Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
File:                     495cb66f-12f2-3497-84f1-a6fdf007b729.roa (raw, json)
Hash identifier:          Y+nSTyRjt24EWa6KIFnNfA3B+duz6NaanIQDvM1A9H4=
Subject key identifier:   62:83:1F:C0:0D:7D:B4:6B:C8:52:32:BB:D1:BA:7D:70:3C:E5:C7:B2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC303EE470ABBDBDE398F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.44.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:03:ee:47:0a:bb:db:de:39:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=e2290317-2b5b-4619-8b08-1197f476ce98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:9a:68:fc:bb:b7:f9:a0:94:a9:35:6c:e9:
                    cd:83:1b:82:cd:08:89:09:62:cb:28:7c:ca:5e:5e:
                    40:97:6f:5e:09:95:ee:67:35:73:cb:0a:7a:3f:07:
                    89:b0:39:4e:de:64:3d:b3:f8:54:9c:6a:cb:43:1b:
                    7e:34:7d:50:21:08:7d:5b:f3:0f:3d:71:c1:2e:c7:
                    97:d1:46:96:48:41:47:70:9a:9e:85:6f:2a:cf:36:
                    65:b1:be:9c:e1:72:97:f7:24:63:f0:74:73:6b:0d:
                    b6:20:94:a5:44:b3:00:98:1e:8d:f6:4b:a4:64:a8:
                    9e:75:70:d4:89:8c:42:a1:02:63:82:03:47:a5:1a:
                    ad:c0:b9:6b:f8:0c:92:71:03:c4:eb:cb:2a:bd:11:
                    5f:06:2d:cd:1b:e1:34:c8:1a:08:a8:47:a1:c1:92:
                    cc:d5:fe:d7:4d:9b:04:9d:de:88:29:35:ff:91:db:
                    bb:bd:be:88:be:a1:5e:1c:1e:a5:b2:b8:df:f8:53:
                    8b:31:74:a9:dd:4e:1b:83:05:00:10:cb:59:37:8f:
                    79:e7:63:42:e5:5d:ab:17:70:ab:87:91:f8:26:2b:
                    90:56:22:a6:8f:fd:0f:be:40:07:29:96:ca:58:09:
                    19:27:c7:4c:45:15:2e:91:79:7a:22:43:00:92:0a:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:83:1F:C0:0D:7D:B4:6B:C8:52:32:BB:D1:BA:7D:70:3C:E5:C7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:64:9d:97:c5:93:d4:d7:4e:84:6a:05:57:c9:2d:45:fc:39:
         da:91:79:52:88:30:98:bb:1e:4e:2e:2b:35:36:d7:f8:7d:ae:
         4b:3d:8f:88:c6:64:7d:42:d2:eb:ec:03:22:ed:a8:18:e4:e2:
         b6:93:73:6a:38:5c:19:e5:a7:d2:f4:b1:e4:a7:4e:b6:7c:0a:
         40:0d:ac:e8:0b:86:43:b7:71:4a:9b:fa:f8:ab:f0:88:e2:87:
         f2:19:ba:f9:24:52:40:4b:6e:8c:78:e6:78:e4:7d:ce:9d:83:
         f1:e7:a5:f2:c2:4c:03:bc:56:bf:f2:64:04:09:bf:55:17:9b:
         69:6c:e6:12:c5:0f:83:a8:80:e0:99:61:8d:18:c0:38:11:ac:
         05:b4:82:8a:2a:79:f2:1b:37:86:c6:72:95:25:79:01:7a:e2:
         92:71:99:25:bf:b3:60:a1:a9:66:6b:da:38:7f:a5:7a:0d:49:
         40:df:f6:bc:1c:3e:99:65:39:7e:8c:90:e2:7d:c8:54:74:4a:
         68:53:04:51:bd:3c:79:a4:a0:6f:ab:09:44:80:0f:b8:46:6d:
         c3:15:52:6e:d5:90:69:cc:7a:59:44:2a:c1:92:1a:09:cb:46:
         30:a4:5c:ba:3b:8e:4a:4b:fa:93:55:f4:d9:25:6d:51:25:69:
         a4:85:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:04:27 2024 by rpki-client on console-ams.rpki-client.org