Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d70cbb1-edf9-36c5-8e8f-c9b4d87ebd46.roa
File:                     0d70cbb1-edf9-36c5-8e8f-c9b4d87ebd46.roa (raw, json)
Hash identifier:          PA9ZIIRm5bdsF/jkUFkONNx7RJiNx0xHjE0jmys/7r4=
Subject key identifier:   58:0F:9D:EB:AE:E7:43:D7:52:FE:EC:FE:05:3A:32:4A:38:83:AB:B4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B693CC87C85EFA161240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d70cbb1-edf9-36c5-8e8f-c9b4d87ebd46.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        2605:e000:e000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b6:93:cc:87:c8:5e:fa:16:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=da0a3559-07c9-4c13-96ca-ccc1815a3c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:f5:96:3f:c8:5b:95:62:fd:a7:5f:58:0a:
                    d6:0a:8c:29:7b:8f:8a:ac:09:87:fa:a2:fc:4f:7b:
                    b8:55:a3:cd:31:71:64:10:29:cf:21:37:d2:94:4a:
                    fe:f5:d8:2f:2d:1d:5b:2b:d7:d8:f6:9d:bf:08:6e:
                    55:e5:ef:f4:07:f4:e1:a7:f8:ce:d3:2c:aa:17:d4:
                    6e:f1:ee:db:9a:28:4c:ac:0e:b1:55:94:7c:3c:fd:
                    7c:43:e2:93:eb:e0:86:f7:62:29:3b:55:01:45:28:
                    92:74:e2:82:9c:19:27:ce:f8:a7:fe:a9:2a:b9:72:
                    17:3b:a6:c4:59:f9:96:47:9c:2d:31:ee:08:a9:80:
                    51:dd:8c:d8:d5:ec:d3:0e:ef:37:6d:8b:50:17:81:
                    03:c0:39:fc:0d:55:bc:28:c7:22:1d:0c:52:b6:2c:
                    05:2b:a9:01:2e:f0:bf:b6:5c:c8:a0:c6:05:63:24:
                    f2:d1:5b:a1:2f:87:be:0e:86:23:d4:6e:b8:b1:e3:
                    41:87:79:6c:8e:0e:4a:29:aa:4b:17:f8:4f:99:c2:
                    49:df:a0:31:7f:d9:ca:cf:56:fa:cc:fa:92:d4:3c:
                    48:d3:22:8a:24:79:1c:29:cf:19:31:61:95:d9:21:
                    69:95:86:f0:3d:33:11:c8:d2:5b:36:88:de:b4:a6:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0F:9D:EB:AE:E7:43:D7:52:FE:EC:FE:05:3A:32:4A:38:83:AB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d70cbb1-edf9-36c5-8e8f-c9b4d87ebd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e000:e000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:d4:ed:57:eb:f1:fd:c6:b6:c3:78:2e:71:f6:10:1c:5b:
         6d:da:c6:30:07:49:1f:a0:55:93:d5:e2:72:3b:ff:1a:9e:7b:
         4c:ff:db:a8:4f:23:5f:62:48:e8:ae:c1:c9:22:69:ab:d2:1a:
         e8:c1:82:17:42:7a:d6:5d:f4:10:35:53:56:38:77:0e:ab:1f:
         8e:6c:34:b7:ed:ac:66:5a:27:eb:ff:b3:f2:36:4f:ad:c8:97:
         8c:7f:19:38:10:6c:e7:11:98:49:5d:22:27:b9:8f:a6:5f:f3:
         a0:30:32:90:24:1e:1e:c0:fc:c3:b7:fc:cc:3c:15:69:d5:8d:
         53:1e:6f:9f:22:57:60:ec:72:c2:90:40:1d:e1:55:04:fa:93:
         0f:48:c6:16:30:37:17:1c:60:0a:75:de:66:6f:35:21:b2:38:
         a5:f6:0f:f8:71:fe:db:75:8d:6d:bb:a7:a4:62:04:af:3b:ea:
         ad:3b:87:73:ad:8c:10:64:28:dd:b7:45:5d:d6:b7:a8:f2:f0:
         ac:53:e8:44:06:23:64:09:fd:e0:bf:70:b0:fa:b3:47:f3:b9:
         48:b9:7f:c5:55:ff:9c:d7:ca:97:59:b8:3b:d9:42:9b:4c:e6:
         82:00:99:f5:74:5f:17:ef:a2:86:4d:30:e6:7b:9e:4b:92:f0:
         fa:32:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:21 2024 by rpki-client on console-fra.rpki-client.org