Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfda7b9c-5d95-3fed-a0a1-07da45d88d74.roa
File:                     cfda7b9c-5d95-3fed-a0a1-07da45d88d74.roa (raw, json)
Hash identifier:          nL/lhOiLIHU9QME1i45jLAQECn7p8rMqiu6hVOCL7lQ=
Subject key identifier:   45:41:A6:AE:9E:0D:0B:D0:32:B9:95:05:6D:64:1B:FA:99:13:7E:E9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838AC0A7C6FF7E20EF03AC2F600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfda7b9c-5d95-3fed-a0a1-07da45d88d74.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        71.46.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:0a:7c:6f:f7:e2:0e:f0:3a:c2:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=abfe3b84-a6b9-4e29-8086-2ce2fd8fe9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:8e:6a:85:53:d0:61:69:a1:c3:9c:73:b6:
                    bf:31:3c:0a:a2:2c:5d:b3:e9:2c:41:4e:51:b2:3b:
                    cb:64:8f:8f:1f:28:b7:72:de:e5:a3:c1:cd:6b:9d:
                    c9:18:9f:5e:87:22:2c:17:db:e7:69:e3:ad:2b:26:
                    78:7c:f5:11:ed:f4:c0:8a:ae:6f:80:c3:4c:cb:cf:
                    33:66:2d:29:80:ee:d2:16:63:57:60:13:47:03:fd:
                    3b:3a:c4:35:15:30:a6:08:62:ba:4b:c1:64:2e:e7:
                    d1:37:95:96:c5:dd:07:61:18:b4:9e:ed:9f:cd:85:
                    29:29:9a:75:6e:9a:a0:cb:9d:d4:75:6f:8a:f7:50:
                    b7:36:52:7d:60:ee:11:a2:44:de:4d:42:bc:7d:ee:
                    af:66:fc:f8:c7:23:87:0b:5c:97:3e:db:fc:f3:db:
                    fa:7d:e7:3f:5b:1d:6f:d8:88:db:4b:99:eb:26:a7:
                    df:1f:6a:b0:03:52:76:6b:7e:22:a3:5d:c8:e1:d0:
                    d6:36:f0:7c:d1:18:12:43:82:56:44:3d:73:f7:24:
                    12:a9:bc:09:c6:7f:06:78:d7:34:15:be:59:9f:73:
                    6f:0b:94:0e:63:c2:a5:7d:cb:af:6a:0f:05:33:2d:
                    25:c0:46:7b:da:e4:14:83:8a:a4:07:b0:a9:31:34:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:A6:AE:9E:0D:0B:D0:32:B9:95:05:6D:64:1B:FA:99:13:7E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfda7b9c-5d95-3fed-a0a1-07da45d88d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:47:88:df:98:14:01:b2:a1:be:98:02:9b:fc:56:27:85:d1:
         9d:a1:aa:95:ed:b4:da:6d:eb:b2:1f:ca:a6:7b:87:64:ba:c0:
         69:77:6d:49:32:2f:d6:2b:2b:53:bf:fa:18:b4:fe:c2:62:66:
         13:bb:a8:19:6a:a9:b8:7c:a1:76:42:a5:ac:12:53:76:d0:0c:
         b2:d7:ed:74:d8:8c:1e:15:a0:90:07:29:f1:73:84:59:68:9b:
         46:da:0d:2b:dd:cf:8c:fb:7f:4d:c8:ec:43:5d:7e:7d:e5:84:
         35:6b:36:bb:5f:63:03:05:a1:12:e3:ba:5c:ca:22:3f:3a:b4:
         66:b9:93:ab:b9:c3:df:61:46:11:2c:62:3b:9b:41:7b:3f:5c:
         f5:43:89:cd:7c:2d:1b:d3:34:fc:c2:a6:f0:9c:78:99:f8:c6:
         ad:b6:4c:0f:1c:f4:14:b1:08:d7:34:3c:ce:df:8f:5d:d8:d8:
         ee:7b:29:d8:82:94:91:99:37:13:97:f5:f3:11:63:00:99:aa:
         a6:f7:69:d3:84:49:08:07:84:92:b2:46:38:da:56:76:5f:9c:
         b7:24:04:d8:87:88:19:de:27:d3:ad:43:98:c2:a1:61:80:14:
         4a:11:2a:dd:11:99:ae:87:cc:17:78:df:72:79:c3:9a:44:59:
         d2:bf:40:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDisCnxv9+IO8DrC9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTIxMDEyMDA1MDAwMFoXDTI3MDExMzA1MDAwMFowLzEtMCsGA1UEAxMk
YWJmZTNiODQtYTZiOS00ZTI5LTgwODYtMmNlMmZkOGZlOWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArImOaoVT0GFpocOcc7a/MTwKoixds+ksQU5R
sjvLZI+PHyi3ct7lo8HNa53JGJ9ehyIsF9vnaeOtKyZ4fPUR7fTAiq5vgMNMy88z
Zi0pgO7SFmNXYBNHA/07OsQ1FTCmCGK6S8FkLufRN5WWxd0HYRi0nu2fzYUpKZp1
bpqgy53UdW+K91C3NlJ9YO4RokTeTUK8fe6vZvz4xyOHC1yXPtv889v6fec/Wx1v
2IjbS5nrJqffH2qwA1J2a34io13I4dDWNvB80RgSQ4JWRD1z9yQSqbwJxn8GeNc0
Fb5Zn3NvC5QOY8Klfcuvag8FMy0lwEZ72uQUg4qkB7CpMTQIyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVBpq6eDQvQMrmVBW1kG/qZE37pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2ZkYTdiOWMtNWQ5NS0z
ZmVkLWEwYTEtMDdkYTQ1ZDg4ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRy5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZHiN+YFAGyob6YApv8VieF0Z2hqpXttNpt67IfyqZ7h2S6wGl3bUky
L9YrK1O/+hi0/sJiZhO7qBlqqbh8oXZCpawSU3bQDLLX7XTYjB4VoJAHKfFzhFlo
m0baDSvdz4z7f03I7ENdfn3lhDVrNrtfYwMFoRLjulzKIj86tGa5k6u5w99hRhEs
YjubQXs/XPVDic18LRvTNPzCpvCceJn4xq22TA8c9BSxCNc0PM7fj13Y2O57KdiC
lJGZNxOX9fMRYwCZqqb3adOESQgHhJKyRjjaVnZfnLckBNiHiBneJ9OtQ5jCoWGA
FEoRKt0Rma6HzBd433J5w5pEWdK/QN8=
-----END CERTIFICATE-----
Generated at Fri May 10 08:52:08 2024 by rpki-client on console-fra.rpki-client.org