Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab27ffab-a613-3cc9-a327-fcef95d708a2.roa
File:                     ab27ffab-a613-3cc9-a327-fcef95d708a2.roa (raw, json)
Hash identifier:          CvFvaAhIQakOqbnlm8QrJAe6+xgWbls+AV34j4N4qWg=
Subject key identifier:   7E:0E:76:FD:6B:7B:2C:77:D3:95:04:F5:59:98:89:A1:B6:81:9B:B0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC306995513AE6C87CC0F20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab27ffab-a613-3cc9-a327-fcef95d708a2.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.44.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:06:99:55:13:ae:6c:87:cc:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=8d03ef9d-85b3-4910-ab48-3c7a6a52c021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:f8:1c:32:bf:a7:a9:eb:b1:1c:6c:b0:4d:
                    1d:c6:59:43:51:86:50:3d:a2:d5:6d:22:84:33:df:
                    b7:55:04:e8:3d:b4:95:03:e2:ce:b7:4e:d4:4c:45:
                    79:e3:70:cd:e1:0d:9b:b2:50:6d:4c:95:23:47:35:
                    c0:d9:37:1b:a3:a3:c2:5a:0a:e3:ee:5f:ac:ec:70:
                    35:91:d2:3d:3c:50:9c:b9:c1:85:64:af:cc:63:0d:
                    fb:ad:d5:37:2a:7e:a2:43:93:0f:52:e9:ab:5a:f4:
                    46:0f:55:ab:c3:52:01:3d:84:77:d1:00:6b:5b:8a:
                    75:05:40:43:f5:f4:47:2f:17:fc:91:d2:4a:24:12:
                    83:99:b3:94:22:80:2e:f0:e6:e3:79:2e:79:a1:62:
                    85:22:59:b0:8c:af:6d:4d:71:95:ea:d6:80:26:ba:
                    c3:95:43:e2:3c:8e:c0:a6:e7:3e:89:ba:14:83:30:
                    c7:42:81:98:9a:a2:88:8f:13:1e:45:85:ce:39:de:
                    71:3e:29:a8:39:9f:98:f4:98:ed:88:2f:cb:18:81:
                    61:20:a7:d5:8a:26:88:6f:cd:cf:43:8c:18:13:3e:
                    63:ca:06:57:6a:73:26:ce:1f:cf:21:85:fc:cf:eb:
                    46:97:5b:42:63:60:d5:3f:18:91:19:05:50:1a:0e:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:76:FD:6B:7B:2C:77:D3:95:04:F5:59:98:89:A1:B6:81:9B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab27ffab-a613-3cc9-a327-fcef95d708a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:33:de:13:83:db:04:38:44:7b:77:99:56:0d:8f:c9:e2:
         71:a8:3d:7d:c6:95:dd:6b:40:f5:3e:d8:5c:29:88:e2:93:eb:
         72:ca:f8:bd:d6:7a:ae:0d:08:25:dd:82:a6:b8:9d:47:88:48:
         a2:07:77:81:b2:de:07:21:1a:0b:8e:c3:d7:60:9e:62:08:b9:
         6b:fc:b7:07:ff:18:57:9e:7f:9c:2b:2d:8c:31:e8:df:b3:27:
         8c:b8:c0:5b:4f:8d:34:0a:66:32:1d:0d:42:59:2d:4e:ee:20:
         40:a9:4c:42:29:ae:f7:a8:a6:5d:09:11:10:a7:22:4c:20:15:
         3c:05:74:78:96:46:a2:81:d9:09:0e:5a:43:a2:13:c6:d9:31:
         19:3c:59:96:e4:fd:28:88:56:5a:1a:89:e6:97:06:82:3e:d0:
         71:74:ec:77:8f:2d:9e:22:ac:66:c9:66:a0:82:be:41:b6:a4:
         8f:13:1e:f6:77:78:46:71:e0:5e:54:9c:84:a9:6e:ca:c9:cb:
         ca:2b:54:45:c8:7f:f2:42:2b:fb:39:cd:8a:e1:d5:50:08:3f:
         52:73:65:aa:45:42:b1:48:06:e5:88:81:6c:3f:ed:94:19:00:
         26:07:ec:12:d3:92:11:ed:61:e5:0a:84:cf:71:d6:81:92:60:
         ce:95:6f:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfwwaZVROubIfMDyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
OGQwM2VmOWQtODViMy00OTEwLWFiNDgtM2M3YTZhNTJjMDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGn4HDK/p6nrsRxssE0dxllDUYZQPaLVbSKE
M9+3VQToPbSVA+LOt07UTEV543DN4Q2bslBtTJUjRzXA2Tcbo6PCWgrj7l+s7HA1
kdI9PFCcucGFZK/MYw37rdU3Kn6iQ5MPUumrWvRGD1Wrw1IBPYR30QBrW4p1BUBD
9fRHLxf8kdJKJBKDmbOUIoAu8ObjeS55oWKFIlmwjK9tTXGV6taAJrrDlUPiPI7A
puc+iboUgzDHQoGYmqKIjxMeRYXOOd5xPimoOZ+Y9JjtiC/LGIFhIKfViiaIb83P
Q4wYEz5jygZXanMmzh/PIYX8z+tGl1tCY2DVPxiRGQVQGg6dawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4Odv1reyx305UE9VmYiaG2gZuwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWIyN2ZmYWItYTYxMy0z
Y2M5LWEzMjctZmNlZjk1ZDcwOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRyw2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvpM94Tg9sEOER7d5lWDY/J4nGoPX3Gld1rQPU+2FwpiOKT63LK+L3W
eq4NCCXdgqa4nUeISKIHd4Gy3gchGguOw9dgnmIIuWv8twf/GFeef5wrLYwx6N+z
J4y4wFtPjTQKZjIdDUJZLU7uIECpTEIprveopl0JERCnIkwgFTwFdHiWRqKB2QkO
WkOiE8bZMRk8WZbk/SiIVloaieaXBoI+0HF07HePLZ4irGbJZqCCvkG2pI8THvZ3
eEZx4F5UnISpbsrJy8orVEXIf/JCK/s5zYrh1VAIP1JzZapFQrFIBuWIgWw/7ZQZ
ACYH7BLTkhHtYeUKhM9x1oGSYM6Vb38=
-----END CERTIFICATE-----
Generated at Fri May 10 03:05:51 2024 by rpki-client on console-ams.rpki-client.org