Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c6bac051-68aa-3678-865d-ea7bbf4b04da.roa
File:                     c6bac051-68aa-3678-865d-ea7bbf4b04da.roa (raw, json)
Hash identifier:          kOxN0Jlzz+If+M1joFV9V3epyYmIlEwWEbUZ4yz6N3s=
Subject key identifier:   1F:86:22:3F:0B:27:9E:FD:78:73:AB:F6:9D:6D:62:B7:6D:4D:BE:5A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE14A7D4DEF17158F32380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c6bac051-68aa-3678-865d-ea7bbf4b04da.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        97.71.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:14:a7:d4:de:f1:71:58:f3:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=e4e3f8a8-1b9b-4016-802d-00ae45a1a762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:65:8d:ae:de:29:d9:1d:6e:2c:b1:88:f2:
                    d3:8c:93:2f:46:97:8c:5c:72:eb:07:a2:95:9d:aa:
                    62:7d:f2:1f:34:09:d9:81:40:5b:bc:a0:57:0c:69:
                    dd:0f:ba:73:e7:7c:20:6d:fd:9e:69:78:20:77:e3:
                    a3:0c:15:9a:08:37:1d:d3:e8:de:0e:22:bf:e2:84:
                    52:d6:5b:90:69:cc:a0:c4:ea:92:e9:e5:78:82:b6:
                    16:1d:f0:2e:c2:f9:ba:ef:56:43:13:70:ee:36:4e:
                    ca:88:d2:67:d4:52:3d:88:1a:31:cc:7f:64:a4:59:
                    b7:8f:70:d3:2f:17:31:a5:c2:2a:51:be:0c:01:17:
                    75:ed:7c:d3:89:6f:05:bd:9c:c1:ac:b1:f0:e1:29:
                    28:84:19:67:24:64:7c:ab:80:5c:4a:55:9b:15:46:
                    96:95:a8:e3:15:43:bc:63:33:5c:ba:fa:94:be:c6:
                    ed:2b:68:91:9c:45:0c:01:da:00:98:d3:62:41:5e:
                    b0:21:58:f4:d5:f1:1d:1b:f5:6c:68:69:23:d5:32:
                    5b:eb:5c:2d:f2:73:31:75:72:04:61:88:63:50:f3:
                    e3:01:b1:ed:8f:99:88:c9:68:ea:20:4a:74:8c:a7:
                    c6:de:13:c1:3d:19:1a:ba:bf:6e:8d:1a:a1:e9:8e:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:22:3F:0B:27:9E:FD:78:73:AB:F6:9D:6D:62:B7:6D:4D:BE:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c6bac051-68aa-3678-865d-ea7bbf4b04da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:cf:cb:d2:59:2c:73:29:94:c8:bc:10:93:84:d1:dc:01:
         39:a3:cf:37:bb:67:96:bc:60:4a:6a:fa:41:c0:6b:aa:22:ea:
         bc:5b:58:49:e3:ae:9f:1b:2c:a7:7f:b8:08:13:1e:38:d8:18:
         36:a2:6f:6f:63:2c:6b:35:db:de:8b:4f:3d:53:df:1d:e3:99:
         3b:d0:80:d1:5c:55:54:90:54:18:5b:ec:36:f0:4a:8d:67:65:
         9e:8d:33:83:f3:67:1b:21:3e:44:9e:0f:6d:09:df:e5:32:4b:
         0b:5f:6f:3c:59:87:c2:c3:31:93:6c:43:10:74:e5:01:cd:0b:
         95:e8:cc:21:7d:ea:5e:0a:d3:19:61:0a:53:41:c8:18:1b:8f:
         9c:54:b0:f1:aa:ec:38:a0:eb:a9:44:de:db:ac:20:90:41:50:
         58:c6:34:06:a1:0e:01:c1:03:06:57:33:71:56:f4:88:d6:e7:
         cb:5f:1e:3f:25:d2:e4:89:ed:ce:62:a1:0d:63:ee:f6:4c:49:
         be:d5:ea:b9:1a:e0:b2:4d:aa:33:eb:6e:26:4a:04:9f:c7:b6:
         b7:ef:77:60:0d:56:02:1f:ce:a2:6f:64:d6:21:6d:16:3c:24:
         1a:1f:2a:f2:d2:b8:05:d2:fd:ed:11:05:a5:25:c5:6e:e7:73:
         4a:bc:18:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDj/zhSn1N7xcVjzI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDIxOTA1MDAwMFoXDTI3MDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTRlM2Y4YTgtMWI5Yi00MDE2LTgwMmQtMDBhZTQ1YTFhNzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGtlja7eKdkdbiyxiPLTjJMvRpeMXHLrB6KV
napiffIfNAnZgUBbvKBXDGndD7pz53wgbf2eaXggd+OjDBWaCDcd0+jeDiK/4oRS
1luQacygxOqS6eV4grYWHfAuwvm671ZDE3DuNk7KiNJn1FI9iBoxzH9kpFm3j3DT
LxcxpcIqUb4MARd17XzTiW8FvZzBrLHw4SkohBlnJGR8q4BcSlWbFUaWlajjFUO8
YzNcuvqUvsbtK2iRnEUMAdoAmNNiQV6wIVj01fEdG/VsaGkj1TJb61wt8nMxdXIE
YYhjUPPjAbHtj5mIyWjqIEp0jKfG3hPBPRkaur9ujRqh6Y7nYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+GIj8LJ579eHOr9p1tYrdtTb5aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzZiYWMwNTEtNjhhYS0z
Njc4LTg2NWQtZWE3YmJmNGIwNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUeGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNMz8vSWSxzKZTIvBCThNHcATmjzze7Z5a8YEpq+kHAa6oi6rxbWEnj
rp8bLKd/uAgTHjjYGDaib29jLGs1296LTz1T3x3jmTvQgNFcVVSQVBhb7DbwSo1n
ZZ6NM4PzZxshPkSeD20J3+UySwtfbzxZh8LDMZNsQxB05QHNC5XozCF96l4K0xlh
ClNByBgbj5xUsPGq7Dig66lE3tusIJBBUFjGNAahDgHBAwZXM3FW9IjW58tfHj8l
0uSJ7c5ioQ1j7vZMSb7V6rka4LJNqjPrbiZKBJ/Htrfvd2ANVgIfzqJvZNYhbRY8
JBofKvLSuAXS/e0RBaUlxW7nc0q8GHs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org