Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa
File:                     afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa (raw, json)
Hash identifier:          ZlLtR1IhDRkEOeDsxbDLFUWZQY9KQiGxzLiVOt0svUE=
Subject key identifier:   90:B7:60:26:CF:3F:91:BC:4E:7B:AE:F4:CA:78:EA:94:10:F7:FB:98
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F5406C38786BE26AA100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     16787
IP address blocks:        71.44.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f5:40:6c:38:78:6b:e2:6a:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=0d750824-fb61-4cf2-9d47-86ce3d3a313c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:38:00:6f:b4:3c:38:30:4f:0e:22:ce:ca:
                    c0:91:89:2e:d4:02:17:48:94:e3:ae:7f:5c:7e:f5:
                    12:f5:b1:dd:57:f3:c3:c2:e4:75:c4:2a:71:f1:e2:
                    88:37:d1:44:00:89:75:3f:67:5a:35:d0:e7:cc:58:
                    6d:84:94:09:db:dd:f6:56:30:b0:86:5d:e3:f5:83:
                    32:08:2e:bc:3a:6e:b4:29:f5:38:27:ed:f7:e8:b8:
                    ef:a3:95:b9:55:e7:fc:52:b4:ac:a3:4c:9f:fa:68:
                    bd:65:5c:ae:8c:0f:1f:35:04:1b:b4:83:39:4b:a7:
                    08:aa:50:8a:70:06:da:11:09:dc:3d:0d:46:2f:c0:
                    18:f8:55:5f:c4:63:67:1d:2e:e6:f1:eb:48:7a:cd:
                    69:32:af:6a:ea:aa:dc:33:1f:ab:03:b9:73:1a:18:
                    74:b2:5e:1b:ad:de:91:d2:42:8e:15:58:0c:aa:d7:
                    9a:d3:d8:42:55:7b:97:7c:34:3f:cc:7b:f4:7f:42:
                    b2:1e:63:ff:1e:98:9c:2c:31:5c:fe:a8:c2:1b:31:
                    87:38:2d:8d:4d:ac:db:a7:fa:3b:6c:b5:59:cf:62:
                    60:f2:32:5f:2e:38:1c:5c:31:3a:e1:2e:9e:33:9c:
                    70:26:59:0a:2c:2e:1b:bb:93:e8:5b:13:54:7f:d6:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B7:60:26:CF:3F:91:BC:4E:7B:AE:F4:CA:78:EA:94:10:F7:FB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:58:b7:34:a0:98:ce:a4:5d:83:00:f7:77:48:16:7e:cc:5a:
         91:d0:4a:7d:3a:09:02:c0:b0:1e:e0:0f:80:53:cd:e3:39:00:
         7a:05:97:51:81:fb:58:9e:f2:64:ab:fb:4b:86:2a:da:0d:57:
         48:b1:f2:a7:4a:70:cc:3d:f0:fd:6a:48:8c:26:27:41:b2:97:
         b4:68:8f:8a:8c:b2:f1:d5:3d:7a:fb:fc:a0:79:5e:cd:0b:67:
         0f:29:c9:fd:33:0a:0a:c9:55:a7:76:a7:75:eb:7d:4c:7c:41:
         e8:bd:fb:c4:5c:01:27:40:87:c6:8a:62:89:62:9a:c7:b9:de:
         35:f6:75:31:f3:79:62:a7:ff:e9:60:83:ed:ba:de:d9:3c:b8:
         49:d9:c0:35:3a:81:95:1b:e6:4e:09:0f:d3:44:bf:7e:50:18:
         23:4c:32:7d:f2:1f:ba:6a:47:6a:1b:d2:9e:3b:0b:9a:6e:68:
         89:83:d6:38:94:df:a8:23:b6:5f:3b:46:4f:58:a7:12:fd:bb:
         b4:25:6d:e1:0c:0b:53:16:56:11:a4:86:81:f8:51:4d:2d:3e:
         97:4c:70:d4:37:19:32:55:65:71:f7:2d:36:08:46:d3:39:54:
         5a:20:4a:10:dc:6d:77:94:58:b9:ae:81:ae:e6:2c:3b:fa:b4:
         a2:b4:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org