Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a79473a7-5645-34fa-a9c8-e5d273feafad.roa
File:                     a79473a7-5645-34fa-a9c8-e5d273feafad.roa (raw, json)
Hash identifier:          mb1LWberQQad/uCn2EDyYr5K7y58L9gvm5+vP1bvs1A=
Subject key identifier:   F2:70:F5:DC:D2:3D:0D:F0:A5:8E:15:3B:0A:7A:9D:A6:BF:7F:16:09
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328583860A318C8FE69E2C2DE4B2CF0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a79473a7-5645-34fa-a9c8-e5d273feafad.roa
Signing time:             Thu 24 Dec 2020 05:00:00 +0000
ROA not before:           Thu 24 Dec 2020 05:00:00 +0000
ROA not after:            Thu 17 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        97.71.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:60:a3:18:c8:fe:69:e2:c2:de:4b:2c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 24 05:00:00 2020 GMT
            Not After : Dec 17 05:00:00 2026 GMT
        Subject: CN=f9f3d540-c411-457a-81b9-71c83363f161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:91:63:29:b8:a2:1a:43:6e:b0:07:ea:e7:
                    8a:97:56:9f:a1:4d:59:5b:ab:56:20:7a:25:d2:7f:
                    e7:81:79:71:8f:20:fe:9c:ca:7c:6f:96:28:fa:3b:
                    ce:d0:ca:df:e0:98:f0:a9:17:ee:59:73:21:57:1b:
                    38:49:06:60:db:20:87:46:84:9a:4e:42:19:a2:59:
                    ac:60:d9:19:74:0a:b5:46:2c:8f:59:5d:ea:f9:6a:
                    7c:48:8e:d3:a0:e4:11:92:06:9e:12:5e:1b:3e:15:
                    a9:e9:9a:95:91:9a:99:20:16:9d:c2:bc:da:5f:a4:
                    73:9d:fb:3e:d6:e4:41:6b:8f:bc:82:30:6f:f7:83:
                    9f:b1:2f:b3:27:ff:dd:bd:ef:44:0f:69:59:51:53:
                    f7:b2:6b:f6:ee:02:75:6c:6b:75:bd:ca:92:b9:f0:
                    60:26:be:56:54:52:56:6c:e2:85:ef:8d:c4:24:7f:
                    0b:8b:c1:b6:8e:e4:2f:06:ff:00:16:2b:36:00:05:
                    d1:1a:5a:46:5c:4c:29:75:0f:e7:22:48:07:a5:d3:
                    76:c0:0f:d1:f1:a0:a2:13:92:ed:90:81:a5:6f:b6:
                    76:5d:b4:4a:26:53:fd:2b:d8:d5:ae:66:34:f8:53:
                    7c:e1:de:97:a7:f2:a8:d4:c8:2c:f8:95:a7:2d:d8:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:F5:DC:D2:3D:0D:F0:A5:8E:15:3B:0A:7A:9D:A6:BF:7F:16:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a79473a7-5645-34fa-a9c8-e5d273feafad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:df:ab:37:ee:6b:84:22:88:eb:00:ac:d8:bc:fc:d3:ff:
         18:02:71:6c:d3:b9:29:f3:0d:1d:bf:c9:4a:cd:8b:2d:d8:0b:
         e3:47:df:c0:67:bf:b3:31:69:02:63:bd:80:c6:a9:91:00:f6:
         ac:14:33:c1:09:c3:44:2f:66:aa:a7:bc:51:0e:a6:0a:bc:bc:
         a3:09:82:29:39:76:41:9c:96:2e:4e:56:24:35:89:35:93:23:
         b5:b9:cc:14:44:d5:28:ef:7d:6b:02:2a:c3:6e:b8:65:36:14:
         66:64:2a:77:76:7c:a2:f1:b9:c2:ca:c6:a9:3e:23:38:9b:23:
         c0:2e:c7:78:e1:5e:3c:2a:81:9c:d1:93:3f:ba:e7:61:42:84:
         04:35:cd:5c:87:2a:1f:88:41:ec:70:93:da:e2:0c:50:fb:61:
         1a:d6:7f:11:69:f6:f7:fa:ff:fa:b0:57:5a:80:04:4e:e3:d1:
         3a:94:68:55:3b:5a:6a:ef:1c:62:57:d9:3d:2b:23:70:49:40:
         bd:14:87:6c:4a:b7:29:0c:0c:ec:1b:27:2e:27:1a:44:6b:49:
         50:6f:2f:cc:20:b5:f5:22:14:15:d4:13:c9:53:4d:1d:93:d8:
         43:70:ee:4c:14:d5:8f:4a:c1:92:47:f6:fd:a4:be:b9:71:63:
         28:64:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org