Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/18781087-2932-36eb-ab94-bd0403b1325e.roa
File:                     18781087-2932-36eb-ab94-bd0403b1325e.roa (raw, json)
Hash identifier:          r5+6I3nt80bEc38E+6DPnt2vPKy6xL7VcJut4zFo4Uw=
Subject key identifier:   FD:F1:D5:B7:80:6A:E4:20:2C:69:91:9D:A7:97:22:8E:9D:B2:DC:0C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A79B2D1D72AB4B8BA680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/18781087-2932-36eb-ab94-bd0403b1325e.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11955
IP address blocks:        67.53.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a7:9b:2d:1d:72:ab:4b:8b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ff9c0f2d-6cc5-4a7b-a10a-e1d9ff2d5f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:04:66:a9:32:ef:99:2b:ba:c6:c3:d9:63:4e:
                    fa:70:9b:39:c5:bb:1d:70:9a:b3:c8:8c:e5:43:bf:
                    e3:7e:47:87:b7:1e:d6:ad:90:69:1b:d5:98:6d:c7:
                    e4:51:e6:ae:99:18:37:50:25:8e:40:48:eb:7b:7b:
                    9a:47:9e:86:b4:7a:bd:08:3f:af:c5:26:39:68:a9:
                    c3:ae:82:e8:f3:63:d5:43:3e:29:de:ed:84:e1:b4:
                    f0:09:5d:5c:9d:93:5f:9c:46:96:e4:0c:7f:8e:51:
                    37:a0:1b:55:ce:dc:a6:5f:4f:fd:b7:22:2d:87:16:
                    8a:30:5b:c3:1f:1a:30:bb:d5:b5:79:2e:4f:d9:81:
                    5b:28:81:91:0a:bc:3c:ad:fb:15:b0:8e:c2:bc:68:
                    42:f8:89:4d:bc:45:b4:14:af:65:3e:e6:5f:71:9c:
                    59:c6:c7:ec:6c:df:98:40:1e:38:a5:4f:b1:3a:d2:
                    c9:06:b2:ae:7f:2a:48:de:2d:bb:6b:2c:d5:7a:a8:
                    be:03:ec:1c:7b:33:4c:b4:67:41:67:f1:a2:6d:3d:
                    78:03:7e:44:a9:d4:1f:8c:3d:4a:9a:9e:67:38:cc:
                    5f:3c:1c:be:66:6b:5d:7e:a6:80:69:b7:8a:fc:c5:
                    5d:68:03:40:61:68:63:9c:c0:af:d9:57:17:e3:5d:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F1:D5:B7:80:6A:E4:20:2C:69:91:9D:A7:97:22:8E:9D:B2:DC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/18781087-2932-36eb-ab94-bd0403b1325e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:ec:61:aa:d8:95:e6:56:96:d8:69:71:e0:81:a0:c2:06:
         27:e0:4a:b8:6e:cd:56:fd:93:50:cb:2d:82:41:68:66:96:d3:
         d0:a7:50:26:0f:5a:0a:ea:d7:6d:81:a8:33:72:dc:c4:60:29:
         73:30:3a:de:eb:50:e6:2e:45:7c:a5:24:4f:9c:e6:c5:4d:e1:
         a6:52:50:3c:80:c8:4f:30:f2:03:e3:9d:24:f7:2e:e2:a3:85:
         85:18:03:2e:dc:11:07:4e:97:74:77:b1:41:09:51:fe:58:8a:
         e5:b3:d9:c9:9a:a6:7e:2d:76:bb:98:39:b6:14:83:b3:69:da:
         d0:f0:26:7d:e9:cb:2f:e4:c5:59:c7:d3:8f:11:a3:b8:3d:81:
         b9:ca:16:0f:cc:70:1d:d7:8e:0f:0d:16:1a:c0:dd:ba:d7:8f:
         82:29:e9:12:62:26:51:82:54:3f:e8:bb:aa:ff:e2:e7:45:a6:
         ea:72:20:e0:53:2d:89:52:3d:e3:28:5f:db:b6:a3:c9:26:bb:
         8a:ce:30:a6:3a:05:d0:88:0a:c8:00:82:11:0e:dd:3f:24:4f:
         fe:83:a4:f2:3e:2a:17:f9:f9:58:a8:8f:f0:39:1c:9c:80:f9:
         af:06:60:dd:fb:c0:79:46:7d:31:69:29:cd:25:a4:48:9c:c3:
         7b:e5:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:22 2024 by rpki-client on console-fra.rpki-client.org