Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/08f751a2-65fd-3c32-9495-9dd3d556bf70.roa
File:                     08f751a2-65fd-3c32-9495-9dd3d556bf70.roa (raw, json)
Hash identifier:          5fHoPYRk65/b2mlmiLpotBisVaFrTAuF2Jrp/4RanhY=
Subject key identifier:   19:B7:37:C7:56:EB:E1:D0:12:76:1B:05:C5:DE:ED:42:38:67:39:9C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD60063DFF4501FA4FEF780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/08f751a2-65fd-3c32-9495-9dd3d556bf70.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.71.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:00:63:df:f4:50:1f:a4:fe:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=0a3de6c0-a956-49d7-ad38-b800589962ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:c2:a4:78:64:c4:96:77:ca:e8:97:75:9a:
                    49:8f:ca:3d:64:6b:06:00:e0:2e:fc:13:45:df:43:
                    ce:37:a0:32:ed:a0:05:0d:dd:61:fc:89:a4:8e:46:
                    e0:aa:cb:57:46:f4:b9:92:cd:e5:5e:5a:e2:71:e8:
                    d1:d7:0b:f7:d7:d5:94:09:1c:8a:29:d5:f6:47:1f:
                    b5:79:be:fd:c9:ad:14:05:c6:a9:c1:ea:3b:9f:63:
                    a2:d7:f9:47:8d:9b:6c:76:ef:b0:e4:70:e9:b7:38:
                    60:88:51:5b:16:e5:18:bb:45:b9:37:34:9b:39:20:
                    2c:3f:09:b7:dd:c5:29:36:92:ca:8c:df:c5:a8:45:
                    13:07:59:80:be:95:0e:6c:ed:03:f0:d3:59:1f:b4:
                    20:68:28:b6:be:c6:4b:dc:2a:e5:ed:11:43:54:ae:
                    ff:4b:6e:a2:a5:03:50:d9:c0:ae:c1:0c:4a:1b:d8:
                    b2:8e:2f:8b:cb:97:eb:68:b3:75:0a:87:12:33:8a:
                    e2:d3:89:8e:60:a6:f1:5d:01:8a:bc:68:77:a5:93:
                    79:83:2e:a9:1a:f8:36:a4:83:98:d7:53:ea:93:a5:
                    01:9e:0c:2b:5a:7b:47:a2:53:74:15:0d:0c:83:60:
                    1a:12:78:a1:72:ad:bb:e1:bf:0c:74:4d:36:21:46:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B7:37:C7:56:EB:E1:D0:12:76:1B:05:C5:DE:ED:42:38:67:39:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/08f751a2-65fd-3c32-9495-9dd3d556bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:dc:00:40:8b:16:a4:98:e9:22:74:61:44:35:b6:cf:87:
         52:a8:7c:9e:d5:66:d6:2f:8f:4a:90:65:a7:d6:28:d4:78:4b:
         be:58:66:62:bd:4c:ee:0e:5d:d3:c5:68:b7:52:9a:7e:f4:c2:
         18:40:11:2d:39:67:68:56:d9:c3:39:d1:b7:37:5b:dd:0a:e7:
         34:45:7b:89:6e:f4:e6:4c:fd:1d:80:f4:f7:a8:6d:78:b1:29:
         d9:23:fd:c9:a8:01:7b:ec:21:6c:3f:51:c6:3b:56:6f:5d:44:
         5a:6e:89:55:b7:66:57:07:1a:34:5a:4c:db:86:47:c1:9d:b9:
         51:61:0f:b7:30:4b:7e:f4:12:72:d4:88:e2:90:6e:4f:6c:b4:
         f1:42:e7:49:f4:64:8b:fb:22:88:83:41:e1:78:26:cf:d9:36:
         78:56:c6:87:c3:f3:f6:9c:29:ce:51:64:3c:d7:c5:2e:2d:49:
         b1:26:90:9c:16:e7:75:12:00:41:bd:f6:0c:92:65:19:b7:7e:
         ad:4c:b2:50:ef:68:b6:d8:44:06:97:85:d6:9e:dc:9d:85:9a:
         a5:c4:e3:4d:fc:2f:5e:72:ce:b9:1d:79:88:0d:33:e6:2b:0f:
         f8:04:8a:23:0f:c1:ec:1f:ba:91:44:a9:dc:21:2a:d9:5e:49:
         83:97:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org