Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2667a104-173d-3490-94db-2f7666888001.roa
File:                     2667a104-173d-3490-94db-2f7666888001.roa (raw, json)
Hash identifier:          EXng+BXOBl0zvV7assVPldvEd1lgSeFUpSlrrIM9Y50=
Subject key identifier:   85:04:5F:99:46:01:A0:15:D6:49:5E:06:DE:08:DF:D4:0D:00:E4:CB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858385DD25FB7942379B9E8931B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2667a104-173d-3490-94db-2f7666888001.roa
Signing time:             Wed 23 Dec 2020 05:00:00 +0000
ROA not before:           Wed 23 Dec 2020 05:00:00 +0000
ROA not after:            Wed 16 Dec 2026 05:00:00 +0000
asID:                     10796
IP address blocks:        65.24.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5d:d2:5f:b7:94:23:79:b9:e8:93:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 23 05:00:00 2020 GMT
            Not After : Dec 16 05:00:00 2026 GMT
        Subject: CN=27fd4696-3405-44df-92d1-d8a6b57e4859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:5c:4e:b3:00:29:a2:16:34:22:0b:05:5a:
                    39:20:51:b6:c5:64:d4:51:66:09:ef:f9:8c:da:bf:
                    c5:cb:c8:fc:44:a4:1a:e5:09:47:ec:ea:7d:db:79:
                    ca:29:cb:62:ff:08:7b:34:2e:45:39:f2:76:63:de:
                    ae:94:d0:6c:4d:67:c3:36:4e:25:89:be:7b:6d:16:
                    1e:3f:2f:a6:8e:36:2d:fc:bd:63:78:04:cd:ca:78:
                    5e:30:de:88:77:cd:c3:33:d8:35:51:1c:b4:e0:e3:
                    50:df:0f:df:df:91:b4:33:2c:3f:ed:3b:39:63:63:
                    c6:89:4a:65:b6:4e:a8:3f:b1:e4:fa:50:0a:5e:89:
                    8c:1f:fe:11:ce:8e:01:e3:4a:e8:6c:b0:2d:16:35:
                    d0:bf:c3:54:b5:90:b1:d3:73:1e:89:c3:13:ff:c4:
                    39:35:2f:be:80:b0:31:fe:c0:04:20:49:d2:75:e4:
                    09:62:bc:4e:fd:19:33:02:72:03:81:ae:45:ef:cd:
                    2e:2b:2a:02:45:17:f0:af:d0:59:cb:a1:93:ce:27:
                    c4:76:87:40:0c:44:88:78:b1:e0:0e:d8:a7:b1:4f:
                    47:30:7f:b6:d8:df:f1:4c:69:24:6e:a5:67:51:dd:
                    36:03:0d:34:61:ff:99:20:e7:c7:14:ac:94:88:34:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:04:5F:99:46:01:A0:15:D6:49:5E:06:DE:08:DF:D4:0D:00:E4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2667a104-173d-3490-94db-2f7666888001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.24.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:2b:15:a3:41:1e:73:51:47:25:4b:c4:6b:dc:ec:c6:87:
         f7:2d:e8:67:ae:57:7d:16:51:cc:65:0c:44:e9:8f:af:b2:b2:
         0e:27:cb:b4:49:81:51:d2:c6:ef:eb:cf:4c:32:34:3f:16:05:
         01:da:f1:ad:a9:d8:bf:89:89:94:d5:43:9a:72:ed:60:a0:a3:
         03:d7:a0:3a:3d:33:ed:89:39:46:e0:a6:86:68:ed:d1:89:02:
         c2:84:f0:ae:88:1e:48:1b:1c:ce:13:bf:7c:e9:54:36:58:2e:
         44:18:f3:cc:ab:81:97:bb:7e:06:f2:d7:9c:0c:1d:bd:60:e0:
         c0:f3:02:0d:b6:b0:65:11:78:20:e4:75:3d:d6:9f:07:4d:78:
         00:8a:91:ca:a0:7e:b1:28:87:c3:40:fb:77:23:ec:a4:98:5f:
         cb:70:d5:ca:53:ac:f0:0f:ac:bc:92:9a:65:78:e4:15:81:8d:
         7e:34:56:0f:8d:cf:58:73:8f:36:96:47:9b:47:95:4c:fe:5f:
         e7:69:c2:9f:56:ed:34:26:0f:7e:9f:5d:93:14:ea:8b:9c:b1:
         cc:a0:b3:c0:0f:96:fa:3e:5d:2f:74:f8:6c:05:e5:40:71:ab:
         46:cf:cd:86:f7:7d:7d:00:4a:1a:55:7a:2f:5a:04:97:b8:2e:
         50:36:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:16 2024 by rpki-client on console-fra.rpki-client.org