Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e18f023-11be-3537-8abb-8b37187567b2.roa
File:                     4e18f023-11be-3537-8abb-8b37187567b2.roa (raw, json)
Hash identifier:          Fx4MnE36gW59J57UjpMYiV0gzZRbusBm9JG7b3cjaeg=
Subject key identifier:   8C:95:32:92:99:67:FC:5E:50:60:16:ED:70:1D:5E:B2:0E:2F:BE:D4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC304250CDDB119A2321700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e18f023-11be-3537-8abb-8b37187567b2.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.46.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:04:25:0c:dd:b1:19:a2:32:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=a14f791d-b207-449e-992b-14f630dc69f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:fb:fd:2d:bc:6b:51:f5:b0:a2:1f:e5:1f:
                    51:bf:2c:82:83:62:e3:5b:fe:b0:89:b5:d9:d8:77:
                    c0:07:ed:6b:fd:51:24:7f:1a:a2:58:33:ad:aa:e2:
                    25:a2:8c:69:d2:35:ff:ed:ca:ca:5e:44:92:03:66:
                    b9:85:fb:6d:8d:78:47:1f:a6:63:fe:91:96:d1:76:
                    1d:7a:d0:c3:f9:c6:e9:d7:23:2f:ff:2e:38:d6:0c:
                    bd:f7:9b:27:5b:8c:b4:2b:b6:fa:40:26:0a:7a:ce:
                    f5:d8:fb:a2:03:5a:b3:1a:40:0b:28:a9:ea:6a:cf:
                    33:76:62:16:9b:5a:ce:bd:89:a2:c5:24:c3:de:a2:
                    00:45:97:0c:7c:d8:3f:4b:8d:35:be:cb:eb:d7:fe:
                    80:cb:c8:db:2c:96:4d:25:39:59:5b:02:b6:85:41:
                    15:75:b6:a7:00:c6:90:af:c9:68:54:dc:22:9c:fe:
                    bf:9d:81:79:47:7d:3e:75:b4:80:e6:34:e4:0a:c9:
                    51:00:1c:99:59:74:0a:37:03:88:e2:fc:a2:9d:15:
                    9a:3c:1d:ab:b6:c9:aa:2e:f4:96:5f:22:e0:5c:42:
                    e7:67:22:59:48:7a:4d:c7:b2:3d:4a:af:92:54:a4:
                    fb:f1:d2:d0:f2:81:81:5a:32:54:e3:4a:33:a5:ca:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:32:92:99:67:FC:5E:50:60:16:ED:70:1D:5E:B2:0E:2F:BE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e18f023-11be-3537-8abb-8b37187567b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:dd:bc:5d:78:fa:9a:f7:be:9f:00:17:25:36:a3:d2:c2:
         bd:20:bf:a9:49:a6:dc:42:7d:13:09:dd:1e:de:78:7c:d8:fa:
         73:ad:85:12:b4:55:0a:83:05:f2:40:9b:4b:09:64:fc:0b:9e:
         2b:29:e7:de:76:db:08:b0:d4:b8:e2:f3:c6:7b:6d:aa:96:66:
         84:9f:75:ef:bf:95:13:e5:46:91:08:d8:2a:be:8a:3f:c9:ce:
         86:6e:43:f8:99:a1:3e:19:32:25:4b:59:ee:8f:25:68:ac:1c:
         8c:fc:ba:f3:ad:b5:a1:41:0a:3d:6a:82:9e:65:83:bc:99:ab:
         d9:6d:6d:9f:16:20:a0:98:d1:66:a8:61:4a:6c:a4:ed:b2:aa:
         9e:15:3c:5f:24:8c:78:ef:d7:4b:6f:0c:9a:c7:4b:29:60:28:
         c9:79:21:31:43:2a:62:17:ed:2e:7f:fb:a7:6f:84:0e:cc:92:
         e7:81:50:c8:0f:3f:58:1c:41:66:95:02:0e:00:02:be:1d:be:
         21:83:45:fd:29:0f:c7:c4:4f:bb:05:b6:ce:46:14:71:89:ff:
         be:2a:64:53:b5:d7:cd:e2:cc:ca:8e:d3:49:6e:09:5f:26:85:
         69:01:ad:e9:62:9a:29:e0:87:62:de:30:9f:cc:29:f2:d4:5b:
         18:62:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:44 2024 by rpki-client on console-ams.rpki-client.org