Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08a23795-e1a4-340b-acb3-c2ed971439f3.roa
File:                     08a23795-e1a4-340b-acb3-c2ed971439f3.roa (raw, json)
Hash identifier:          QFvUHw3VTokbh2KI1elihCfcw8lHzbzI/TVUKVrk0mE=
Subject key identifier:   C3:4B:BC:33:44:1A:A7:00:AA:27:91:0A:76:3F:FD:42:AE:D7:F2:33
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583932194509D9E365049F68D4F4
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08a23795-e1a4-340b-acb3-c2ed971439f3.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        70.62.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:45:09:d9:e3:65:04:9f:68:d4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=f4cb0a36-66d1-402e-ba23-783c55c7da89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:f1:29:88:ab:5e:bd:04:b6:62:6a:eb:4b:
                    20:af:1c:42:ff:e0:21:b0:29:c3:0d:28:ba:ba:62:
                    31:66:45:2d:1d:4e:78:7b:5a:63:e8:b5:c5:c6:a8:
                    6d:34:fc:e2:5d:81:24:a4:94:41:15:2f:e0:a3:0b:
                    b9:9d:dd:50:f3:b3:1f:75:f7:da:05:59:7f:e3:71:
                    a3:54:0b:58:0f:ac:27:1e:3a:12:b2:39:e3:c8:79:
                    26:e2:43:43:05:c9:da:e2:07:63:48:69:4c:ac:c0:
                    78:62:04:77:b7:d5:fc:d6:ae:a3:b5:8f:d6:14:95:
                    3b:b6:98:90:7f:e4:40:f1:c3:41:35:23:ba:70:05:
                    fc:a5:b0:b6:5a:49:65:47:74:03:0b:f2:c9:6d:01:
                    8e:6b:39:0d:47:4e:49:89:d6:41:7e:8a:48:2f:6f:
                    d7:22:89:51:54:b4:a1:f0:47:d6:20:8c:33:d3:8f:
                    d2:84:2c:76:dc:db:93:12:57:04:79:03:2b:22:5d:
                    be:9c:b5:c2:1b:55:c1:a0:05:6d:23:55:1c:ba:e3:
                    63:78:12:43:25:18:34:bf:0c:98:a1:ea:ab:e8:8f:
                    a0:b1:72:78:46:ac:0f:5c:29:c9:b0:31:5e:18:12:
                    d9:1b:67:10:ce:c5:a9:31:d3:f8:44:60:3d:cf:22:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4B:BC:33:44:1A:A7:00:AA:27:91:0A:76:3F:FD:42:AE:D7:F2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08a23795-e1a4-340b-acb3-c2ed971439f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.62.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:d2:35:3a:43:04:68:7f:4a:b0:7c:92:b0:6c:65:70:59:
         77:9b:ae:0b:9e:b3:42:4e:ee:53:a7:4c:b1:7d:68:1c:d1:5f:
         86:c9:46:fc:af:fc:50:ef:a5:e3:b1:73:0c:08:eb:34:f7:71:
         3b:ba:89:ac:ce:ce:83:47:fc:76:f1:38:35:a1:e5:ca:72:65:
         07:7a:2e:d4:0d:9b:97:8d:35:2f:02:58:0c:7d:61:45:e4:4b:
         7b:80:57:f2:76:95:a9:01:82:ec:72:95:c9:57:4a:9d:cf:06:
         f8:22:ac:24:9d:68:9a:7f:f4:26:3b:b6:6c:7a:73:1f:fe:cf:
         ab:71:33:27:c8:f9:ef:4d:12:ab:22:34:db:eb:8f:cc:52:24:
         7d:05:19:3c:af:f7:de:c6:4d:6b:3b:ae:68:ae:bb:71:05:68:
         c0:5e:3f:bb:4d:31:32:a0:2e:2a:1d:18:79:fb:09:6c:64:9a:
         dc:0e:af:ca:7e:e6:b9:3c:3b:f0:ca:27:ea:74:ac:57:7d:f3:
         a3:cf:4c:41:b8:ef:93:dd:16:e8:a5:a7:7c:a9:64:75:8b:e0:
         35:cf:2e:2a:3c:34:8c:c1:d6:df:22:ee:89:e7:01:c4:b6:87:
         0b:aa:3c:43:7c:ea:f7:bd:23:df:05:32:2f:9d:a9:20:b1:1b:
         48:4e:5d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:49 2024 by rpki-client on console-ams.rpki-client.org