Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2baed75c-eb76-3fc6-968a-334867e0a6d0.roa
File:                     2baed75c-eb76-3fc6-968a-334867e0a6d0.roa (raw, json)
Hash identifier:          2PShviQpHghtfWb6Lqx5QSPQhJnMYOGoF1tyFL6UmZE=
Subject key identifier:   5F:7E:50:5C:C1:4B:07:9F:FF:F3:2B:35:0B:AE:16:D2:82:80:F9:98
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FC564E2D1BB4D0D32E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2baed75c-eb76-3fc6-968a-334867e0a6d0.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fc:56:4e:2d:1b:b4:d0:d3:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=e4942e3a-b651-42de-8f03-7d0528dc33f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:a6:9c:0c:dc:5a:f8:ef:77:d9:06:b8:1c:
                    aa:1b:02:57:ab:bd:51:f2:76:1f:bb:79:52:27:a9:
                    b1:11:c5:3a:f1:13:a3:67:27:09:6e:f8:77:f9:16:
                    ff:3e:4b:cf:a1:1d:f7:14:b8:62:4d:81:01:a1:6a:
                    1e:66:4b:ca:03:51:e7:e1:be:c4:39:20:19:4f:ab:
                    11:e3:25:83:00:b3:e0:e4:a4:55:58:65:4f:c4:70:
                    f2:dd:07:ce:95:46:4f:80:bf:75:60:9e:f7:7a:6b:
                    a2:72:57:cb:23:1b:35:0b:54:7a:0c:d6:67:f6:6c:
                    20:42:d1:a9:31:7d:8a:75:bc:8f:79:64:32:bd:ab:
                    bc:9b:fc:e9:6a:f1:0b:e8:ec:2c:ae:2e:2e:2a:29:
                    58:07:e1:ee:2a:6f:c5:8d:d1:b3:ca:af:8b:d0:06:
                    ea:d7:92:15:e3:49:fa:8b:ac:ff:c8:c8:e1:d6:d1:
                    81:d9:21:c0:e7:c7:ae:4e:f9:78:e5:c3:52:5c:04:
                    2b:fd:1b:d6:72:4e:32:7d:83:25:30:68:ba:36:14:
                    7d:50:28:15:f3:c4:b5:d7:f5:6c:fe:dd:97:d1:45:
                    73:72:aa:e0:6f:a6:0d:4c:af:51:e2:27:ea:1a:23:
                    eb:ce:83:e4:5a:b6:e1:9f:7c:53:90:dc:1f:f8:44:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7E:50:5C:C1:4B:07:9F:FF:F3:2B:35:0B:AE:16:D2:82:80:F9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2baed75c-eb76-3fc6-968a-334867e0a6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:76:ec:1a:d1:bb:49:46:c4:e1:70:0b:db:19:16:9b:20:
         87:20:ae:18:81:e1:61:b9:8a:7d:3b:b9:c0:67:d6:10:3e:13:
         bb:fd:60:47:c1:7f:27:9e:30:a0:39:26:4b:43:47:32:6b:4b:
         eb:39:12:bd:33:fe:3d:e5:75:b1:a5:1b:2d:4a:cd:ff:21:b6:
         7d:1c:94:08:6d:2c:11:7c:12:9d:35:e0:85:75:20:c0:e5:2f:
         4c:62:ab:f2:2a:24:ad:a6:85:7a:07:f5:fa:e2:2e:7c:8b:c8:
         ee:ac:2e:4b:c0:01:5d:20:f4:30:37:9d:ce:92:65:bc:fc:1e:
         4d:05:d9:3a:06:b5:96:0c:7a:4f:8a:2b:02:0e:46:b6:22:17:
         bd:8b:60:f3:f0:d0:4f:4a:82:8f:f5:5f:17:05:09:31:3f:26:
         da:7c:75:6a:2d:79:a4:e7:3f:7a:21:7a:40:72:42:a4:5b:00:
         31:f0:ba:3f:ca:a2:6c:1b:75:67:ac:0c:f7:ba:38:bf:c9:a3:
         af:92:6d:38:16:7f:ee:9c:57:2f:72:ab:66:90:6e:9e:52:9a:
         a0:32:9a:33:6e:48:29:20:b6:54:84:b6:fb:4e:97:84:f9:e7:
         3e:fe:e0:12:93:e5:dd:99:53:51:f4:3b:73:aa:bb:d1:f5:7c:
         94:7f:d7:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1fxWTi0btNDTLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTQ5NDJlM2EtYjY1MS00MmRlLThmMDMtN2QwNTI4ZGMzM2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGimnAzcWvjvd9kGuByqGwJXq71R8nYfu3lS
J6mxEcU68ROjZycJbvh3+Rb/PkvPoR33FLhiTYEBoWoeZkvKA1Hn4b7EOSAZT6sR
4yWDALPg5KRVWGVPxHDy3QfOlUZPgL91YJ73emuiclfLIxs1C1R6DNZn9mwgQtGp
MX2KdbyPeWQyvau8m/zpavEL6Owsri4uKilYB+HuKm/FjdGzyq+L0Abq15IV40n6
i6z/yMjh1tGB2SHA58euTvl45cNSXAQr/RvWck4yfYMlMGi6NhR9UCgV88S11/Vs
/t2X0UVzcqrgb6YNTK9R4ifqGiPrzoPkWrbhn3xTkNwf+EQWXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9+UFzBSwef//MrNQuuFtKCgPmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmJhZWQ3NWMtZWI3Ni0z
ZmM2LTk2OGEtMzM0ODY3ZTBhNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARywIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMOduwa0btJRsThcAvbGRabIIcgrhiB4WG5in07ucBn1hA+E7v9YEfB
fyeeMKA5JktDRzJrS+s5Er0z/j3ldbGlGy1Kzf8htn0clAhtLBF8Ep014IV1IMDl
L0xiq/IqJK2mhXoH9friLnyLyO6sLkvAAV0g9DA3nc6SZbz8Hk0F2ToGtZYMek+K
KwIORrYiF72LYPPw0E9Kgo/1XxcFCTE/Jtp8dWoteaTnP3ohekByQqRbADHwuj/K
omwbdWesDPe6OL/Jo6+SbTgWf+6cVy9yq2aQbp5SmqAymjNuSCkgtlSEtvtOl4T5
5z7+4BKT5d2ZU1H0O3Oqu9H1fJR/1/A=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org