Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd02bca8-2436-37de-8e8f-e351098b4cb3.roa
File:                     bd02bca8-2436-37de-8e8f-e351098b4cb3.roa (raw, json)
Hash identifier:          bybQLxpSj2zwHDM7HwNOVp26Py9dD+RdlQsFjZXwrJc=
Subject key identifier:   A6:45:77:3D:D2:0E:42:58:FB:2D:1C:BF:4D:C0:6D:47:1A:6B:40:CF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE27D48EFB8ADD26190600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd02bca8-2436-37de-8e8f-e351098b4cb3.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        71.44.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:27:d4:8e:fb:8a:dd:26:19:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=93b0becc-5a8f-4219-af95-ac7ef2da5f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:ec:74:da:61:0e:ff:5d:a1:96:e1:7d:b2:
                    81:1b:49:43:6e:5d:59:d2:ef:67:a2:1f:4b:5d:d9:
                    4e:2d:be:4c:1b:21:e1:0f:87:99:d5:0f:67:8f:87:
                    37:11:ca:91:63:a2:46:21:72:e3:e2:4f:f9:97:c4:
                    13:59:a6:96:07:78:fb:bb:b2:6c:50:30:d7:1f:42:
                    c5:c3:a0:07:7f:a4:a3:1e:54:05:71:14:f1:54:6d:
                    c3:fc:e7:ca:94:55:2d:5a:87:f2:ea:14:40:df:43:
                    f3:8b:6a:cc:b6:e0:42:7f:00:1f:13:ea:03:0c:8c:
                    c5:77:86:5f:c9:c8:11:6b:a6:4a:4c:df:6f:b7:05:
                    0d:d6:ab:3f:2f:73:de:43:da:4f:14:45:23:7d:d1:
                    81:77:aa:60:47:31:d0:b3:34:01:b9:7f:4d:cb:a0:
                    1d:10:f3:64:32:79:36:bd:29:c7:af:e7:d8:a9:d6:
                    57:55:59:7a:bb:27:05:43:d2:4f:b4:a4:df:da:37:
                    53:7e:33:ba:11:43:ea:75:4f:e3:80:9b:08:84:05:
                    4c:a7:85:6b:cf:26:37:90:31:1c:fc:40:93:f6:7a:
                    60:aa:eb:6a:42:33:2c:a6:3f:db:d0:3f:14:95:cb:
                    3e:96:d7:7a:c8:8c:9f:48:a7:d4:73:09:01:29:4e:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:77:3D:D2:0E:42:58:FB:2D:1C:BF:4D:C0:6D:47:1A:6B:40:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd02bca8-2436-37de-8e8f-e351098b4cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7e:23:62:bf:95:3f:99:93:b2:e5:d9:44:59:22:14:0e:7c:
         81:5b:8f:29:ba:1f:4c:28:42:5f:54:ea:cd:87:bf:49:b8:ba:
         83:19:4c:ca:a0:c8:cf:e2:6e:1b:00:de:1c:09:18:7d:1f:63:
         4e:00:ed:27:f8:58:f0:d0:bd:a4:61:fa:4c:f5:c5:10:e1:c8:
         80:bf:5d:75:1c:ce:0b:8d:20:db:5c:64:fd:78:a8:7b:e8:24:
         20:50:da:a9:aa:63:10:90:ef:ac:50:b5:76:c6:53:23:2e:af:
         62:38:1e:5c:73:14:d8:2a:ef:db:a7:76:43:a6:32:45:ae:14:
         95:16:d8:73:3e:9f:e7:42:77:86:bf:5f:c2:1a:c7:d5:a6:24:
         4d:11:f9:4c:30:00:00:48:ec:f0:5f:8f:6e:db:09:45:4c:9f:
         60:70:d4:f7:09:26:d6:6d:61:39:0d:51:1d:7e:e6:e4:c7:6f:
         4e:87:0a:a5:6b:a2:ea:30:3d:18:79:44:c0:70:09:75:75:86:
         74:48:bc:fc:ca:89:9f:86:a5:66:d4:40:58:e1:4f:ee:16:1c:
         b2:4c:c6:9c:e8:b7:e0:d3:87:2e:89:7f:f3:1e:6f:d9:16:a1:
         c7:fc:f1:44:2b:fb:25:69:f6:36:52:8b:d2:df:18:b7:e9:ca:
         5c:70:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:54:46 2024 by rpki-client on console-ams.rpki-client.org