Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a9e89ba-61c4-3be6-9276-2e2857e712db.roa
File:                     1a9e89ba-61c4-3be6-9276-2e2857e712db.roa (raw, json)
Hash identifier:          w5BgMNQq57K9zRul65Lw18ly2Yfeer1/ORh+GmNZjkc=
Subject key identifier:   91:66:80:71:51:4C:C6:CC:92:0E:47:D1:85:5F:F7:01:BE:55:40:34
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858393218FEE6F0E2871B0E54B540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a9e89ba-61c4-3be6-9276-2e2857e712db.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     393377
IP address blocks:        96.11.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:18:fe:e6:f0:e2:87:1b:0e:54:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=c6bdde51-0e02-49f1-9061-9f96259f40a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:b8:9e:32:f1:ee:ce:24:01:a1:85:ea:97:
                    71:53:af:86:c1:da:59:fc:2c:b0:56:d3:e3:bf:ee:
                    aa:8a:3e:9f:00:43:91:83:9d:68:cf:b0:f3:e9:12:
                    8e:58:e9:1b:23:de:bf:c9:08:a0:be:05:63:95:80:
                    8e:3d:20:d1:59:bb:05:9b:a1:eb:73:a8:c5:ac:aa:
                    6d:9d:df:1b:08:ee:57:23:64:97:25:10:4f:74:0f:
                    17:74:2c:a4:1a:75:f3:4e:37:89:24:72:ed:5d:5f:
                    73:33:a3:06:22:81:75:7b:90:71:ae:45:d9:26:2d:
                    8c:fd:08:79:34:bf:06:9d:5c:89:06:f3:36:ec:54:
                    0d:36:6c:dd:14:41:d8:e1:03:71:2a:e9:b3:9c:38:
                    70:c0:10:1d:0e:26:cb:7b:21:31:5b:0a:88:5e:a2:
                    2e:b7:a9:c8:e2:0a:b0:f2:99:1c:35:9f:a8:d9:9f:
                    ee:4a:8f:dc:bc:e6:96:07:c3:bf:cd:5e:d7:0c:7a:
                    22:c0:93:1c:a5:a6:7e:43:c5:c7:b5:af:33:a1:36:
                    3d:70:6e:b5:b6:d4:c7:30:5e:e6:0a:84:da:3e:e8:
                    8c:8b:76:71:4f:41:8f:f1:b9:fc:88:04:56:58:0f:
                    59:05:6a:07:0d:21:15:24:dc:44:b3:da:1e:6e:7c:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:80:71:51:4C:C6:CC:92:0E:47:D1:85:5F:F7:01:BE:55:40:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a9e89ba-61c4-3be6-9276-2e2857e712db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.11.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:05:60:9e:60:bb:d6:dd:7e:d8:98:ae:08:1f:b0:ad:3e:59:
         04:21:0a:c2:42:8d:0d:f0:1e:b1:b6:e8:ba:73:05:4f:35:96:
         5c:1f:74:48:6e:72:28:65:e3:17:91:6b:04:e7:aa:dc:d0:93:
         8c:90:7f:3e:23:16:f2:3e:90:88:f8:7d:f4:a7:5f:c0:a7:42:
         96:dd:3b:fb:77:41:88:7e:57:80:94:bf:41:ba:0c:9f:90:f7:
         86:37:a6:b4:d3:54:d8:31:4d:21:91:97:3e:fc:b3:f2:77:89:
         52:7f:84:bf:74:de:1a:c0:c4:4d:c4:e4:ee:5c:c4:81:09:4d:
         e2:be:24:7b:7c:2f:fb:c5:0b:39:47:26:4a:ae:02:a1:93:ee:
         85:51:d8:88:10:4a:ee:91:75:47:30:88:75:0f:00:d4:87:6b:
         f6:82:04:22:a0:8e:74:7f:93:f3:9d:9f:36:d6:d9:dc:53:7d:
         00:cd:0a:e0:f1:a6:7a:18:0f:e4:61:b6:34:56:18:52:c4:66:
         a3:ba:a7:63:80:93:bb:f6:22:b3:03:a2:df:fe:ba:1d:a2:f3:
         47:f6:84:2c:9c:ce:7f:f3:4c:c5:0f:6f:08:d0:2c:09:e1:16:
         73:f7:05:87:fe:0c:c6:25:68:5f:f6:f3:fd:fb:92:8d:31:64:
         08:e4:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:22 2024 by rpki-client on console-fra.rpki-client.org