Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/213af8a5-9d08-39d2-afea-b98623f0dd09.roa
File:                     213af8a5-9d08-39d2-afea-b98623f0dd09.roa (raw, json)
Hash identifier:          dZ1hdF0VUOvenz0v3ttt7aMM6oNjbJp87vG/hXwR/ZM=
Subject key identifier:   4D:E5:67:BA:97:00:3F:2B:B9:97:3F:12:43:B2:28:5C:66:E5:36:B8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858385DD2204403E74CF34B2F7640
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/213af8a5-9d08-39d2-afea-b98623f0dd09.roa
Signing time:             Wed 23 Dec 2020 05:00:00 +0000
ROA not before:           Wed 23 Dec 2020 05:00:00 +0000
ROA not after:            Wed 16 Dec 2026 05:00:00 +0000
asID:                     7843
IP address blocks:        69.134.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5d:d2:20:44:03:e7:4c:f3:4b:2f:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 23 05:00:00 2020 GMT
            Not After : Dec 16 05:00:00 2026 GMT
        Subject: CN=341e2740-9353-44db-ac4f-bf13fd38e7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:92:24:63:37:37:77:60:65:ae:df:5f:2d:
                    ef:4b:67:08:bf:d6:82:48:5e:36:88:5e:b5:d8:ce:
                    f2:e3:8a:86:af:3d:52:b1:fc:9a:1d:38:e2:e2:3d:
                    bc:0c:69:89:6f:65:22:76:7d:70:09:99:de:9a:59:
                    52:f4:51:b5:fe:37:2e:18:ad:85:d7:58:56:01:dd:
                    5a:f6:46:4e:f0:c9:10:33:93:a3:b2:7f:a8:ee:ca:
                    ae:5e:2b:16:4f:8e:71:a9:f5:77:a6:88:e4:40:c6:
                    6c:36:13:e9:d7:e4:93:62:fc:ae:20:36:25:d0:fb:
                    66:8c:59:fc:10:81:ef:6b:08:34:d4:68:dd:e2:6a:
                    b2:6b:90:2f:47:0c:f1:e1:28:35:09:4b:c2:9b:fd:
                    3c:99:45:6f:97:29:97:bd:7b:4a:0e:5f:6d:b9:33:
                    0d:e1:40:cf:10:c7:bb:e5:99:bd:94:f8:a6:f4:9c:
                    34:15:71:5b:d0:e5:01:32:4d:b2:95:2d:33:e8:3a:
                    32:2e:48:5d:f2:53:75:c3:ec:6f:9f:9c:59:eb:66:
                    25:f5:ef:c4:5f:13:3e:1e:38:7e:d3:a7:15:5f:4c:
                    96:0f:0d:4f:d7:8c:3b:f5:e7:e3:42:c9:cd:51:e4:
                    a6:d5:0f:12:f2:76:df:77:b6:46:0c:b5:21:1d:db:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:67:BA:97:00:3F:2B:B9:97:3F:12:43:B2:28:5C:66:E5:36:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/213af8a5-9d08-39d2-afea-b98623f0dd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.134.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:20:ec:30:1b:ea:cb:f6:1f:58:9a:40:96:93:83:40:35:1e:
         a8:27:23:2f:e1:fc:37:30:f0:d1:9d:b7:53:16:61:be:f7:1c:
         aa:9a:35:ce:94:70:15:5b:67:91:51:a9:d5:ab:27:a4:f4:6f:
         f1:f8:fd:fb:00:4d:7f:1c:4a:55:7d:5f:4c:8f:25:8a:fd:83:
         30:63:83:b1:5d:1a:94:99:f6:b6:5a:32:30:66:2b:b2:e3:0a:
         74:6f:57:c1:0e:11:39:9d:8c:aa:53:7d:46:ce:6f:71:ac:47:
         5a:70:ea:f9:69:4b:a3:5c:fc:86:6f:bd:81:9b:c7:87:0b:bb:
         91:5a:f7:23:67:83:fa:2f:05:5e:3a:50:3f:53:73:f1:f7:d6:
         1e:cb:a5:19:26:ca:52:03:24:53:ec:5c:45:6a:43:90:3f:93:
         79:c3:7c:f6:bf:39:fe:33:c3:fb:c3:76:53:0a:af:b7:ca:17:
         23:76:46:28:db:40:97:33:5a:5c:7a:1b:11:a6:33:b4:c1:1e:
         e5:7a:01:e0:9c:e3:c4:96:a6:a9:1f:1c:79:c4:33:96:1f:b0:
         5a:74:ee:a0:62:1a:fb:f0:d7:ff:36:3f:91:6d:f4:c4:c8:14:
         f8:91:b3:53:27:8c:1c:6b:d5:c0:59:23:2b:fa:b0:3e:48:50:
         eb:ca:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:23 2024 by rpki-client on console-fra.rpki-client.org