Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
File:                     b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa (raw, json)
Hash identifier:          ozvWTaW3JnJi5AK6BvJKPM9k0JjAEvBsA863kgwK3AI=
Subject key identifier:   DE:13:87:04:CD:C3:56:4D:CC:A5:45:C4:70:9C:8C:05:F3:1C:9F:39
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC30969CFBFD2E33BBD3480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.44.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c3:09:69:cf:bf:d2:e3:3b:bd:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=e165bf41-f5f1-48a2-9a8f-49a06b01d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:bf:79:d5:88:0a:ad:cf:d9:b9:6b:76:a0:
                    fc:32:39:01:ed:39:cb:2a:27:59:0c:fe:b0:e6:a0:
                    0c:c0:6f:f7:ce:23:19:6f:12:a4:6d:98:6e:ca:2a:
                    b0:04:e4:e9:2e:25:85:c0:4a:21:89:99:52:de:cb:
                    ba:ca:90:78:6e:cb:d4:29:21:25:2a:73:0c:d9:8b:
                    7e:f8:5d:b6:9a:75:49:01:d8:4f:6b:74:8c:b5:f3:
                    83:60:42:00:61:29:48:e9:3f:ac:23:82:bd:a0:87:
                    df:25:dd:b0:cc:b9:5b:4e:e4:e8:da:99:79:b3:b0:
                    38:2b:f2:bd:39:e4:53:d0:17:50:5e:36:1d:ca:3e:
                    0a:2d:30:4b:99:a9:7f:c8:5e:05:0a:bb:94:e6:41:
                    71:f2:94:ec:4b:7e:5b:6e:b0:ad:6c:59:d9:d3:cc:
                    4b:10:07:d6:f4:a2:77:bd:c6:15:fa:b7:79:5e:b0:
                    0c:ff:f6:1b:1b:51:7b:4d:1d:00:29:08:fb:4c:5e:
                    54:50:95:fe:a9:c7:f1:ab:7f:7a:28:2f:65:89:24:
                    4f:a3:63:b8:d4:65:9c:15:6c:94:48:60:1d:7c:90:
                    85:9a:dc:66:2f:14:68:a7:fc:a2:df:dd:73:34:92:
                    5e:a2:fa:ec:5d:00:ad:08:51:85:03:86:ed:09:a6:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:87:04:CD:C3:56:4D:CC:A5:45:C4:70:9C:8C:05:F3:1C:9F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:bd:51:96:f0:10:62:8e:53:d8:9d:c8:66:22:a9:df:11:
         77:db:06:ce:2b:47:10:00:38:58:c5:93:7e:8d:5a:f1:9b:7a:
         bf:ce:d3:de:18:0f:03:15:b0:36:32:dc:d3:3d:47:a9:39:e9:
         91:a4:23:48:8b:95:4b:6d:cf:51:24:be:05:71:7d:b7:2a:10:
         5c:f3:9f:e4:4f:21:18:05:99:26:20:2d:3f:81:49:e4:dc:32:
         e5:dd:af:d2:2b:69:c4:8b:ea:f9:d6:86:a4:af:88:8c:ad:7a:
         3f:f6:71:1f:d9:9b:e0:e4:45:16:c6:a0:e8:cd:2b:35:50:d4:
         3a:f4:64:b9:bc:41:5d:ce:42:7c:58:82:58:f1:e0:ff:80:14:
         ba:3c:c7:dd:35:fe:c9:9e:0e:33:f6:dc:1d:67:ec:f5:59:01:
         75:8e:7f:e4:98:cc:2a:86:ac:fb:5d:7c:92:16:0d:07:fc:2b:
         fc:cd:c4:2d:d7:00:46:73:c7:b3:80:6b:be:39:f5:e0:e6:47:
         d4:ea:c7:51:21:e8:38:80:61:05:47:35:b9:2d:0d:80:5b:f5:
         75:52:c3:2a:04:ad:30:da:19:09:8c:cb:3d:c3:0c:f7:2f:05:
         b3:ed:5e:e3:77:53:52:e3:78:f2:ac:1b:12:7d:9d:aa:9a:80:
         c2:46:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:13:34 2024 by rpki-client on console-ams.rpki-client.org