Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0e7b808c-1921-3173-b7b1-249484fe79c2.roa
File:                     0e7b808c-1921-3173-b7b1-249484fe79c2.roa (raw, json)
Hash identifier:          8iftbLjXrHiexhMYzpzpNo6OqBhiimm+EUv0B4JvR5k=
Subject key identifier:   BD:81:EB:62:CB:C6:6A:20:2E:16:E5:C2:81:45:8A:FA:BC:E1:AE:10
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCE7A097247E79E8F211440
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0e7b808c-1921-3173-b7b1-249484fe79c2.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     7843
IP address blocks:        65.28.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:7a:09:72:47:e7:9e:8f:21:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=7e96ec6e-14a9-412a-be46-492da4062f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9d:6b:65:ea:b6:19:c3:f6:1e:25:ff:19:58:
                    9f:6c:23:ef:98:a4:94:8b:ce:34:92:f4:98:8e:e6:
                    8c:c4:7e:df:f8:46:e3:5a:40:09:6d:00:d4:53:a1:
                    20:dd:b3:32:4b:4c:31:1b:af:fd:c3:12:01:04:cf:
                    9d:37:82:16:84:92:1a:7a:d8:43:1e:d4:10:39:cf:
                    22:fe:0e:d8:51:64:e6:42:38:a8:54:64:69:20:1c:
                    e1:ca:ba:ca:f3:4c:b3:78:5c:87:71:96:72:c0:06:
                    c7:de:ce:ab:da:a4:23:92:78:c7:66:62:b9:75:53:
                    ea:33:ef:69:5b:53:b1:75:12:e6:2a:06:e4:34:89:
                    a0:05:7b:d1:04:49:9e:0c:f8:ab:91:26:48:fd:d4:
                    23:7b:8e:a1:2f:76:71:20:dd:cc:ca:f5:5b:40:c9:
                    28:99:ba:47:a8:fb:c3:3f:03:52:07:9f:db:a7:0b:
                    44:d5:02:59:8b:89:29:aa:a1:e8:d2:bd:5d:36:d7:
                    6c:bd:26:3c:55:19:a6:74:c4:7e:56:48:d4:8f:81:
                    97:29:b9:d8:22:89:b8:ba:e8:d3:2d:d7:95:59:a0:
                    3e:11:e7:dc:18:68:56:65:12:59:49:2b:86:14:2f:
                    18:46:cc:be:14:74:10:90:14:df:cc:30:eb:6d:01:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:81:EB:62:CB:C6:6A:20:2E:16:E5:C2:81:45:8A:FA:BC:E1:AE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0e7b808c-1921-3173-b7b1-249484fe79c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:44:89:75:df:34:f9:b7:5e:d9:67:bd:ac:3e:61:dc:8c:
         d5:2e:d3:58:f8:8f:49:38:02:a3:d1:ad:aa:bd:fe:96:4d:82:
         2f:72:2b:0b:ef:38:63:2e:5d:2c:64:ce:cc:3f:1d:0c:08:06:
         ea:f9:22:9a:5e:63:af:1d:bd:aa:fc:98:db:f5:e9:1e:b8:e1:
         e4:09:53:e9:fe:87:a9:4f:25:0d:18:30:f8:ca:b1:1d:6f:99:
         35:35:71:e1:f7:32:13:23:d1:af:89:7c:c5:84:4b:45:47:24:
         f5:e7:5a:49:5a:3e:9e:64:a6:91:f6:20:ac:4a:35:ba:a6:73:
         fb:18:31:5c:b9:fe:a0:1e:ba:44:a2:52:78:ef:ef:86:0f:e2:
         b9:ba:49:ec:b7:b8:14:30:01:34:ff:20:31:5e:2a:8e:a7:6b:
         2c:b2:d5:68:7a:99:b7:d1:bc:7c:98:09:66:2d:30:62:f3:55:
         f8:2d:b2:f9:55:95:47:db:30:71:69:06:8b:16:e3:1f:ae:38:
         c5:81:ce:4d:20:fc:2d:ec:a3:95:99:40:94:5a:35:71:2e:b7:
         e7:4b:12:04:78:77:8b:82:c4:ab:af:dc:a7:73:98:ba:40:5f:
         78:9c:e5:9f:d3:38:0c:ab:f2:03:19:aa:f3:d0:01:7f:90:57:
         4a:a6:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:52 2024 by rpki-client on console-ams.rpki-client.org