Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa
File:                     0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa (raw, json)
Hash identifier:          KmlDfSbD4JMc6m8byXJXp3PzDdEekNB0aCDEx+RVMaU=
Subject key identifier:   7B:FE:31:4D:50:43:CD:5D:63:58:13:5D:B5:32:CA:AE:1B:9C:C4:52
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30568214FD227F9906FC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.46.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:05:68:21:4f:d2:27:f9:90:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=dda4f54d-7079-4cb5-b526-fb694d1401d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:19:4a:88:d3:c7:cc:26:0e:4c:6b:e9:f0:
                    7f:fc:0f:d1:6c:df:e8:3f:3f:b8:6b:d4:86:93:ce:
                    c3:c6:6f:b0:54:a0:79:24:4d:09:48:f4:d3:08:9b:
                    b7:08:e6:62:d9:26:62:c0:1e:53:ff:b2:0e:1d:db:
                    74:34:68:38:79:77:58:10:90:b1:65:57:a2:ec:3d:
                    5f:9f:90:51:7d:d9:5c:44:20:9c:85:95:75:7a:a6:
                    30:f6:b4:f7:cc:05:88:3b:16:7d:9b:75:b2:99:c6:
                    fd:97:0b:b4:8e:f8:43:06:fc:45:78:19:5b:00:40:
                    a0:5b:f4:1c:90:fa:5c:4c:08:3f:0e:8e:79:48:4e:
                    db:c6:79:53:9b:07:b0:35:d9:5b:45:14:a7:51:36:
                    91:51:1d:f6:41:96:4d:8f:2e:76:ff:51:6b:c4:a5:
                    ec:b5:51:d0:e0:78:ce:d4:07:27:9c:3c:2f:09:19:
                    68:ff:27:a7:cd:24:b6:38:ad:b0:94:58:94:a5:cd:
                    24:fc:14:29:36:89:d9:75:f8:c7:5f:3e:64:1d:ba:
                    f6:03:0a:fe:db:cc:1d:ba:55:8a:38:af:6f:45:15:
                    85:f1:49:81:12:77:79:88:51:e8:54:6d:28:ba:a4:
                    8d:86:56:63:e4:b0:53:05:2b:0d:3d:5a:16:ef:a4:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:31:4D:50:43:CD:5D:63:58:13:5D:B5:32:CA:AE:1B:9C:C4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:72:3c:85:69:a4:5f:e7:97:4f:fa:81:7c:24:f1:35:a7:0d:
         88:7e:9f:df:5e:40:b1:0c:04:e6:51:85:a8:03:48:0b:db:a7:
         51:8e:6a:24:6d:b1:e5:26:6e:15:3e:8e:1d:12:81:52:01:a8:
         f7:0a:96:4c:c9:3a:1a:e8:2b:8c:da:38:8e:f9:7f:b0:f7:b2:
         73:0b:3a:fe:ba:69:35:3c:e4:32:ce:70:44:15:61:24:20:7e:
         44:3b:6d:9a:bf:86:60:c1:ed:16:d8:d0:00:35:92:6d:26:f4:
         91:60:97:99:06:25:53:7d:72:81:dd:68:c6:26:1b:3e:09:45:
         e0:a8:37:fe:f7:cb:20:a4:96:c3:00:7f:26:c4:c9:40:23:10:
         79:da:0c:16:8d:6f:f1:01:b6:ad:7a:04:8a:7a:3a:dd:9e:2a:
         76:6d:6a:34:5a:e8:3f:dc:01:90:b8:51:57:84:58:e4:ae:36:
         f9:d7:7b:41:97:66:2a:1e:dd:0d:94:76:50:0f:17:11:85:bc:
         a6:90:a7:a7:ab:68:70:d3:55:39:09:0f:cc:52:c0:bb:b9:a4:
         66:2d:f2:81:5c:a6:e1:85:5c:ee:ae:04:65:2f:0e:8e:1f:1a:
         fd:13:39:ee:7c:e4:5c:6f:0f:cd:49:c5:a4:0b:bc:1f:8a:31:
         1b:c6:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:23:32 2024 by rpki-client on console-ams.rpki-client.org