Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa
File:                     52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa (raw, json)
Hash identifier:          tuWTS0WV377l6VLoUfjECXWq0eQFMXq3OIZ/x/T9C1k=
Subject key identifier:   AF:D4:02:95:B4:58:FD:23:F2:7F:A7:3E:C7:42:01:AE:8E:2C:E0:01
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FCEAD41A8A30580D4600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fc:ea:d4:1a:8a:30:58:0d:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=c329f00b-4532-49ed-b59f-4763e5ce0947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:69:75:5d:b5:de:8d:c7:e1:67:a2:bb:fa:
                    e5:21:58:1d:02:1e:ab:62:85:ac:fe:44:46:06:2d:
                    fc:79:56:c3:3f:03:dc:44:f6:c2:fe:17:90:88:ab:
                    93:a4:87:93:1b:1a:b5:d4:2c:b8:ae:35:a8:74:86:
                    c6:0a:bd:31:23:5e:7d:2f:57:d5:33:9c:4e:eb:35:
                    0c:15:03:d8:11:70:42:5e:11:12:b2:df:4a:4c:7b:
                    b7:fc:91:7f:00:c5:50:43:68:c5:32:f7:90:06:56:
                    ce:f7:c0:91:48:6d:6a:82:d4:18:45:42:41:0b:44:
                    c1:9c:8e:6f:29:e7:22:c1:a3:46:98:d4:b0:44:b9:
                    7f:7e:c1:b8:6e:58:08:bf:c9:b3:33:49:62:35:11:
                    15:12:6e:91:cf:b5:d5:9c:46:ea:99:d2:7a:94:ac:
                    71:b1:f8:c3:22:c3:c6:68:ed:da:70:7a:e0:7b:92:
                    a9:73:2c:e2:b6:d6:39:c9:cb:4a:11:43:a5:9d:c4:
                    24:78:1a:ed:df:75:bc:38:e0:4c:2a:b3:9f:1e:be:
                    4d:82:60:6c:66:07:28:c8:2b:8c:60:e7:a8:1e:3d:
                    e8:33:0f:47:33:a4:de:cd:87:83:69:39:10:f7:50:
                    4f:ed:3c:a3:e5:94:f9:eb:37:78:09:d0:59:4c:86:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D4:02:95:B4:58:FD:23:F2:7F:A7:3E:C7:42:01:AE:8E:2C:E0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:cb:b7:1e:41:b2:2b:ab:38:85:40:fb:ff:c9:e8:45:97:
         65:e0:6d:96:92:f3:cf:55:23:b3:e1:4f:61:29:52:07:16:2a:
         84:bb:78:15:98:68:e4:94:e8:d7:83:58:c9:36:d7:7d:db:40:
         d2:ca:3b:a6:b7:2e:e5:02:e0:6b:41:ae:80:e9:18:1d:cd:0e:
         d4:27:36:13:a8:b9:b0:ae:7a:55:93:99:af:6d:2e:8f:71:20:
         3e:a9:b2:80:9d:a6:37:d5:aa:03:38:00:48:4a:44:b8:4e:92:
         a6:fb:01:c2:ed:5c:28:4c:61:33:85:20:a1:53:05:11:78:b0:
         fb:f9:2c:33:1d:1a:a2:38:00:0f:49:b8:56:15:09:aa:45:cf:
         0a:26:e7:20:e2:b8:e3:7e:05:af:46:a4:5c:a8:71:f3:b6:f8:
         3c:d5:c8:44:bf:54:26:10:a0:4c:ff:4b:17:24:b6:95:57:bd:
         be:57:f7:af:40:0d:ff:0e:6d:16:f8:e2:de:01:f3:c9:62:e9:
         ee:32:d2:a5:4d:f5:ba:79:a7:89:60:93:71:e0:2a:61:29:e2:
         6b:ab:36:50:63:39:68:a7:32:77:24:36:ec:af:b4:63:c8:7d:
         e7:e5:73:73:06:48:bc:49:4b:b1:0a:8c:b7:f9:3e:a3:d5:d4:
         81:2a:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:24 2024 by rpki-client on console-fra.rpki-client.org