Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11611.roa
File:                     AS11611.roa (raw, json)
Hash identifier:          9NN5JXXC/bFEXDrzwAFeTxmtMtLlnxlSuRQWIHAH3bw=
Subject key identifier:   65:5B:8F:1A:62:E4:B4:6D:50:E0:34:38:3A:7F:D5:3C:DC:E0:F3:96
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2CCC655334D5149A98A4C7AC9B58482C41AAA2EA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11611.roa
Signing time:             Wed 20 Dec 2023 18:01:12 +0000
ROA not before:           Wed 20 Dec 2023 17:56:12 +0000
ROA not after:            Wed 18 Dec 2024 18:01:12 +0000
asID:                     11611
IP address blocks:        104.234.26.0/24 maxlen: 24
                          104.234.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:65:53:34:d5:14:9a:98:a4:c7:ac:9b:58:48:2c:41:aa:a2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 20 17:56:12 2023 GMT
            Not After : Dec 18 18:01:12 2024 GMT
        Subject: CN=655B8F1A62E4B46D50E034383A7FD53CDCE0F396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:e1:4d:0d:4f:c4:4a:a4:59:68:4c:25:5e:
                    31:f1:46:1d:cc:64:de:cc:eb:52:2c:a2:e1:b8:d3:
                    42:47:42:a9:5e:d1:3a:c6:e7:43:25:2d:83:2d:23:
                    2f:93:ea:76:a7:b3:64:fa:96:04:a8:ba:19:91:05:
                    ab:02:7c:c9:34:73:5a:64:22:7d:6c:5b:a7:be:24:
                    31:62:1b:20:66:3d:13:da:d2:81:cc:dd:82:b3:5f:
                    22:bc:71:a1:bf:15:16:b5:2c:4a:92:84:e0:34:d8:
                    35:2c:9e:10:39:ea:ed:18:a3:19:5a:2d:0a:ad:21:
                    0f:ee:4d:54:ce:06:d6:ff:19:81:73:0c:85:cd:bf:
                    76:1d:45:45:3f:f6:80:69:db:8b:cc:ae:ba:ba:af:
                    eb:ce:0a:2d:66:b7:e2:6d:a9:14:09:2d:8b:0f:0a:
                    c2:ee:51:50:11:aa:63:54:f9:08:27:28:85:ac:e3:
                    a9:ba:d0:b6:6c:1f:20:c5:84:05:51:74:7b:eb:2a:
                    4c:7c:73:05:17:ba:0a:ec:a1:21:3e:4b:c1:ef:68:
                    e7:c1:8e:6d:ac:70:02:b7:1f:7a:67:c0:75:f3:54:
                    04:8a:78:85:8d:fa:37:b4:5d:d6:84:01:4d:ee:70:
                    c0:8a:ca:f2:13:cf:77:13:a7:70:50:08:dd:7e:72:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5B:8F:1A:62:E4:B4:6D:50:E0:34:38:3A:7F:D5:3C:DC:E0:F3:96
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.26.0/24
                  104.234.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:91:84:4c:9b:7f:f5:52:75:68:31:3e:ee:a2:84:15:0a:10:
         df:dd:4c:a8:48:02:b7:42:d2:96:b4:f8:07:72:d5:83:9c:2d:
         45:51:29:11:4c:92:7a:c5:ea:e2:79:fd:de:1f:f6:e6:64:ce:
         68:61:61:d8:94:1c:0e:67:56:50:4f:2b:c9:5b:22:08:31:ea:
         6a:43:31:85:2f:b3:e5:7f:38:a9:27:67:77:42:c0:86:8a:87:
         34:55:26:ef:64:dd:09:14:99:d5:a9:0e:21:06:9b:12:2c:73:
         54:40:21:4f:ea:28:52:ba:f1:0f:e4:36:db:b5:3a:98:8a:c2:
         aa:a8:67:f7:69:e4:10:c2:71:67:0b:4c:6c:04:f5:12:87:cf:
         0d:7d:b7:d7:90:b7:02:67:0c:e3:d7:16:ef:ef:ce:d9:50:64:
         31:bc:5a:9a:d1:85:23:89:cf:73:0d:dc:a7:f0:ac:36:40:90:
         6c:1a:14:38:55:0a:0d:c1:7f:3f:96:97:12:c7:ef:68:16:04:
         9a:f1:02:e8:e6:95:1a:09:32:54:13:bb:8d:f7:41:cb:e5:5a:
         c2:6f:c4:3d:d0:29:f6:78:e2:16:28:fb:67:7a:b0:a9:76:b3:
         5f:90:be:04:03:54:c9:46:35:2e:64:f4:bb:48:0d:4d:41:65:
         ce:aa:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:39 2024 by rpki-client on console-fra.rpki-client.org