:91:71:7a:77:eb:dc:32:a3:38:ac:
         59:b1:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:02 2024 by rpki-client on console-fra.rpki-client.org