Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80fa3c72-0a27-3044-8bd2-7d61258e635f.roa
File:                     80fa3c72-0a27-3044-8bd2-7d61258e635f.roa (raw, json)
Hash identifier:          8UNJNWInsWQ1CGRFAArRGwHPI2PGAsQh/vIBFwcz6lo=
Subject key identifier:   0B:F5:9E:ED:D6:4C:16:49:41:99:1C:02:85:26:B5:6F:2A:C5:69:2B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FA6AA120BE3FA91A7500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80fa3c72-0a27-3044-8bd2-7d61258e635f.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fa:6a:a1:20:be:3f:a9:1a:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=28d18b42-f4d6-4f6c-9cde-c2082534bf1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:22:56:64:52:bc:d1:29:37:e8:22:3d:b1:
                    0b:6a:27:59:a1:2a:ef:b2:a9:cd:9f:92:3a:5d:01:
                    33:5d:e8:33:70:8e:2f:c4:74:63:ae:46:fb:0d:ea:
                    48:62:33:8b:f7:99:2f:33:64:4c:ca:5d:9a:68:54:
                    05:d3:74:f8:1f:90:98:be:5c:37:67:0e:bd:44:12:
                    15:0a:15:17:58:8d:fb:dd:af:6d:04:67:a1:59:54:
                    d5:16:11:da:fd:44:f7:6d:71:b3:29:58:67:32:70:
                    94:86:c5:9f:71:17:71:4b:00:ab:fb:93:9f:23:97:
                    9a:17:32:af:5c:c8:35:cf:8b:cd:89:42:62:ec:d0:
                    bc:2b:c7:b9:44:12:61:d1:b2:5c:fa:cb:a8:f2:a4:
                    f3:eb:65:7b:f6:c4:5e:9c:d1:9d:3a:50:d6:aa:e5:
                    8c:d8:77:0d:81:9d:2a:a8:da:87:48:b2:49:9d:80:
                    f1:d2:5f:07:5a:3e:f3:8a:f5:39:59:41:3c:96:92:
                    14:2d:47:ec:6a:e2:6a:25:41:9e:97:15:77:b5:80:
                    6f:aa:9c:1e:8e:34:fb:71:50:9e:4f:5b:c2:6b:21:
                    98:40:c5:ce:20:11:57:e6:7b:96:0a:2e:bb:2e:42:
                    9d:d4:38:e9:46:a2:00:36:47:f3:6d:7e:54:42:db:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F5:9E:ED:D6:4C:16:49:41:99:1C:02:85:26:B5:6F:2A:C5:69:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80fa3c72-0a27-3044-8bd2-7d61258e635f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d3:53:b7:ea:c0:57:ed:06:0f:37:98:3c:28:2f:cc:78:1d:
         53:36:25:33:fb:90:6b:76:66:73:27:dd:f0:6a:ac:3d:ac:a2:
         d5:46:27:2a:04:be:7b:d0:f4:65:38:db:2e:a4:cd:ed:40:a4:
         9a:6c:c4:cf:7a:76:25:f0:be:87:63:c4:07:48:fd:2d:02:ae:
         b1:20:9f:e9:26:83:8f:af:50:34:d4:ac:a6:1f:6e:29:c7:b3:
         b0:72:a3:62:a9:3e:04:70:ea:b3:81:f0:cf:ca:b6:42:4e:28:
         6b:1b:e6:d0:93:56:0f:bd:58:82:e1:af:17:a6:d7:0c:2d:34:
         3a:b6:f0:25:b7:8a:c9:1f:48:71:f5:09:d6:ca:06:9a:1b:ab:
         9a:4c:f7:81:31:c3:9a:58:82:25:83:f4:42:5c:2c:69:0e:91:
         b0:de:15:a6:0e:d4:f9:f7:15:01:32:e7:d3:cc:67:6c:1e:9f:
         3a:fa:36:c4:e0:c2:cb:8a:04:64:5f:c3:e6:d9:38:b3:ac:7f:
         08:86:b6:6a:75:ae:29:3c:6b:6a:45:f7:5d:76:7a:43:c7:d5:
         68:2b:8f:9e:fa:ec:6c:ae:c7:77:76:5c:08:ef:f5:56:63:07:
         c2:89:77:5a:fe:fd:cb:00:8f:ac:a6:43:58:b8:0b:e8:4d:b0:
         b4:98:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:08 2024 by rpki-client on console-ams.rpki-client.org