Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/74442655-d5d9-326e-9fff-71ba9b8ecda6.roa
File:                     74442655-d5d9-326e-9fff-71ba9b8ecda6.roa (raw, json)
Hash identifier:          njo8YH4PDscSD5gMTWB7vATcLakWFZyL3VSu7E74cjY=
Subject key identifier:   5B:DF:90:CC:53:72:E9:19:57:C9:AE:D1:AB:97:BA:E7:D2:88:95:DA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FC153BA12DB2D5BCD040
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/74442655-d5d9-326e-9fff-71ba9b8ecda6.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fc:15:3b:a1:2d:b2:d5:bc:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=94e6e36e-e666-43f8-a7ca-28a270707ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:f5:2f:95:eb:90:9c:63:82:8b:55:8e:0a:
                    39:ad:ce:12:00:37:50:43:bb:dd:e2:2d:56:46:67:
                    85:54:8e:3a:90:aa:10:e0:8f:54:79:fb:71:f0:34:
                    1f:03:77:fe:cb:44:1f:f3:7d:2e:ee:44:bc:37:bb:
                    53:ee:73:5d:7d:3c:d8:9d:42:07:f9:d8:60:0c:18:
                    5e:aa:fa:75:ff:98:37:5b:06:0d:17:4e:10:f0:df:
                    c6:69:e3:ad:8f:22:64:f8:2c:b4:fd:3e:d2:e7:0f:
                    ae:40:0a:e2:03:f4:cf:b9:51:e0:c8:49:a9:45:b2:
                    54:45:4b:df:ac:17:9b:de:c0:a0:79:f0:29:50:32:
                    44:79:7b:de:a1:a7:52:4e:00:61:f1:34:25:ac:5a:
                    19:3e:1a:be:5d:37:50:85:7e:29:aa:b6:c8:ca:89:
                    4f:ab:b7:b4:70:62:51:d4:db:4e:ae:b1:d0:6f:12:
                    9d:55:8b:82:2b:de:02:bf:c0:2f:8e:a0:f0:01:ba:
                    ba:0d:6b:7b:34:cf:a1:90:d3:06:e2:5d:75:4b:95:
                    62:fd:ac:33:c8:7b:fb:fb:85:f1:e9:93:69:47:82:
                    e3:87:f4:cf:3b:8e:88:71:96:71:26:d6:e8:a5:bc:
                    09:ec:c4:6d:10:b6:4a:7f:17:f2:d6:e0:72:48:86:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DF:90:CC:53:72:E9:19:57:C9:AE:D1:AB:97:BA:E7:D2:88:95:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/74442655-d5d9-326e-9fff-71ba9b8ecda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:dc:ea:8b:7f:be:51:bc:8a:7d:af:ba:f1:3c:99:39:91:
         b2:74:a4:ff:85:42:1b:2d:52:3a:71:48:39:79:2c:ba:83:6b:
         18:98:84:b4:2a:07:b7:46:58:8d:ef:3e:a9:96:85:d8:87:b8:
         4a:c6:4a:8f:6b:cf:0e:29:4a:6c:44:0d:63:e0:fd:2d:39:3a:
         04:37:df:00:ba:c3:f7:66:46:2d:2c:49:e6:d4:c9:11:76:c7:
         4f:2f:89:26:66:a0:24:51:25:13:f2:7b:68:36:39:f8:62:95:
         ce:29:04:b5:21:fa:0d:78:04:3a:79:33:82:44:87:67:7e:24:
         da:28:44:f4:b5:c8:b4:46:67:b2:19:ec:73:03:23:77:26:20:
         be:80:25:60:05:8a:1a:31:4e:29:f7:07:01:28:ae:52:3b:a1:
         2a:de:eb:eb:ed:77:cc:35:94:85:e2:39:4e:78:6a:5a:e9:51:
         69:dd:ec:29:96:f2:df:3e:78:1a:9f:81:62:33:31:62:62:02:
         a4:fe:61:b0:a7:35:c8:fd:0d:29:05:66:2e:33:b0:f0:14:e7:
         48:27:75:99:c6:b7:41:80:b5:68:39:ba:d6:8e:32:c2:b1:75:
         1d:51:7e:c9:e1:3b:64:1e:fc:6f:7e:ea:1b:41:b4:ae:c9:60:
         a8:9b:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org