Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
File:                     b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa (raw, json)
Hash identifier:          1pRCuvx8sAZFIUPDJknqGt50puA4JQWO3sRHLYGMuco=
Subject key identifier:   F3:55:B9:2A:B3:F0:A7:85:F8:21:74:13:57:CF:18:C4:5E:6C:4D:23
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FEC38D8BEB49D46E7D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.44.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fe:c3:8d:8b:eb:49:d4:6e:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=f783a7b4-a2dd-4bcd-8c61-73cc864af529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:70:8a:0e:d5:9f:5c:75:6d:fb:1f:90:a6:16:
                    c7:a5:66:fd:6d:a1:ce:6e:c7:81:c4:a5:d0:4e:a6:
                    96:29:1b:d2:5b:bc:2a:6a:a3:ea:2f:84:9c:24:42:
                    21:47:e1:d6:f5:77:8a:40:15:8e:17:b6:51:6c:dc:
                    93:b0:5b:56:7c:dd:9f:5c:61:79:6d:d7:c6:e3:62:
                    8d:6f:a9:2d:9b:bb:65:8b:77:fd:49:55:42:d8:44:
                    e4:a1:9e:9b:68:f8:97:19:3e:ce:70:b6:91:00:97:
                    b7:5d:d3:aa:84:30:55:01:c1:64:97:b7:ed:82:ed:
                    41:bc:88:b2:66:8b:25:50:31:ac:00:c3:72:48:ea:
                    b9:b5:7f:ab:65:f9:24:c7:5f:3b:07:d5:ca:16:30:
                    ec:e8:3b:0b:07:38:60:3f:61:3f:69:de:fe:35:e6:
                    8a:a8:b9:5d:b6:e0:b1:7e:2f:55:a6:20:74:35:8c:
                    5a:07:48:ce:5b:a8:d9:3e:7f:bd:27:1e:b9:5f:79:
                    3f:74:61:27:1f:48:21:2e:81:4e:8c:a2:bf:5b:d0:
                    0d:7f:25:1b:41:ac:8d:04:80:39:b8:2d:88:35:4c:
                    45:73:37:61:93:2c:e9:ad:90:f5:fe:68:c4:7f:50:
                    8b:94:c6:58:15:e1:5a:7b:c0:c3:3c:dd:e2:33:c3:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:55:B9:2A:B3:F0:A7:85:F8:21:74:13:57:CF:18:C4:5E:6C:4D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:c7:3b:2b:49:eb:e3:a6:37:fe:0f:b8:06:0a:3e:3b:01:
         60:15:60:a8:cb:a5:16:94:6e:99:48:65:77:67:98:ad:26:4d:
         8e:ae:24:40:7d:b9:03:eb:72:3e:aa:ec:a5:c7:e0:d2:22:ea:
         93:1b:13:c7:3e:71:12:90:09:33:46:9e:91:b3:b8:50:b5:03:
         bd:d1:97:71:b6:7d:a1:96:42:bf:d6:32:c1:46:26:3a:80:04:
         c6:fd:29:a8:33:8a:c7:c1:a0:bb:a6:16:99:61:2b:f8:2c:16:
         ae:35:03:ea:6c:15:2b:07:43:29:d9:fd:8d:bf:c5:1c:75:69:
         2b:fb:08:ed:ed:9f:8f:a9:f9:d9:6d:34:93:f7:e3:6b:4d:bf:
         e4:5e:b0:5d:7d:11:0a:89:5c:b5:f5:68:06:51:14:70:e2:b8:
         98:84:5e:f6:66:b0:3e:44:66:35:bc:81:f7:44:2a:bb:15:a0:
         29:53:50:81:14:0e:95:b2:5a:75:38:53:0f:c9:ef:00:e5:d0:
         3c:92:b1:f5:d8:60:cc:4e:c5:94:4e:91:45:86:fb:07:a6:3a:
         6e:76:13:46:0e:52:05:a6:90:58:fd:9a:f4:1f:87:6e:eb:98:
         7d:1c:e4:36:f7:de:c7:a5:e4:89:fb:e0:9c:04:3b:9d:fd:ea:
         05:90:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org