Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa
File:                     7d010eae-b07d-3815-afbe-2a97d3e18248.roa (raw, json)
Hash identifier:          w+R8RajPFD8MgmsMLI4Uo7Af0imavxH7wt/3ixmoZig=
Subject key identifier:   ED:9C:28:FF:57:E9:8D:FC:78:B1:34:1D:44:96:62:09:C9:25:EC:8B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F719BCDBD50C299496A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        97.71.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:71:9b:cd:bd:50:c2:99:49:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=3a919ca1-8330-4296-addf-dbb724e38157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:1c:f2:e3:bf:0f:42:aa:e5:d8:76:fc:fa:
                    e6:03:e7:eb:93:86:5e:e9:e1:25:37:d4:64:80:da:
                    6a:25:d7:b4:c9:f9:ba:57:d2:35:33:56:c9:b7:f2:
                    8e:13:9e:63:94:ad:98:17:45:9f:51:8c:a4:b9:13:
                    7c:60:25:0c:b3:c0:30:c6:0c:d6:3d:31:11:44:d6:
                    e0:1b:0a:dc:0a:fc:bc:d6:9d:d6:ff:e3:00:b7:fd:
                    4c:5a:41:bc:50:d8:48:8f:03:c4:b5:6f:62:46:1b:
                    45:29:cf:3c:4e:80:3b:5a:68:24:5d:e3:58:71:2f:
                    8d:4f:7a:22:bd:9a:bc:61:51:d4:ab:f7:ff:cf:32:
                    8c:eb:4d:fe:12:25:99:45:ee:d6:91:cd:3c:fc:2d:
                    43:d1:14:45:2d:50:51:09:0f:23:bf:ed:f3:a7:a9:
                    42:72:49:99:ec:7f:42:5d:53:3d:21:4f:a7:bb:85:
                    c1:33:ac:81:1d:bb:a1:1b:d6:74:fb:c5:52:2b:1f:
                    11:6d:fb:b0:e7:b1:87:9e:9d:72:7c:23:62:ab:09:
                    4e:95:58:fd:2f:cb:73:d8:eb:b8:bb:5d:c3:7d:25:
                    6f:54:69:d4:b6:e3:64:3c:4a:b4:8c:c3:29:b8:c1:
                    71:c7:4a:19:fe:b8:08:43:1d:e6:8d:51:64:9d:03:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:28:FF:57:E9:8D:FC:78:B1:34:1D:44:96:62:09:C9:25:EC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d010eae-b07d-3815-afbe-2a97d3e18248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:43:13:71:4e:00:2f:1f:42:1f:78:34:c1:16:67:83:1c:
         96:ba:c3:5f:30:14:24:97:2e:89:01:e9:0e:ab:fd:b8:d5:63:
         b3:d7:34:98:99:bd:32:f0:b5:5a:11:f7:97:91:5c:f7:8f:87:
         cc:20:b2:e8:e3:26:23:2f:18:82:59:0a:33:d8:8f:4f:d6:3b:
         eb:02:0d:35:62:5f:46:d1:e4:a7:e9:ad:4b:0f:7e:c0:78:71:
         8b:e8:bf:3d:68:7e:5f:27:20:40:2a:d3:27:cc:ec:46:b9:28:
         99:4b:c5:70:eb:9d:fc:ac:9b:12:0e:97:16:03:35:e7:20:c0:
         ac:80:69:46:2e:af:ca:ac:b5:2f:0a:d8:27:2e:0b:b8:4e:53:
         27:2c:3f:f3:c8:eb:ac:ef:d0:26:bd:9c:74:96:33:31:71:d6:
         50:72:ed:f2:ba:c1:51:29:38:f0:05:2d:76:95:ae:c9:9d:9d:
         0e:a3:3c:68:1d:89:d8:8e:17:3b:c6:e4:6c:a8:9b:a7:ff:91:
         50:e6:fc:b3:21:48:82:fe:78:f6:02:ca:36:38:16:fa:aa:1e:
         a5:a3:85:51:e7:33:51:7a:16:74:33:07:41:7b:3f:87:0c:ee:
         1e:0a:dc:52:e9:f4:f0:ad:d7:f4:ef:8e:f6:44:17:06:11:5b:
         0a:a0:e8:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P3Gbzb1QwplJagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
M2E5MTljYTEtODMzMC00Mjk2LWFkZGYtZGJiNzI0ZTM4MTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixkc8uO/D0Kq5dh2/PrmA+frk4Ze6eElN9Rk
gNpqJde0yfm6V9I1M1bJt/KOE55jlK2YF0WfUYykuRN8YCUMs8AwxgzWPTERRNbg
GwrcCvy81p3W/+MAt/1MWkG8UNhIjwPEtW9iRhtFKc88ToA7WmgkXeNYcS+NT3oi
vZq8YVHUq/f/zzKM603+EiWZRe7Wkc08/C1D0RRFLVBRCQ8jv+3zp6lCckmZ7H9C
XVM9IU+nu4XBM6yBHbuhG9Z0+8VSKx8Rbfuw57GHnp1yfCNiqwlOlVj9L8tz2Ou4
u13DfSVvVGnUtuNkPEq0jMMpuMFxx0oZ/rgIQx3mjVFknQN+5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2cKP9X6Y38eLE0HUSWYgnJJeyLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvN2QwMTBlYWUtYjA3ZC0z
ODE1LWFmYmUtMmE5N2QzZTE4MjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYUeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHf3QxNxTgAvH0IfeDTBFmeDHJa6w18wFCSXLokB6Q6r/bjVY7PXNJiZ
vTLwtVoR95eRXPePh8wgsujjJiMvGIJZCjPYj0/WO+sCDTViX0bR5KfprUsPfsB4
cYvovz1ofl8nIEAq0yfM7Ea5KJlLxXDrnfysmxIOlxYDNecgwKyAaUYur8qstS8K
2CcuC7hOUycsP/PI66zv0Ca9nHSWMzFx1lBy7fK6wVEpOPAFLXaVrsmdnQ6jPGgd
idiOFzvG5Gyom6f/kVDm/LMhSIL+ePYCyjY4FvqqHqWjhVHnM1F6FnQzB0F7P4cM
7h4K3FLp9PCt1/TvjvZEFwYRWwqg6Nk=
-----END CERTIFICATE-----
Generated at Thu May 8 09:32:25 2025 by rpki-client