Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa
File:                     0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa (raw, json)
Hash identifier:          pXNS0Hj6mSY8Ux3Y2EbfPbj0cZeL6a8vHtYyyAZy2i4=
Subject key identifier:   E7:43:2A:9B:A1:13:27:6D:05:3F:39:C8:E2:56:DF:2F:B7:F2:2C:9B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E90E7C7C370D0C289960
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.46.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e9:0e:7c:7c:37:0d:0c:28:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=91df00df-cf36-4839-afa1-f2a834456fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:90:7a:2b:58:ab:4b:7b:20:d2:d8:54:a4:
                    91:bc:14:d3:5b:e2:54:dc:be:ea:82:b1:1e:05:e1:
                    41:06:25:87:d2:59:20:48:31:5c:00:a1:32:d5:f5:
                    44:5a:07:f8:c0:33:49:f6:59:e1:44:19:3b:85:ec:
                    3b:16:8c:50:b8:09:68:9d:fc:86:be:0a:bf:6c:75:
                    2b:66:13:0d:9b:87:6f:60:85:42:12:95:99:f5:69:
                    36:41:bf:ff:63:81:b3:05:c8:c8:b7:6e:c0:49:40:
                    d7:97:3f:5c:f1:33:b1:0e:2e:c2:14:8e:81:53:86:
                    6c:af:e9:0c:39:be:86:f9:16:54:e5:ee:75:2f:28:
                    82:3a:8c:51:c1:bf:2a:ba:7f:95:90:e5:59:b6:d9:
                    6b:00:7f:d5:5b:ca:fd:6a:06:d9:cb:62:97:0c:74:
                    45:84:10:74:a4:a3:8d:a6:27:46:f0:e6:0d:c2:48:
                    15:2f:e1:52:ce:2e:30:3b:53:c9:44:9f:43:58:18:
                    42:bf:c9:34:4f:e5:0f:a9:6f:e3:ce:58:30:59:88:
                    3c:af:ca:d7:8c:6b:1f:38:c8:b0:11:ce:c4:89:bd:
                    36:cd:3b:f9:1e:2c:a0:cf:ed:3a:b2:34:3d:8a:0c:
                    f6:ab:2e:84:07:cb:98:7b:2e:19:fe:a3:5a:8a:94:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:43:2A:9B:A1:13:27:6D:05:3F:39:C8:E2:56:DF:2F:B7:F2:2C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be3b9ca-ff99-3665-8941-159a0e82a4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:f2:db:a8:b1:0c:25:00:b3:31:1c:bb:ab:d2:a0:f3:78:
         3a:15:1b:ca:ff:0f:14:71:b9:f1:62:9f:fe:78:e5:04:ba:32:
         a9:c7:67:67:16:d8:cc:65:d0:e5:30:d8:b1:80:b5:3f:ae:de:
         24:48:1c:f8:5e:69:ae:6b:49:e3:05:ea:29:ba:10:c9:91:49:
         b9:a4:ed:7e:96:9d:83:f0:30:e8:ac:be:df:d2:55:be:d0:5e:
         51:7a:da:ac:63:a1:f1:64:1f:18:7a:e2:19:84:3b:e0:62:25:
         fa:0e:0a:82:9f:93:33:79:d1:62:aa:d9:f3:20:92:82:59:69:
         11:b5:72:bc:5b:00:85:fc:bf:6b:87:04:61:d1:e8:0e:84:08:
         27:0c:6a:8d:e3:94:4a:0a:6b:b1:4f:46:e5:14:d6:1f:0a:a4:
         ff:f2:1f:48:ea:21:ff:21:86:36:39:6b:63:94:7f:f9:e1:50:
         36:d4:d5:eb:9a:10:b3:5a:a5:7a:97:64:7d:7a:b2:f0:45:78:
         ea:fd:db:d2:16:b5:28:e9:06:51:86:12:bc:22:68:3b:3d:3b:
         e6:69:c1:3d:7a:09:2f:8a:e7:db:44:03:4c:1f:f5:ed:d4:3d:
         c0:96:1b:d7:f3:a4:14:f0:05:ab:7a:ef:9f:be:bf:9e:99:92:
         d6:27:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:09 2024 by rpki-client on console-fra.rpki-client.org