Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa
File:                     21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa (raw, json)
Hash identifier:          5V1D3IjiOWqIYv2cBHXbPa6XtXo8Ybo5jRa55o/wfqw=
Subject key identifier:   67:3A:58:B5:0B:6E:A8:0F:AC:61:F6:13:A6:FD:1B:E6:E9:9C:4A:39
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DDBE5CFFD4AEC85D318A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        65.34.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:db:e5:cf:fd:4a:ec:85:d3:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=d201f5f2-e23b-4eb2-be8e-ee16d06736ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:6f:cd:14:4c:71:d5:2f:e8:36:37:ff:98:
                    92:ea:ee:d2:b9:f8:33:01:b7:1f:02:c6:5e:ac:98:
                    9a:5c:60:ae:d7:0c:2d:d6:21:1b:6d:75:5f:3d:7f:
                    6f:07:51:ea:91:5a:c3:48:0e:59:8d:6a:4f:02:b2:
                    37:42:c3:19:47:87:84:79:e9:31:3a:5c:49:c6:32:
                    44:bb:1b:b4:99:e5:b5:e4:29:36:a6:c2:9e:06:53:
                    23:39:9e:48:49:4a:05:c2:24:9b:07:93:5f:c7:f6:
                    0e:e8:46:3f:9c:4e:32:3d:8e:00:20:05:0d:ca:2a:
                    26:03:e5:8b:ec:d9:e2:56:ee:a3:6e:12:de:e6:00:
                    10:69:7b:a5:88:f5:c4:58:f3:ad:1f:71:75:6b:ca:
                    d1:a2:b0:3e:84:89:90:59:64:97:35:cd:d4:f5:6a:
                    9f:35:7b:7c:26:90:a3:14:a9:aa:31:5c:be:07:0b:
                    c2:d8:90:d7:30:68:14:bc:9b:f3:58:ff:20:2a:cb:
                    40:f4:5c:c6:ae:09:3d:c2:7f:df:a9:b4:dd:3e:56:
                    8b:a7:37:6b:c2:e9:31:17:29:7b:5c:bf:b5:eb:39:
                    ca:62:12:58:1e:25:9e:33:a3:b6:81:99:12:86:59:
                    ef:7a:b4:c1:1d:34:08:73:b4:7a:a3:c9:3b:42:42:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3A:58:B5:0B:6E:A8:0F:AC:61:F6:13:A6:FD:1B:E6:E9:9C:4A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.34.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:99:01:e0:a4:e1:11:df:61:4a:3b:41:18:00:1e:08:4d:
         fe:49:57:d3:c6:ea:ab:23:af:c9:48:b8:2a:98:da:24:0c:c9:
         e0:67:7c:74:7c:3b:1d:fd:96:46:24:6a:4a:f6:b1:e2:59:b4:
         01:82:22:bc:2e:e1:03:48:93:2c:67:80:25:e8:42:a7:27:72:
         ac:69:96:fa:cf:f1:91:86:72:05:87:75:c6:11:af:78:0a:40:
         17:e5:17:15:72:87:06:43:e4:6e:e0:ab:39:66:40:d5:11:55:
         6f:42:66:f2:81:a6:f8:62:b8:3d:39:bd:5a:1f:07:15:b2:77:
         a3:1a:98:26:58:e2:9a:69:43:16:14:06:e9:e9:8d:e1:df:c9:
         e3:8b:04:25:d5:b7:86:70:e8:2f:3c:a0:2d:01:0d:0d:3c:97:
         38:77:8c:0b:1f:3b:39:85:72:2b:b9:b7:0f:fe:34:92:08:c6:
         04:42:2f:37:dd:90:55:9f:05:59:52:2f:f5:00:d0:d1:41:90:
         ec:74:b7:54:56:73:d1:6b:ec:d8:01:14:3f:89:12:dc:c0:8f:
         f2:65:62:20:3d:91:65:d3:4b:50:28:15:09:9b:42:40:8a:7a:
         de:48:e6:73:9a:c8:23:06:d6:61:6c:64:55:48:82:32:30:b5:
         4b:72:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:15 2024 by rpki-client on console-fra.rpki-client.org