Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa
File:                     0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa (raw, json)
Hash identifier:          lsx6CEzMJ5+snSYXGWeInrAd+Em0sKFECRYG/bW+b2g=
Subject key identifier:   2E:AA:0B:E0:BD:F9:99:0E:B5:3D:EF:C1:E0:00:12:CF:30:A2:C3:B0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E40D0C19DF4557D547E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        96.29.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:40:d0:c1:9d:f4:55:7d:54:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=d21ae891-eb57-48ff-b9b5-23374cf16559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:4a:62:c5:b7:68:e2:e6:ef:cf:57:ef:c9:
                    bd:3b:40:50:46:03:d2:2f:57:ca:cd:72:eb:11:42:
                    0f:97:40:84:31:4d:fb:76:bb:52:8b:4b:e6:b0:39:
                    83:60:aa:4c:32:24:0e:10:58:5f:d3:48:4a:6d:ce:
                    eb:ac:a7:66:aa:7e:52:13:14:2e:02:2a:d2:c3:89:
                    bc:94:ad:14:46:20:b9:a2:bb:c8:1f:b2:c5:82:27:
                    e0:11:92:1f:a0:17:3c:c7:f9:4b:db:5f:87:d5:5b:
                    44:c3:b9:27:e6:78:1d:f9:16:5f:5c:1e:90:5b:79:
                    76:35:8d:83:1d:dd:cd:8d:3f:c5:26:1c:43:04:1c:
                    5f:10:a3:60:1b:fe:41:ae:80:11:b4:ad:1c:29:80:
                    5c:f7:f7:fc:9a:28:21:f2:15:e4:6c:7c:77:c6:5c:
                    9f:6a:45:d2:61:dd:e7:70:4e:53:a4:6d:bf:ea:4c:
                    82:a1:07:16:3d:f7:8c:cc:da:4b:a7:ad:52:66:48:
                    ab:8b:5c:7e:1e:7c:6b:1a:30:25:c2:2c:97:1c:8d:
                    c3:c1:1b:11:bf:f0:81:83:21:bb:fe:b6:76:87:1f:
                    a0:d8:ca:c9:0d:e7:45:fd:0b:a0:66:b3:66:7a:50:
                    3e:df:15:67:91:ae:46:97:53:c5:ce:5f:69:1e:04:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:0B:E0:BD:F9:99:0E:B5:3D:EF:C1:E0:00:12:CF:30:A2:C3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.29.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ee:ef:8e:5d:88:54:96:db:36:53:4a:d5:bf:62:19:73:2a:
         df:61:61:42:51:7c:28:1e:d2:b0:b4:92:98:e4:53:cc:60:7a:
         84:0c:0a:b1:7b:1a:c2:da:fe:7a:2a:30:53:c6:3a:0d:6e:d2:
         76:aa:22:59:90:8e:d9:bc:89:ce:9f:be:1d:20:48:05:77:a5:
         c8:17:99:2c:2a:0e:f4:bf:7e:c4:f8:0c:98:2f:9d:28:6b:2b:
         6c:dc:22:8b:f7:24:e4:61:87:f1:f3:87:73:3e:3a:26:1a:ed:
         10:72:bd:ad:d0:87:28:20:1a:09:47:3e:b9:91:14:5a:29:b3:
         be:9f:5f:4e:3d:d5:83:1f:50:7c:e1:b9:b0:c0:aa:16:a2:9a:
         ab:51:95:80:2d:d5:b9:c5:94:ed:99:41:72:88:c3:85:94:b0:
         73:ae:bb:bc:a6:7b:f5:13:d8:25:ef:64:ae:ca:e0:36:11:a1:
         e9:15:11:dd:e0:89:a7:80:7c:ed:1b:33:65:7a:7f:76:dd:ff:
         0f:b8:03:33:29:61:e1:cb:92:f1:4e:d5:4b:6c:9c:ff:7b:a3:
         6b:a4:3b:6d:2e:c0:28:bc:46:01:1c:15:df:8e:5b:54:e6:99:
         d2:31:5d:8b:70:72:d6:30:89:d1:ac:af:12:1b:94:b2:61:fd:
         a9:32:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:12 2024 by rpki-client on console-fra.rpki-client.org