Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa
File:                     0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa (raw, json)
Hash identifier:          zjmjWf9I0yVPTm+g/i8A9mAennefRgSWgCnq5DS9D0Q=
Subject key identifier:   09:0A:2B:F9:31:38:43:F6:C1:E8:53:4B:5A:03:63:58:84:83:54:EE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD6F5A9A4A11EC306A080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        98.147.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d6:f5:a9:a4:a1:1e:c3:06:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=9c9a7215-fa6c-4e83-afa1-9a7cfba48496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a0:54:c8:74:29:0f:96:fa:88:38:3f:a0:21:
                    97:4a:7b:55:07:fe:7f:9b:3a:a0:42:bb:19:95:86:
                    b3:e5:d2:a7:d5:f6:6a:85:16:c3:1e:f7:6f:4d:05:
                    3c:ac:51:bf:b0:9d:7f:17:e1:47:49:43:0b:d1:31:
                    2d:79:2d:90:00:37:c0:bf:b1:b4:33:af:d1:15:eb:
                    8b:4a:44:a3:5d:a9:d6:ec:ee:52:cf:37:b5:01:dc:
                    a2:c8:2e:8c:38:5a:3b:d9:f2:7f:59:c2:11:f8:ef:
                    f2:a5:00:fa:45:f8:11:47:04:d2:b5:61:99:dc:07:
                    7b:16:fc:cb:39:d3:9e:50:e9:02:03:10:00:9e:ca:
                    ed:49:d5:84:e6:16:4a:96:8c:44:8e:c6:bf:02:db:
                    7d:30:07:bc:33:50:67:93:96:b7:62:83:50:85:1e:
                    8a:b8:60:9c:82:18:f8:da:df:ba:e1:71:7a:a6:43:
                    aa:27:df:b8:25:6c:3a:0c:f3:69:0a:e3:0d:a1:75:
                    56:43:99:63:c7:e1:5a:9b:9a:85:1d:b3:67:3f:59:
                    d6:ef:13:df:bb:46:f1:9a:0d:f5:dd:bf:77:34:20:
                    81:f3:d4:a8:0f:6f:f6:0f:de:ae:d9:72:04:21:f7:
                    16:d9:a8:c0:ae:bf:b6:a4:25:19:ed:38:7a:4b:9e:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0A:2B:F9:31:38:43:F6:C1:E8:53:4B:5A:03:63:58:84:83:54:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.147.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:22:48:11:89:9a:96:74:e1:c7:78:56:fb:f0:77:70:25:56:
         66:ec:ed:8a:37:7b:13:25:6e:dc:81:7c:5a:62:d6:de:89:ac:
         ad:53:54:09:92:5c:d8:78:b8:8c:3c:ae:55:40:ad:bd:1f:93:
         4f:f9:c7:34:84:e4:04:29:d0:d6:a3:8d:8e:91:a4:4e:8f:82:
         7d:8a:fe:9b:ad:84:b0:ec:51:7d:ac:a1:08:72:1f:ef:d2:47:
         c7:95:83:ac:16:5c:ab:84:57:29:7e:35:29:61:5f:f8:19:bb:
         35:f8:dd:bc:a3:ae:44:ab:84:b4:91:4d:b6:4d:74:42:67:c1:
         3f:51:ff:2f:f1:46:9f:6b:27:c2:fd:5d:98:ba:22:69:e7:89:
         5f:93:6b:68:f6:53:51:7c:71:e7:ac:7a:3f:99:f8:ca:8c:cd:
         3c:b7:08:0d:84:4a:b6:47:24:6b:99:f2:22:c9:cb:7c:5b:f4:
         55:4e:1c:08:5e:72:08:6f:c0:d3:07:bf:10:3b:78:95:de:81:
         44:d2:23:d1:42:13:a8:0f:f8:af:47:7a:56:ce:9f:e0:c8:a0:
         8b:fc:ef:56:7d:3e:a4:b7:55:76:c0:c0:d9:e4:83:c4:cd:26:
         c8:cc:d5:1b:bf:94:d3:ed:c0:ca:e2:8e:a2:b4:50:ed:d4:c6:
         ab:1d:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:52 2024 by rpki-client on console-ams.rpki-client.org