Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa
File:                     10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa (raw, json)
Hash identifier:          QVvyWBHgXbpGWn8qTuxnscQkBGicWIBANKgUNn/e/vI=
Subject key identifier:   23:8C:2E:83:91:37:19:51:71:3E:5E:E6:FA:6E:E7:18:94:26:39:ED
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD2F7C6BD6A80012DAEC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        65.185.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d2:f7:c6:bd:6a:80:01:2d:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=f84b306e-5357-47c4-8aa5-2b51d4f7f5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:d5:8a:9c:6c:e6:02:2f:79:16:c8:1e:34:
                    bf:ad:b1:d2:63:26:77:57:7b:38:a7:ce:f0:52:af:
                    4f:22:16:e7:f3:b6:65:04:cd:51:3d:a5:58:01:d8:
                    19:28:7b:e2:1e:d7:05:fa:b6:81:81:54:a6:4b:77:
                    8c:fe:6a:f6:d9:7c:49:5e:d9:34:78:da:84:f2:86:
                    76:d0:cb:2b:51:a2:62:b0:f5:df:be:1f:03:6c:8a:
                    96:32:91:05:00:e2:e2:a5:3b:fd:1e:6b:e0:ff:07:
                    5d:56:1b:9c:bc:9d:55:1c:56:7f:61:0f:37:d2:3b:
                    54:ed:69:61:f1:4d:7a:67:71:4e:54:f5:eb:46:11:
                    be:61:cc:39:2e:07:53:97:86:f5:1a:20:5c:d8:f0:
                    d5:2b:65:0a:2d:8f:43:dd:dc:9d:2e:5a:c5:d6:f5:
                    c7:60:bf:8b:11:6e:97:69:1a:f9:70:c4:97:5a:a3:
                    a4:59:86:c7:23:1e:95:ab:68:3f:40:3a:f5:bc:c4:
                    b5:43:d2:5d:79:c9:34:51:1b:84:6e:39:b2:4e:bd:
                    df:6d:20:ae:23:9a:a9:61:2e:b8:3c:3a:57:09:10:
                    7d:bd:3d:1f:38:96:ac:ec:a4:c7:a5:d7:0d:60:65:
                    b5:f9:fc:83:70:93:14:12:8b:6e:f7:91:d1:e3:bb:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:2E:83:91:37:19:51:71:3E:5E:E6:FA:6E:E7:18:94:26:39:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10d03987-92c4-3af8-8c54-4a8f669f8d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.185.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:47:3b:59:e6:00:be:18:4a:26:3f:1c:68:a4:b2:a2:57:
         53:5d:5d:c5:ae:7b:b6:5e:41:04:a1:35:e3:ad:16:f9:8e:6c:
         59:16:bc:a1:10:f9:ec:d5:b4:07:75:cb:fa:9d:4a:6a:0b:d6:
         e7:b2:18:e0:1b:5c:e7:ce:d2:a1:8d:96:03:3a:f8:99:9f:32:
         c8:c9:4d:d7:c0:f9:0c:6a:18:05:3c:b7:39:e2:92:9e:8a:8b:
         ce:a3:ba:22:1e:92:07:0d:18:13:5e:18:d0:87:bc:e2:b4:d9:
         aa:57:12:59:c8:b0:99:86:fb:ec:a0:1d:4d:f0:1d:4a:53:bc:
         d3:b1:d4:fe:75:cc:dd:25:d1:d4:cc:3a:24:62:f5:a1:08:06:
         32:26:69:c4:66:01:21:49:e7:09:6d:57:82:75:9c:9c:74:21:
         f7:69:7a:88:c1:c9:2f:c3:c9:61:84:b2:31:27:84:bb:0d:76:
         f6:c6:22:f2:3d:04:9b:e4:70:64:68:c5:45:33:c4:6d:a9:6c:
         d7:08:86:1f:2c:4c:f5:48:e6:d8:52:a8:ee:87:91:87:91:8b:
         79:bc:a5:13:51:89:3d:6b:73:07:b7:12:ec:9b:58:e4:15:08:
         3c:4b:31:d7:0b:2a:12:41:4f:45:d3:a9:b9:c1:97:48:5f:48:
         d4:f5:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:04 2024 by rpki-client on console-ams.rpki-client.org