Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa
File:                     98d83296-cbe0-3c48-b055-28ee0ece2329.roa (raw, json)
Hash identifier:          ZomHqbtd7BfnzP/NvUUPFBMRTIHI20b7z5d2ze6+Iro=
Subject key identifier:   55:08:54:F9:57:1A:1A:11:3B:C8:09:CB:F1:DB:5F:CF:01:DB:71:03
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E34C7F783B1238335B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e3:4c:7f:78:3b:12:38:33:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=31778838-303e-446a-b0c7-c1ba3c171044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:33:dd:de:4f:8d:c7:67:9e:07:70:56:62:
                    f5:25:7c:19:fb:59:76:c4:86:1c:8d:ac:3d:4a:ba:
                    43:61:9b:7c:78:d7:f1:72:f7:9a:c9:fc:7d:9c:d7:
                    1d:16:7e:92:6b:28:8b:4a:da:fe:b5:4d:50:ab:fd:
                    41:b4:5b:4d:30:c8:01:c0:d8:08:b5:fa:af:70:33:
                    ae:ee:2e:95:78:b6:2a:2f:ed:1d:14:00:9a:ec:28:
                    40:c0:e4:bc:b7:b2:97:1d:b9:33:18:33:62:55:61:
                    b5:04:9f:b4:c2:ea:0d:23:52:5d:54:b8:9f:90:eb:
                    b8:a0:7c:dc:c3:78:19:54:db:fa:5b:fc:a0:32:0d:
                    35:f7:21:0b:ad:d9:2b:ed:8c:15:34:57:3e:27:c8:
                    8f:4d:78:7f:08:05:d4:2a:e6:e9:be:ec:30:93:9e:
                    d5:79:60:01:5a:9c:68:4d:68:92:85:67:51:06:bc:
                    38:9a:42:e9:f1:8f:49:3f:35:d5:51:70:3f:b5:50:
                    90:b4:b8:77:89:d2:19:e9:b5:e9:bd:9c:68:ae:a2:
                    cb:b1:50:10:d6:b5:04:7d:20:55:60:d0:a8:a3:b2:
                    b2:e5:80:73:c8:fd:d8:1c:d3:66:43:1d:25:26:57:
                    47:85:1e:94:a6:ef:c9:b4:27:fb:2a:22:20:41:9d:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:54:F9:57:1A:1A:11:3B:C8:09:CB:F1:DB:5F:CF:01:DB:71:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:b0:79:3b:77:7e:c9:b1:8d:71:89:91:c6:34:c8:28:54:
         14:4a:dd:79:d9:6b:c6:c1:d0:05:89:60:70:1e:32:93:07:8f:
         1c:0e:98:6b:75:4c:b6:ec:b9:87:c2:85:d5:9e:6d:8c:39:a9:
         6e:ce:02:af:92:34:4b:bf:61:d4:4b:78:c0:32:cf:00:ff:8c:
         e6:71:65:c1:da:58:d8:1e:47:9f:ba:b6:78:14:53:42:39:6c:
         c0:c4:1b:da:b2:e4:8d:b4:c6:2e:29:ef:c4:79:04:06:cb:01:
         5a:65:25:19:50:9c:94:de:f4:db:0c:26:09:82:49:e8:65:a1:
         34:73:25:12:c2:31:20:9c:06:47:a8:a6:e5:13:77:be:8b:89:
         35:4d:1a:b4:ce:e8:b2:26:2b:d0:73:4f:78:e2:f1:56:9e:3b:
         b1:45:16:9b:80:77:41:ba:55:c2:21:d9:02:b3:29:ab:34:94:
         f4:ee:41:e6:e5:93:de:f6:6f:86:51:af:36:bf:38:57:19:4a:
         ff:64:4c:a5:b4:45:de:36:10:ea:6f:00:f5:6b:4c:af:3e:6f:
         6c:9c:82:a0:c1:62:39:95:31:49:e1:96:d2:64:84:a6:06:c7:
         ac:bd:c1:6d:f9:a7:47:1e:6f:ce:a8:e3:62:ed:7e:03:78:07:
         52:c9:9b:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1eNMf3g7EjgzW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MzE3Nzg4MzgtMzAzZS00NDZhLWIwYzctYzFiYTNjMTcxMDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIoz3d5PjcdnngdwVmL1JXwZ+1l2xIYcjaw9
SrpDYZt8eNfxcveayfx9nNcdFn6SayiLStr+tU1Qq/1BtFtNMMgBwNgItfqvcDOu
7i6VeLYqL+0dFACa7ChAwOS8t7KXHbkzGDNiVWG1BJ+0wuoNI1JdVLifkOu4oHzc
w3gZVNv6W/ygMg019yELrdkr7YwVNFc+J8iPTXh/CAXUKubpvuwwk57VeWABWpxo
TWiShWdRBrw4mkLp8Y9JPzXVUXA/tVCQtLh3idIZ6bXpvZxorqLLsVAQ1rUEfSBV
YNCoo7Ky5YBzyP3YHNNmQx0lJldHhR6Upu/JtCf7KiIgQZ2l1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUIVPlXGhoRO8gJy/HbX88B23EDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOThkODMyOTYtY2JlMC0z
YzQ4LWIwNTUtMjhlZTBlY2UyMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARyz3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHlsHk7d37JsY1xiZHGNMgoVBRK3XnZa8bB0AWJYHAeMpMHjxwOmGt1
TLbsuYfChdWebYw5qW7OAq+SNEu/YdRLeMAyzwD/jOZxZcHaWNgeR5+6tngUU0I5
bMDEG9qy5I20xi4p78R5BAbLAVplJRlQnJTe9NsMJgmCSehloTRzJRLCMSCcBkeo
puUTd76LiTVNGrTO6LImK9BzT3ji8VaeO7FFFpuAd0G6VcIh2QKzKas0lPTuQebl
k972b4ZRrza/OFcZSv9kTKW0Rd42EOpvAPVrTK8+b2ycgqDBYjmVMUnhltJkhKYG
x6y9wW35p0ceb86o42LtfgN4B1LJm9c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org