Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a96918b2-4c34-3452-81f6-6638799bd5f1.roa
File:                     a96918b2-4c34-3452-81f6-6638799bd5f1.roa (raw, json)
Hash identifier:          PnJnPVed30Xnps8ltILxPyYomvl0dk7ubhA6pSTS+fY=
Subject key identifier:   6C:A2:16:A9:80:FE:D3:DB:5A:48:96:64:A6:63:17:86:2F:BC:2C:82
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE20ED45EE6965BD7528B0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a96918b2-4c34-3452-81f6-6638799bd5f1.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        71.46.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:20:ed:45:ee:69:65:bd:75:28:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=3c5b988b-d09a-4434-a7a8-5b39879bb695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:d5:01:86:db:72:22:e3:4d:a5:74:c1:13:
                    de:cb:9e:f2:eb:65:55:21:ae:8d:52:1e:6d:d7:31:
                    1e:ac:14:8d:27:9d:dc:df:c7:ec:af:de:61:1f:99:
                    60:97:95:6e:f5:c5:c3:e7:c3:b9:53:37:5c:b0:ca:
                    d5:3e:6e:44:96:3a:1f:d1:69:fd:78:7a:4e:d3:4f:
                    0b:17:cb:67:0d:97:02:9e:71:0e:c9:83:cd:c2:a2:
                    e4:9e:77:b4:4a:35:d7:68:6e:19:62:03:11:7f:33:
                    38:bd:1e:62:f8:b2:85:76:98:66:0a:85:d2:6a:f0:
                    bf:cc:60:c6:2a:27:d5:a0:52:12:e4:f3:c9:5c:a8:
                    86:29:de:7c:18:bb:b9:a2:83:37:c4:af:6b:02:37:
                    c0:f2:b0:14:e2:9d:fe:df:c2:76:ec:b7:e5:f8:10:
                    d3:11:ec:b0:b8:aa:2e:a7:8b:92:39:68:4c:63:22:
                    ae:42:e5:a3:83:22:d1:b8:ae:4f:2e:e0:c6:71:08:
                    90:ee:20:4b:89:19:6b:f3:e0:d2:47:14:63:dc:16:
                    7f:18:94:73:f4:d5:20:4b:c5:c1:d7:a2:7b:e4:a9:
                    8f:03:ab:7b:30:2d:e0:3d:64:87:9f:a5:45:c6:03:
                    08:d1:d8:75:ab:1e:ae:41:38:77:83:c6:97:af:00:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A2:16:A9:80:FE:D3:DB:5A:48:96:64:A6:63:17:86:2F:BC:2C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a96918b2-4c34-3452-81f6-6638799bd5f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:70:4a:98:6e:be:fc:3a:69:b0:75:f5:9d:3b:b2:24:b5:
         6e:ea:b4:c9:ae:b4:1c:ae:8e:92:c4:79:a3:a4:30:73:81:e2:
         20:20:71:35:fb:64:f9:ac:56:ce:48:c5:9d:0e:bf:b1:bc:0f:
         c3:5c:01:60:50:d0:f8:f6:fe:ad:84:68:5f:49:13:ca:95:6f:
         e2:7d:a4:e9:f2:af:8a:51:a8:5b:da:93:1e:d1:10:71:22:07:
         e9:34:ee:93:9d:ac:b6:9e:0e:dd:1f:bd:1e:6e:91:d3:c4:f2:
         90:51:0a:60:94:69:78:63:d1:5a:f4:0b:40:32:c9:11:4d:76:
         a3:e3:14:00:0f:ce:f1:7d:d9:21:55:23:db:93:58:21:09:84:
         a7:83:7e:4f:72:ea:4b:6d:cf:3f:a6:83:3f:a5:77:7e:3b:d2:
         b5:04:e3:84:05:46:a1:c1:df:46:9e:af:c4:58:6d:61:df:c5:
         d0:78:ed:5f:75:a4:a7:e7:3c:95:59:1a:e6:ba:4d:94:a7:2c:
         61:69:47:f4:77:b5:97:c5:01:d7:4e:7e:f3:a8:75:35:ec:3d:
         b4:e8:0c:7f:c0:3e:87:ce:28:26:e9:ed:74:42:53:46:e6:ff:
         46:57:46:fe:91:89:a4:2f:61:46:c5:48:82:e3:4b:8b:7a:fc:
         54:0e:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org