Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2d829334-75d7-3335-8018-11b56e9cec71.roa
File:                     2d829334-75d7-3335-8018-11b56e9cec71.roa (raw, json)
Hash identifier:          qAsVei9YAoXInkXo3tXDnofj8MG657UcW/gA5G1yLDM=
Subject key identifier:   2B:2F:A9:D1:5B:B2:86:C5:6E:70:75:C5:6F:81:AC:FE:F7:97:7F:8C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE2D9C76FBFF1050781D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2d829334-75d7-3335-8018-11b56e9cec71.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        97.71.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:2d:9c:76:fb:ff:10:50:78:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=9c0db2c9-405f-4f1f-a829-c03d0cbaf940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:c0:ca:dd:1d:02:25:e4:41:eb:b8:30:4a:
                    31:4e:7d:2d:60:b0:63:4b:aa:07:30:59:1d:77:10:
                    9f:c2:92:9a:85:0b:cf:4b:52:d2:c8:7a:02:85:33:
                    fd:2c:35:e9:d4:6e:4a:e5:45:de:40:25:b5:4c:e8:
                    90:c7:e6:75:3a:f2:fc:ad:62:e9:40:ed:e9:17:fd:
                    91:f9:e9:23:4d:52:c0:ac:80:2f:8f:c9:4c:64:6c:
                    45:57:1a:04:b8:4d:4a:32:a9:68:5d:ce:2f:1f:1d:
                    fd:38:04:fd:de:83:fd:f0:78:4a:9f:e4:e4:1c:ac:
                    48:10:4c:76:8c:16:6f:4f:3f:34:dd:0a:40:60:dc:
                    62:a5:60:af:8e:63:fb:74:11:04:af:6a:b1:90:3c:
                    37:42:d7:ab:06:c9:49:fc:e5:bb:1d:79:cf:c5:3e:
                    6d:ce:6a:2a:7a:3d:76:36:a2:c5:4b:b8:8b:03:03:
                    08:e9:8a:9d:9b:0a:62:0e:76:b4:6c:71:82:e4:41:
                    8b:15:c9:a2:4d:95:1b:41:fe:7e:1b:2c:7f:a6:12:
                    08:ca:24:c6:fb:56:06:62:50:31:a3:61:1e:be:5b:
                    6d:4b:7d:9f:21:c7:da:2f:30:07:c4:38:1a:ef:3c:
                    c1:01:13:78:9a:d4:20:06:c7:12:fb:41:ef:c9:2c:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2F:A9:D1:5B:B2:86:C5:6E:70:75:C5:6F:81:AC:FE:F7:97:7F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2d829334-75d7-3335-8018-11b56e9cec71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:38:3b:f3:00:8b:f7:46:37:81:d9:60:2e:cd:32:09:ea:31:
         7b:06:0e:d1:f2:37:fb:60:ba:d1:c8:61:29:6d:34:d4:4f:9d:
         55:49:73:1d:67:6a:96:b8:56:f5:66:fb:3b:c0:8c:14:9d:66:
         a9:f0:09:d7:ff:98:de:12:d9:39:a2:90:10:0d:23:6e:54:78:
         67:5f:0b:ec:40:db:94:a0:d9:7f:9a:b0:32:37:4e:17:c9:53:
         09:59:d5:50:bf:6f:9c:ec:b4:81:c9:81:2c:43:08:b5:01:1e:
         91:bb:54:91:31:13:04:d8:47:90:6a:b7:e4:5f:71:da:46:4d:
         ec:f0:27:e0:f0:90:9a:54:f2:a0:38:3e:a7:df:6a:7d:04:be:
         c4:b0:d8:5d:2a:3c:ea:71:9a:19:a3:bc:22:72:4f:09:d9:47:
         9c:2a:6a:84:0b:01:af:84:d3:06:26:12:9a:1a:ef:c5:13:98:
         a4:4b:53:f9:8a:16:c7:45:fd:26:97:6a:73:da:41:c6:ec:07:
         13:8c:6f:b3:d4:b1:3f:cc:b3:73:82:fe:e2:36:70:d9:5f:5e:
         3a:f0:25:d0:7a:eb:d4:aa:66:3f:32:c5:43:ea:65:fe:b5:f9:
         38:b6:52:f8:26:b7:8b:b7:f6:3c:cf:ca:1e:9e:22:6e:02:5f:
         09:7a:d4:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDj/zi2cdvv/EFB4HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDIxOTA1MDAwMFoXDTI3MDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
OWMwZGIyYzktNDA1Zi00ZjFmLWE4MjktYzAzZDBjYmFmOTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkijAyt0dAiXkQeu4MEoxTn0tYLBjS6oHMFkd
dxCfwpKahQvPS1LSyHoChTP9LDXp1G5K5UXeQCW1TOiQx+Z1OvL8rWLpQO3pF/2R
+ekjTVLArIAvj8lMZGxFVxoEuE1KMqloXc4vHx39OAT93oP98HhKn+TkHKxIEEx2
jBZvTz803QpAYNxipWCvjmP7dBEEr2qxkDw3QterBslJ/OW7HXnPxT5tzmoqej12
NqLFS7iLAwMI6YqdmwpiDna0bHGC5EGLFcmiTZUbQf5+Gyx/phIIyiTG+1YGYlAx
o2EevlttS32fIcfaLzAHxDga7zzBARN4mtQgBscS+0HvySxkBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCsvqdFbsobFbnB1xW+BrP73l3+MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmQ4MjkzMzQtNzVkNy0z
MzM1LTgwMTgtMTFiNTZlOWNlYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYUd4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg4O/MAi/dGN4HZYC7NMgnqMXsGDtHyN/tgutHIYSltNNRPnVVJcx1n
apa4VvVm+zvAjBSdZqnwCdf/mN4S2TmikBANI25UeGdfC+xA25Sg2X+asDI3ThfJ
UwlZ1VC/b5zstIHJgSxDCLUBHpG7VJExEwTYR5Bqt+RfcdpGTezwJ+DwkJpU8qA4
Pqffan0EvsSw2F0qPOpxmhmjvCJyTwnZR5wqaoQLAa+E0wYmEpoa78UTmKRLU/mK
FsdF/SaXanPaQcbsBxOMb7PUsT/Ms3OC/uI2cNlfXjrwJdB669SqZj8yxUPqZf61
+Ti2Uvgmt4u39jzPyh6eIm4CXwl61CI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:07 2024 by rpki-client on console-ams.rpki-client.org