Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
File:                     a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa (raw, json)
Hash identifier:          HvZWF3Zll2AMQs22Vd5eG7c/5t6hMr9BmyBk9eWIB+s=
Subject key identifier:   1D:75:54:49:2C:E3:0C:D7:F0:89:DF:04:DE:B8:06:1D:0C:FC:10:8B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FF825A8BFE8C2BF54060
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:ff:82:5a:8b:fe:8c:2b:f5:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=28f3125e-a163-4ac7-90da-d683d87fc68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:29:d9:8b:83:0d:52:d9:af:31:5a:97:47:
                    51:ab:26:15:f6:86:b4:7e:48:4c:0d:20:e7:9f:4b:
                    ee:2a:93:22:47:ea:7e:01:cf:a9:b9:43:22:92:b5:
                    5e:cd:36:b1:51:b3:da:7f:06:60:8d:b4:a2:87:bc:
                    50:3f:c5:4a:c6:6c:89:b6:f0:ef:39:fd:78:35:2b:
                    ed:a6:af:43:cf:5c:92:b4:42:ba:c6:d9:09:46:3d:
                    44:c7:be:ee:c8:87:af:1a:3c:a7:7f:70:10:19:b6:
                    84:5d:71:51:9a:00:02:a5:39:57:24:80:54:31:ca:
                    6b:f6:21:8d:bf:51:e8:b7:09:74:0d:f8:f1:79:76:
                    c2:ec:6a:0e:83:8c:b9:1b:16:65:dc:f3:ed:b5:7e:
                    ea:2a:7e:96:de:9e:d2:13:05:52:57:3f:cf:f5:1b:
                    17:c6:3b:58:b3:4c:1f:e1:5a:3d:6a:18:6c:c1:ab:
                    ec:c6:6a:46:b4:b7:d6:68:8f:4d:22:63:1f:12:7c:
                    b7:e8:cc:c2:a7:a2:cb:06:03:b5:a8:31:16:79:3a:
                    98:db:37:c1:d2:b9:1f:fa:a7:e9:c4:41:69:73:19:
                    2e:b5:02:3b:64:0e:47:f1:39:e3:b0:74:3a:6c:12:
                    80:b7:27:56:ee:72:67:88:9c:c4:c0:32:4b:ed:3b:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:75:54:49:2C:E3:0C:D7:F0:89:DF:04:DE:B8:06:1D:0C:FC:10:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:19:44:3e:aa:3e:7a:d7:72:9b:b6:e9:d7:ca:0a:65:4b:
         3b:4a:69:af:21:ec:5d:6d:11:4e:7f:97:ce:9d:0f:6d:b2:6e:
         f8:88:52:22:b5:18:6b:6d:e7:5b:5f:98:9d:6b:b8:61:e8:c1:
         86:2e:ee:9a:27:ac:93:32:47:ab:31:7f:c2:d2:73:db:bd:d0:
         6c:59:b6:cc:23:3b:5f:1e:3c:ed:ac:ab:0a:68:cb:55:c9:9c:
         17:69:e3:a9:78:23:ab:23:2b:ea:a9:04:2c:6a:f3:44:21:0a:
         e8:a1:22:b3:1f:c5:bd:33:82:4a:34:37:a7:a4:8f:2f:72:8e:
         ec:11:4f:e7:36:6e:08:93:cf:54:a5:08:3d:d8:77:20:47:be:
         d9:e1:7d:e1:87:6c:34:77:39:da:e0:b3:67:78:1c:e3:ba:79:
         6b:14:f0:f6:f4:63:e5:4d:75:fa:86:f6:10:28:8a:12:75:58:
         19:bf:97:58:86:32:87:52:a0:85:da:fe:92:e1:f2:e8:12:49:
         33:b3:b6:67:38:65:1d:4e:3c:b2:a9:71:d9:23:29:18:49:fa:
         16:0d:f3:11:78:df:a6:8e:37:10:8d:1c:ea:ac:74:9f:eb:71:
         4c:83:ad:e4:c5:ed:d9:ce:3f:7b:c3:33:49:63:52:ba:b9:cf:
         80:61:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org