Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f26d8d6-cc94-38ba-88c3-cbc2123c3781.roa
File:                     1f26d8d6-cc94-38ba-88c3-cbc2123c3781.roa (raw, json)
Hash identifier:          muH9QS6oat0stjDOX1Eh2fLKDv1RPdrHQaAEj7h/0rw=
Subject key identifier:   64:79:5B:95:C5:1F:65:F7:EA:98:E6:86:54:B7:74:EC:1B:59:D9:AF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838313001EB7B068222C1371E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f26d8d6-cc94-38ba-88c3-cbc2123c3781.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        68.174.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:30:01:eb:7b:06:82:22:c1:37:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=5c5ce148-a2d6-478e-abaa-f82f7fcc9a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:9d:7f:44:1c:b8:83:1a:cf:77:b8:17:62:
                    c5:90:d7:80:47:44:9d:60:cd:69:3b:fa:b4:8f:d3:
                    f2:b6:cb:90:3a:4d:e0:6d:25:24:fa:a3:20:ed:65:
                    19:f8:7e:31:cd:21:bd:b3:be:6a:22:11:1d:b3:eb:
                    da:53:dd:20:49:2d:d7:28:3b:1a:a8:54:dc:73:13:
                    0d:b2:b4:e6:98:e5:5f:ea:0c:42:5d:5e:52:98:87:
                    8b:0f:5b:81:68:bf:49:ad:08:69:45:8d:ba:1d:60:
                    ef:96:b1:ab:99:9e:e0:84:14:72:6f:68:e8:d4:b3:
                    49:5f:32:df:c8:37:79:ad:86:32:09:62:e8:b9:0e:
                    5d:af:b9:a6:a9:5f:d9:bc:cb:c1:3f:74:1f:49:02:
                    c4:d0:59:a7:72:d5:2a:28:f9:7e:91:ff:ed:0d:5d:
                    39:cd:85:c5:c2:9c:cf:75:ec:a2:4e:2a:57:c1:f4:
                    31:b0:57:e5:cf:0d:23:11:8c:69:3b:0b:ae:8d:36:
                    5d:91:f6:bc:4d:91:b7:63:52:ec:e1:dd:ab:ea:66:
                    98:86:34:f4:bc:17:d4:93:68:38:67:99:4a:39:8c:
                    9e:75:1f:a5:69:35:39:c2:05:1d:95:7f:90:a8:47:
                    27:77:d9:96:3f:d3:8f:e7:68:2d:fc:54:6a:64:2d:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:5B:95:C5:1F:65:F7:EA:98:E6:86:54:B7:74:EC:1B:59:D9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f26d8d6-cc94-38ba-88c3-cbc2123c3781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.174.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:47:9c:3c:cc:6e:ca:9f:31:6b:13:00:71:73:5c:69:70:cf:
         68:6b:6e:57:0c:11:e6:ac:ad:77:4c:cc:ec:d8:5e:9c:36:b4:
         7c:92:37:f7:41:1a:1c:d3:dd:d9:20:d4:87:e0:54:ff:79:22:
         4d:b2:13:a5:1f:13:16:c7:fb:e5:58:d1:58:8f:bc:be:83:91:
         00:0f:64:e4:a5:d6:c8:8e:25:8f:0f:cd:cf:5b:f9:68:56:c5:
         40:73:9a:c3:04:eb:aa:6a:96:f6:1e:81:39:16:31:61:a5:f4:
         97:15:66:7e:17:28:f3:96:08:54:83:b8:77:04:f1:8b:c4:22:
         6e:d7:6b:41:08:6a:5e:72:ee:b8:95:35:8d:ed:27:67:d5:04:
         b8:ec:6a:7b:06:18:99:b5:10:9a:a9:08:ef:22:70:1a:48:ed:
         dd:2f:98:4d:85:64:76:bb:3c:bc:0b:1c:ef:b4:a5:ce:d5:4a:
         f4:92:e4:79:cd:62:d3:93:5f:fd:4d:90:ed:59:ce:26:42:e8:
         b8:1d:aa:a1:c4:26:d6:bd:40:a8:6e:60:a5:73:ad:f3:44:b4:
         fc:17:f8:40:3c:88:b2:9a:cb:9c:bc:df:9b:6a:09:23:c3:48:
         46:c0:24:c7:fe:55:ee:79:81:3f:68:7b:bc:27:91:27:95:8e:
         db:aa:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:55 2024 by rpki-client on console-ams.rpki-client.org