Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ef329139-9a03-3abf-92d3-5da67ea393eb.roa
File:                     ef329139-9a03-3abf-92d3-5da67ea393eb.roa (raw, json)
Hash identifier:          Dhyvi5Wvi/oH/ddK3kZilCOYx6udV9GTki662wIcQMY=
Subject key identifier:   02:F0:CF:25:1C:44:ED:13:25:47:C5:67:FD:5E:8C:EE:7B:BD:57:8F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E8A07417C3726678E300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ef329139-9a03-3abf-92d3-5da67ea393eb.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        71.44.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e8:a0:74:17:c3:72:66:78:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=16d4840b-83f5-4c24-a119-c49ff52fb913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:2f:bf:f1:d9:d0:41:e5:cc:01:c2:06:03:
                    08:fe:2e:18:27:5c:fd:b3:13:6c:9a:78:fb:89:19:
                    be:35:df:45:30:05:25:1d:22:ce:ba:51:e4:76:74:
                    ad:a1:11:a7:2f:e4:3e:8f:03:f7:15:12:92:1a:65:
                    d9:ca:2c:a6:b0:cf:6e:dd:11:84:12:b7:ef:c4:e8:
                    03:4c:50:da:ec:a2:bd:0b:bb:3d:82:5d:a3:ba:55:
                    f4:c0:f3:d3:0d:54:a5:d6:9e:78:07:3d:84:bc:65:
                    e1:15:81:01:69:50:8d:e8:a1:2e:da:6d:dd:16:fe:
                    1d:4e:a5:7a:e9:50:e6:5f:b0:57:99:cd:f9:de:f8:
                    d8:35:99:f9:03:ff:62:8c:3a:5f:2d:2f:73:82:ec:
                    39:f7:73:e0:7f:47:5b:ef:7c:c7:f5:04:a5:b0:b9:
                    66:d6:07:32:32:d5:48:df:80:aa:f6:3b:a2:30:77:
                    a1:61:d2:2d:6b:61:20:38:f2:33:a3:43:6b:fc:dc:
                    0e:8d:bc:86:ea:2e:77:99:27:e3:23:49:95:c3:da:
                    ee:fb:70:78:48:79:86:95:fd:59:3f:8b:0d:b9:d6:
                    75:ef:9e:e6:75:3e:b2:75:88:bf:73:ec:bb:3f:2b:
                    85:63:11:e3:88:b0:c8:c4:e4:d4:c9:c2:51:76:a3:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:CF:25:1C:44:ED:13:25:47:C5:67:FD:5E:8C:EE:7B:BD:57:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ef329139-9a03-3abf-92d3-5da67ea393eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:dd:2e:a1:7a:74:80:65:f5:06:e1:37:74:0b:7a:5a:ec:
         a6:ff:a9:85:51:d6:2b:56:9a:67:31:13:c8:0c:70:f9:59:74:
         45:7b:c8:6b:9e:ee:a7:1a:42:5f:ec:ef:31:d3:11:50:63:a3:
         70:81:0d:47:6d:ba:92:73:5c:57:ce:06:23:e3:0c:1f:7c:98:
         4c:e7:b5:d3:b1:c1:04:33:4c:c6:fa:6b:45:91:82:ac:84:24:
         4c:94:f2:ee:7f:e7:b6:ea:f4:8a:df:22:06:30:ac:77:9b:ab:
         f6:9a:39:95:d2:12:13:bf:7a:e8:8a:fa:fe:fa:53:b4:14:be:
         5e:b8:4e:63:8c:0c:4e:be:f7:c4:fc:c7:12:e1:83:44:61:78:
         b8:f4:42:5d:ed:0f:56:57:7b:b2:13:f5:60:f7:47:26:dc:bb:
         ef:ec:63:7e:0a:af:cd:4c:85:a4:4c:47:6e:3f:5a:66:1e:0d:
         be:4f:32:c5:9e:4f:62:94:b4:62:9d:84:28:24:46:83:ab:45:
         ba:43:0c:9c:f6:b2:d7:cf:88:84:ab:0a:d4:50:a2:45:c7:94:
         29:1c:0c:ca:53:03:fa:d4:97:88:5f:71:f1:b1:54:79:29:8a:
         67:ca:1e:29:9d:32:5d:70:1c:c5:0f:2d:92:27:ca:67:f1:7f:
         53:f2:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:09 2024 by rpki-client on console-fra.rpki-client.org