Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa
File:                     1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa (raw, json)
Hash identifier:          MWyDPqVMzZ/38qnVmjvziK0kLPmsNLDI0mtnTmHK9+g=
Subject key identifier:   77:08:27:C9:58:D6:DA:40:24:B3:A5:5C:5A:F4:83:62:E9:B2:6F:43
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC3188DD5F65D95E6371300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     64283
IP address blocks:        71.44.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:18:8d:d5:f6:5d:95:e6:37:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=56f101b3-341b-43cd-a38b-9907b49c256d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:db:0d:cc:3f:2d:c0:58:22:c4:7f:ef:20:
                    fd:01:cd:9e:d6:73:02:db:4f:65:d0:fd:67:d6:42:
                    a3:3f:6d:d8:44:31:40:26:2f:c3:c1:13:fb:9a:fc:
                    8d:1a:36:99:c8:b5:f6:ec:6f:d4:42:b6:b4:64:69:
                    22:a6:ad:9d:ed:36:53:08:b5:36:2c:77:13:16:28:
                    f3:7b:b2:56:31:55:42:fd:48:ba:e7:2c:0e:bc:4b:
                    98:ee:f2:6a:99:a9:30:36:fc:9e:cb:ad:41:0b:36:
                    68:4d:f1:0f:f5:1c:f7:c3:a8:04:df:6a:dc:87:a5:
                    a6:c6:00:df:51:ca:38:13:4f:20:1c:f9:c6:8b:5a:
                    f3:71:52:dd:d5:cb:6d:23:fc:e9:62:1c:98:bf:84:
                    34:32:f9:b2:59:4b:62:1d:79:bb:9d:42:85:72:de:
                    df:cc:61:e9:67:6c:bc:88:dd:9f:30:4b:c4:c4:6f:
                    3c:3b:5d:24:63:70:44:8a:12:a2:4a:c8:c7:2f:4c:
                    57:2a:cb:82:a3:d6:aa:49:79:ef:b0:7b:cb:e9:4f:
                    57:38:e0:f7:79:fe:b1:1e:f8:2e:97:f9:e0:66:c6:
                    58:9e:3e:6e:0e:2e:88:76:e4:c0:bb:d6:05:46:de:
                    4e:31:5b:57:e9:8f:0e:4f:f0:22:a9:64:da:f1:0e:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:08:27:C9:58:D6:DA:40:24:B3:A5:5C:5A:F4:83:62:E9:B2:6F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d1a1ab4-a606-3bc1-b67b-71a77a9052c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:b3:42:22:ad:34:06:49:bd:f7:e6:63:45:5c:dd:02:37:
         d9:26:d2:4f:4a:68:98:ab:66:51:da:30:3d:2c:24:4a:59:12:
         9c:81:5d:1c:bb:c2:6d:c4:86:31:8b:b8:60:26:a6:01:14:0a:
         79:e5:11:a2:45:3e:10:61:a0:7a:6d:0f:80:50:6e:a6:30:f8:
         22:57:36:26:44:6c:8c:6e:d7:29:8e:bf:32:a4:40:44:98:6a:
         2e:3a:f5:c4:48:56:1c:fc:dc:58:48:95:6b:48:ff:ee:ad:26:
         35:c7:78:3b:5e:de:b0:42:6e:0e:3d:e1:54:cc:f1:40:9b:93:
         d2:2f:c1:1c:65:14:27:f1:0f:ec:e1:d0:53:cc:8f:d6:42:a0:
         14:bc:ec:0d:21:c1:79:d1:8e:8e:57:26:ce:bb:50:40:92:b0:
         81:95:7c:b4:c4:4f:cc:16:b9:ac:a2:a8:65:bb:45:85:4e:e1:
         90:a4:37:d4:78:0a:c9:93:f4:cf:99:ad:ad:fd:11:51:93:9b:
         7f:c0:ff:86:04:b2:fa:30:6e:72:4c:03:05:05:37:a4:89:49:
         85:03:3c:ac:40:eb:97:bc:bf:82:60:05:b0:e9:b1:2c:5f:97:
         69:71:fc:99:d4:43:5a:5d:74:0a:9e:6f:37:41:70:d8:8c:da:
         e4:37:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:44 2024 by rpki-client on console-ams.rpki-client.org