Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9e5dea09-c812-30b5-869d-59252c863794.roa
File:                     9e5dea09-c812-30b5-869d-59252c863794.roa (raw, json)
Hash identifier:          Lz7lKc4VGGZbUYbsd8P1EhTBzi6AwBaAirzCGL9kidk=
Subject key identifier:   43:61:78:F8:8A:6D:ED:1B:8D:C4:67:A5:52:97:DF:4E:8E:30:E8:A9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838AC0A6949377121779F155D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9e5dea09-c812-30b5-869d-59252c863794.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        71.46.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:0a:69:49:37:71:21:77:9f:15:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=e902f203-7cba-4992-822c-36dbbc913582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:66:5d:c4:07:9c:73:bb:2d:1b:22:00:55:
                    b3:ca:00:a2:21:e5:5c:a2:a0:94:c6:82:6b:3e:9f:
                    fa:30:07:44:66:9e:12:29:08:35:61:63:17:e6:27:
                    70:ec:d4:75:1e:42:2f:9b:6a:8c:3b:f2:0b:e2:26:
                    ab:b5:93:29:9b:96:81:20:16:10:b6:ed:7b:cb:6b:
                    05:e9:fc:8f:e3:c8:0b:fa:12:fc:35:52:b6:86:34:
                    bb:02:5a:b6:d6:3f:09:40:88:7f:b5:f0:ff:87:cd:
                    17:41:b5:63:22:f9:03:ae:b4:b5:21:68:c1:6c:56:
                    0b:c4:cd:7e:72:bc:5b:fd:67:c9:00:0b:0e:f5:b3:
                    d1:1d:ab:f8:8c:fd:7b:04:f4:d6:17:00:30:a8:71:
                    8f:bc:1c:cd:0f:08:7e:c7:6a:c7:7a:d4:69:18:41:
                    d7:15:9d:b4:d9:f4:4c:45:ca:20:32:6f:76:e7:0c:
                    6e:66:ae:97:ac:bb:a1:f7:31:a1:73:12:54:90:cc:
                    dc:50:63:1e:95:d4:d0:65:b1:d6:b5:4e:af:b2:2c:
                    bf:bb:00:5b:67:52:be:e1:32:b7:cb:18:d9:73:b8:
                    53:8f:e6:53:c7:80:db:9f:5f:3a:c5:c1:ef:4d:cb:
                    55:e6:75:2b:31:f2:c5:13:b1:42:30:2c:c9:a8:53:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:78:F8:8A:6D:ED:1B:8D:C4:67:A5:52:97:DF:4E:8E:30:E8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9e5dea09-c812-30b5-869d-59252c863794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:3b:f1:ed:d7:e8:c9:13:f9:ba:a2:b7:05:5a:3f:69:5a:
         4a:d3:54:bb:70:77:7a:de:e9:7e:86:af:45:88:b7:2c:31:28:
         4d:7b:7a:e7:af:1d:09:a3:82:8e:c9:a7:dd:96:ad:f1:8e:67:
         88:2f:44:21:54:53:0e:f9:1a:e6:9d:3d:f4:c5:00:88:ff:ee:
         61:a1:43:a6:69:82:a0:b0:0c:8e:be:1e:0c:06:35:9d:25:58:
         01:82:44:f5:0b:ba:22:55:15:76:f0:b1:84:f4:8f:92:66:71:
         1d:23:f4:20:85:b0:fb:ae:22:a5:ec:47:90:1c:65:3a:35:bb:
         0c:01:04:85:3c:c1:f1:3b:e0:20:22:36:79:10:36:aa:65:27:
         ba:2d:fd:4e:b1:ef:4e:a6:ed:1a:c9:68:1c:16:3c:a9:06:6c:
         91:29:35:a6:07:73:f4:c2:e3:9c:e5:4d:2e:da:5a:76:78:10:
         76:58:ac:88:ce:e2:6b:64:35:7e:6c:55:23:2b:80:1b:9f:8d:
         5e:a6:b3:7e:6f:20:61:a9:fd:94:e9:8a:d9:9b:8b:e6:1d:ee:
         9f:db:fd:7a:3e:e3:b9:82:05:fe:ee:65:5b:40:8f:a4:88:85:
         d0:a9:5f:6e:01:cf:fb:08:cb:65:28:c6:8f:97:ae:17:1d:7a:
         dc:2e:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org