Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/44e2e001-f297-36dc-8332-17caa81272b7.roa
File:                     44e2e001-f297-36dc-8332-17caa81272b7.roa (raw, json)
Hash identifier:          38n2O3HzL2xTs+MiC2Km37UUQ2wD60a/SDSwOFQE45w=
Subject key identifier:   D0:40:55:DF:09:BE:FB:E5:97:DA:77:3D:AB:F7:81:E3:09:AC:4D:5F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321AA95375964A03854B7340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/44e2e001-f297-36dc-8332-17caa81272b7.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        71.43.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:1a:a9:53:75:96:4a:03:85:4b:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=366bace7-6da6-4423-8958-4c0fe7b8d25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:37:ee:33:4f:1a:65:1d:6f:55:c4:c7:87:
                    e5:d0:3b:05:85:2a:32:1f:1b:11:de:1b:50:9b:f6:
                    3c:d8:22:70:77:4c:97:6a:32:69:ac:7d:5a:45:ac:
                    98:05:d3:82:70:3b:fa:9a:a5:f8:8d:ed:60:b2:79:
                    94:33:1c:98:0c:ff:ad:78:4a:9a:0e:c7:aa:23:be:
                    b1:e1:58:c9:cd:46:58:7a:05:a7:5b:f7:2c:59:9e:
                    59:95:b1:d8:46:61:74:0a:a7:94:17:57:e3:73:41:
                    18:04:71:cd:79:1c:0b:f7:8f:6c:e7:48:7c:68:0b:
                    1e:b1:81:6d:0b:d5:15:b4:ac:65:a5:1f:cb:89:e7:
                    eb:e0:cf:c9:f1:86:09:f4:da:7d:f3:39:0d:68:c2:
                    ac:fe:5b:28:62:40:f4:97:02:72:72:d8:42:f3:5b:
                    14:e2:e3:01:82:c3:49:a0:f8:bf:ee:f0:94:c7:3e:
                    1b:ca:9a:4f:9d:32:03:5a:c4:80:31:8c:4d:f9:ba:
                    9e:40:5b:e2:06:eb:64:59:e1:f9:b2:92:19:0e:b6:
                    fa:c6:52:19:09:93:d6:40:c8:b4:15:f3:ea:6d:ac:
                    f6:c7:fe:28:9b:fb:eb:24:3a:4d:18:0a:5f:2a:df:
                    42:00:ad:d9:cc:e5:70:63:25:30:3f:ab:74:1a:48:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:55:DF:09:BE:FB:E5:97:DA:77:3D:AB:F7:81:E3:09:AC:4D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/44e2e001-f297-36dc-8332-17caa81272b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:12:44:69:1e:e2:70:c7:c3:e1:f2:84:aa:18:5a:3f:af:49:
         e2:9f:78:d7:ed:5a:26:01:b8:ca:14:90:48:bc:03:9e:e3:72:
         85:24:14:06:89:bd:44:31:95:0b:81:a9:24:06:51:e8:be:9f:
         0f:31:43:f5:eb:e2:fd:e8:df:4d:24:aa:be:8f:43:af:7b:36:
         bd:25:11:8b:62:c8:d4:5f:3a:f0:bc:c3:5c:23:f7:2a:6d:bb:
         c6:19:ac:8b:89:0c:59:39:a7:df:8e:b2:3f:5c:d4:82:d4:6c:
         a1:55:ed:91:e3:32:91:6f:7e:2f:95:6a:b4:77:bf:01:35:b1:
         55:65:0a:39:c0:84:e4:aa:cc:75:7c:02:57:c5:b4:fb:93:a8:
         8b:03:86:f5:83:34:f3:38:85:06:4d:73:24:91:b2:59:71:70:
         3a:41:ad:c4:ea:ed:0b:3d:65:f6:4e:df:e4:50:f1:39:f4:d7:
         ee:06:b4:5c:a9:16:70:cd:77:e1:d9:dd:e5:49:a7:ae:ee:3b:
         ee:0c:51:d3:14:bb:d0:e8:54:de:bb:83:df:c0:78:35:10:e7:
         ec:2d:8c:4c:12:0d:e0:dc:4c:f0:70:db:cd:4d:98:88:8e:0a:
         6d:ad:11:63:18:75:66:39:d2:df:78:5c:91:88:dc:fa:2a:75:
         3e:3c:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:25 2024 by rpki-client on console-fra.rpki-client.org