Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa
File:                     c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa (raw, json)
Hash identifier:          tv3QuFvsWjR0yCAy54GFkpVzjN1xyEBJr+zaewKaCTU=
Subject key identifier:   E4:FA:0F:EC:58:F9:B3:98:2A:50:94:A6:81:B1:C1:EE:45:D4:E3:C8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E3BEECFEBDCD3CE3C480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        97.71.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e3:be:ec:fe:bd:cd:3c:e3:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=05253d66-d248-4e7c-8afd-bf0a1cc17f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:c8:ad:1f:7f:1b:ae:ff:7a:31:6b:6d:b9:
                    cf:91:7e:f0:44:c1:20:94:07:e8:60:90:c5:3f:f1:
                    37:f2:02:71:0c:f9:39:c1:c7:91:36:8a:37:25:bd:
                    58:9c:bc:b8:ac:03:e3:8d:34:0b:7b:74:e5:7d:82:
                    54:39:e4:cf:e0:67:ee:0c:12:08:74:2a:39:76:ae:
                    ff:f4:a7:17:2c:9c:54:76:a3:16:d7:0b:8d:84:bb:
                    20:9f:a0:1e:ce:8b:1f:d6:0d:0d:db:0d:52:42:a7:
                    d9:bf:b5:ff:f6:04:0b:69:41:70:f0:7b:c4:78:ab:
                    45:14:98:0e:ef:61:8e:2e:91:79:1a:9a:6a:71:43:
                    92:10:53:05:f1:39:d6:c6:2b:2c:96:59:e0:72:e1:
                    28:13:e5:d7:59:11:d9:2c:94:e3:8b:71:39:f3:78:
                    36:a7:86:e8:94:6d:3b:4c:4e:66:d2:b2:19:b0:41:
                    68:5c:54:db:90:24:ba:81:14:f5:58:99:51:42:43:
                    22:ea:f2:6e:f4:97:67:6e:c0:5c:f7:d4:af:c2:fe:
                    f7:50:39:99:43:a3:74:e7:62:e9:25:7e:f7:00:42:
                    34:b5:63:2c:fe:7a:36:73:33:d6:37:2a:65:53:23:
                    42:69:75:2e:d2:a4:49:b2:80:05:2f:ce:79:ec:d2:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:0F:EC:58:F9:B3:98:2A:50:94:A6:81:B1:C1:EE:45:D4:E3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:97:b2:32:79:ea:94:cc:38:10:14:79:e1:ec:3f:29:08:
         db:c8:bd:fb:42:8d:2a:37:45:75:c6:12:98:3c:78:d0:b1:45:
         b6:11:0c:8e:dc:e9:8d:ca:5d:45:8d:66:a5:05:0b:3c:b6:29:
         da:88:43:df:d4:64:a8:83:59:91:9b:f9:03:b9:84:bd:6d:92:
         86:bb:b9:5a:29:21:ef:bc:2f:d6:27:62:54:bd:65:05:cb:ff:
         68:3b:bc:92:f9:99:15:cc:27:b6:0f:d3:97:6c:87:ff:9a:8d:
         bd:f6:5d:37:bd:5d:ec:01:a5:02:32:d1:6d:15:0e:dc:1c:95:
         ef:86:8d:88:98:bd:f4:b7:e4:7d:bc:17:2a:af:db:65:ba:c7:
         b7:9c:70:47:5a:32:4a:9d:26:ff:bf:56:14:cc:aa:50:34:c5:
         a8:c4:e8:9d:14:87:0a:1e:be:56:19:8a:dd:ea:d3:58:10:65:
         64:aa:4a:16:b8:d5:c3:c2:8c:f9:1b:48:85:1c:92:89:a1:6d:
         ad:74:48:01:38:c8:54:d6:73:26:b7:66:ed:d5:1d:3d:bc:ba:
         03:0e:dc:15:ba:6d:1e:91:b7:18:8f:fa:ec:64:68:7d:d6:eb:
         a0:4b:53:54:ed:77:8c:cb:ee:dd:85:71:43:59:92:b4:97:28:
         14:5c:62:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:09 2024 by rpki-client on console-fra.rpki-client.org