Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa
File:                     7d010eae-b07d-3815-afbe-2a97d3e18248.roa (raw, json)
Hash identifier:          Qt2g2klOh9rj4qaman8ES100ex7xsz1tTCR6zHGskrA=
Subject key identifier:   63:D9:F9:F4:65:17:99:2F:8B:7B:D2:15:46:8A:BA:46:86:82:13:80
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E786827D8E7855E6C130
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.71.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e7:86:82:7d:8e:78:55:e6:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=b9473874-b601-4005-8043-ae5b27897c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:f5:ba:09:5b:53:72:97:94:2b:75:5a:0e:
                    14:36:b5:2d:57:1a:fd:27:37:c1:85:5d:c5:e7:80:
                    68:98:1f:71:a0:bf:ba:e9:94:c0:f3:c9:3c:70:bf:
                    52:e7:e6:7e:46:72:9f:35:1e:23:60:a7:e5:2c:be:
                    96:1b:76:d2:7f:f9:06:ce:05:fa:2a:40:f8:b9:96:
                    bb:91:f2:48:d7:6f:d9:aa:70:65:e7:20:df:10:8c:
                    aa:07:44:60:bc:9f:86:56:c7:1d:92:34:8e:e1:b7:
                    2e:30:21:7e:3e:5d:2f:42:b0:40:6f:c0:40:cc:8b:
                    69:fe:c7:e6:07:54:2f:91:81:d5:be:cc:6e:46:9d:
                    02:24:b8:22:f5:58:7a:db:3a:26:1a:ba:3c:a6:e8:
                    53:64:26:3e:d9:f6:6f:6e:e3:aa:45:6a:5e:06:b3:
                    64:69:b9:22:a2:2a:16:2e:5a:b0:3e:10:c1:4b:dd:
                    c1:39:60:40:15:ef:4a:a8:e5:18:1b:e9:e1:0c:f0:
                    fe:59:34:d6:6d:d3:1f:96:81:96:95:94:ec:bf:ab:
                    ab:21:42:c0:47:4f:78:91:b6:86:58:40:9b:eb:78:
                    f3:e2:84:85:a5:77:03:d2:be:4c:45:3f:53:4a:9e:
                    e1:9a:a6:cf:07:4d:78:c3:e4:c3:0e:4c:4c:86:90:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D9:F9:F4:65:17:99:2F:8B:7B:D2:15:46:8A:BA:46:86:82:13:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:0f:27:ed:fa:ab:12:e9:69:24:ac:74:6e:2d:a3:fb:d3:
         22:f9:5b:ad:c5:27:7c:cd:f3:81:44:19:b7:bd:87:a2:93:57:
         d0:8d:34:d5:f6:cf:18:89:f2:eb:be:12:6f:8b:12:30:70:5d:
         ef:de:98:14:bb:71:24:25:54:75:4d:a2:93:bf:07:25:88:23:
         f2:52:e0:73:9f:94:cc:64:94:25:c7:2f:51:a7:8e:ce:7f:25:
         df:bc:a2:de:22:b3:9c:eb:47:71:87:f4:e4:16:af:ee:a8:9c:
         69:92:0f:04:b0:e4:38:8d:bc:d8:f1:e5:f1:29:a5:a6:c8:4c:
         5f:17:1a:d2:34:b9:bc:d6:ae:6c:06:29:06:26:97:0c:00:23:
         ba:2f:fa:ce:cb:b0:8d:19:31:7f:41:0f:e8:29:23:79:2c:ef:
         3d:bd:e8:84:32:1a:a9:73:13:61:b3:17:dd:fa:cf:03:ae:ac:
         be:e8:7c:55:61:3e:56:e4:93:34:d6:7a:c2:0e:44:0b:b0:bc:
         ec:0e:81:ef:16:7e:e9:e6:3f:d1:a0:ab:8b:90:b4:1d:1f:a5:
         8b:1b:fb:34:a0:94:53:af:4a:5a:8d:80:be:07:71:04:a6:08:
         c9:7c:c4:7a:c9:c8:4d:c8:4f:2e:99:41:9c:ab:3e:78:c7:17:
         7a:40:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org