Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bf2ff8f-358c-3f13-b639-aae605d478e0.roa
File:                     1bf2ff8f-358c-3f13-b639-aae605d478e0.roa (raw, json)
Hash identifier:          pDMiqyPgXo1bp5jKH5vIoFRJ3UMgVxB9LiYOmUI86lQ=
Subject key identifier:   13:03:DA:29:69:20:72:A2:2F:2B:23:A8:29:01:06:85:7C:90:66:33
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1452D6C178D393A80B860
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bf2ff8f-358c-3f13-b639-aae605d478e0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.97.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:45:2d:6c:17:8d:39:3a:80:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c2e64fb0-c745-43b0-a236-c5980fbd82e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d5:dc:e4:a6:f2:47:21:47:6c:0a:74:d7:04:
                    cc:b3:d3:34:d2:5e:96:b1:b8:9f:85:ca:42:3f:35:
                    a9:08:ed:29:85:8d:d0:61:84:e2:02:9c:ba:88:eb:
                    7c:11:95:4f:5f:cb:06:dd:c0:e4:72:1b:d5:ac:91:
                    9d:2b:54:25:78:f0:17:66:ff:ed:8f:4a:50:d6:61:
                    32:6e:6f:b3:a9:cf:d0:b6:b8:26:64:91:9d:64:8a:
                    11:2d:4e:af:0e:96:1e:e5:54:98:55:fa:92:4b:80:
                    10:4a:4f:c7:44:b2:34:60:91:d5:42:3a:03:d6:03:
                    a9:7a:aa:66:e3:70:73:27:43:c9:4b:f6:69:f5:ae:
                    55:a3:66:85:fc:ea:3b:80:d8:f7:49:3d:83:84:d7:
                    ca:1c:b4:1a:f8:8e:39:af:c7:34:7a:e8:5d:73:c4:
                    fb:b7:2f:2b:45:b1:32:5e:01:ab:b0:e5:3c:44:75:
                    c5:b4:a4:77:12:ee:89:84:2e:cf:8f:18:f7:80:cf:
                    c4:2f:51:c6:1c:5e:f9:8e:74:c4:3f:c1:05:91:cf:
                    52:28:94:16:e5:99:17:cd:37:5f:7d:25:73:a4:d5:
                    98:0a:ce:f9:e8:a6:bf:43:d7:26:22:ac:3c:89:e7:
                    a7:ac:3f:f8:c7:e0:01:67:ad:6e:ab:23:ed:6f:54:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:DA:29:69:20:72:A2:2F:2B:23:A8:29:01:06:85:7C:90:66:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bf2ff8f-358c-3f13-b639-aae605d478e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:60:99:18:53:bb:7e:e4:a8:b5:90:88:31:28:da:98:78:
         ea:a6:df:0f:e4:3b:50:b3:49:da:fe:dd:11:a6:f1:12:82:28:
         d7:8c:3d:99:49:25:7f:42:4b:22:7b:a7:7b:b5:5f:a2:9e:26:
         97:2e:95:42:de:90:99:8d:74:4e:63:a9:f3:2f:d1:c8:7a:c2:
         99:b6:62:73:81:43:3e:3c:81:31:74:6c:04:ba:3a:57:61:bd:
         24:35:a6:f2:57:22:ed:54:97:16:f9:91:54:41:f9:48:82:5b:
         16:7b:7c:47:d7:04:eb:4f:db:45:25:78:38:59:a1:98:9d:f7:
         3c:68:5b:d3:3f:e2:2e:e8:9c:4d:02:fa:cc:61:65:17:e3:61:
         03:cf:86:0d:ee:d2:b3:0d:e3:cb:c8:b0:d8:fd:9c:ad:b9:0d:
         71:93:15:17:15:87:cd:43:8c:02:5c:5f:f4:c0:36:99:cb:49:
         c7:4a:95:6c:1b:98:fe:de:4c:25:56:d0:1c:92:b3:ae:ed:62:
         56:16:75:bb:60:85:a9:73:69:34:39:28:08:39:a2:8e:74:4c:
         ca:4a:72:5d:50:85:e7:86:d1:56:5b:16:eb:69:2d:fc:34:8a:
         51:06:58:ad:0c:b3:63:c9:9d:35:46:a8:51:bc:9c:fe:c4:35:
         ff:04:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:54 2024 by rpki-client on console-ams.rpki-client.org