Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/270317a4-64ad-3595-86df-538000f968e2.roa
File:                     270317a4-64ad-3595-86df-538000f968e2.roa (raw, json)
Hash identifier:          OL4OPCsaJiUvHmxWkdjc8ysk5tsX14I9f/Vqidsf13g=
Subject key identifier:   65:E6:B0:66:3E:9A:CE:09:F9:D6:AF:B3:A3:08:A2:F2:97:09:4E:06
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1174F82C5860A186F1420
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/270317a4-64ad-3595-86df-538000f968e2.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     7843
IP address blocks:        71.74.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:17:4f:82:c5:86:0a:18:6f:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=257db188-f913-407b-a529-c7fbac804199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:9f:6e:79:bd:5e:db:98:32:0b:a0:5f:4b:
                    e6:19:b0:6d:18:bd:97:c2:51:ad:73:a1:83:eb:67:
                    b8:4b:04:26:63:86:9f:c9:4c:29:99:e0:97:fa:89:
                    14:f3:4a:0a:7f:ac:41:ee:4f:01:79:ab:d6:07:6b:
                    e7:42:ae:43:4c:c8:c1:32:d0:bc:4e:0b:fc:1e:cd:
                    ee:cf:1f:93:51:6b:87:f2:0f:61:c5:9e:3f:d4:5d:
                    19:95:39:02:a5:fd:3b:7a:28:7b:96:fe:3f:d5:66:
                    09:8b:8e:15:f7:96:4b:db:d9:54:15:a9:97:26:a9:
                    1b:60:a6:96:73:93:a5:5a:05:8e:15:a2:ab:57:2d:
                    35:b4:9a:1a:74:16:ea:30:da:b0:42:c3:40:c8:f0:
                    66:6c:17:6d:33:3e:0d:8f:26:ae:97:e6:73:d3:73:
                    81:4d:aa:45:46:97:a2:02:67:e2:44:28:ea:2a:52:
                    a7:58:8f:c4:8a:65:cb:ab:b8:3b:00:20:07:7f:3a:
                    12:75:94:d4:06:a5:c0:59:34:f9:8d:71:c2:d5:61:
                    4f:62:85:31:f1:d6:b8:cd:a6:51:87:36:92:4a:39:
                    b2:e0:c2:32:53:5b:20:fa:11:4c:fd:0d:96:69:f6:
                    1b:f8:b7:9f:c0:18:80:d1:2b:c8:e9:c8:59:6c:a6:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E6:B0:66:3E:9A:CE:09:F9:D6:AF:B3:A3:08:A2:F2:97:09:4E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/270317a4-64ad-3595-86df-538000f968e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.74.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:78:fb:14:cd:43:0d:cb:9f:ba:31:26:54:34:17:05:76:30:
         21:4b:be:86:19:e8:06:f4:7e:ab:a7:dd:fd:1a:06:4a:67:08:
         24:9b:9e:42:84:68:7e:a0:fc:58:e4:c6:6d:07:19:17:91:8f:
         89:7b:28:0a:ec:6f:8f:c4:6d:f1:92:60:6c:a6:17:1f:3f:af:
         a2:77:2c:1a:b8:fd:b7:77:e9:e4:02:75:1c:2f:25:ae:d3:c9:
         06:5d:c0:70:62:8d:c5:3f:e3:33:6e:75:ef:28:c7:46:02:ca:
         ec:e7:71:c4:30:fc:3e:a5:d2:46:7d:81:7e:78:0c:2a:b5:35:
         e5:b7:95:88:30:04:a2:a8:85:63:36:3e:c5:b9:0b:ca:2e:97:
         a7:0a:86:f1:43:ab:82:4c:77:47:28:4c:ad:2c:6c:d4:ee:11:
         dd:cf:6c:a7:90:35:c0:3b:0a:21:2d:da:6d:86:f7:52:dc:be:
         8f:a0:26:0b:6b:d5:ad:6d:e9:08:2d:b7:df:2f:9a:5c:c4:b4:
         c9:86:be:67:c4:0a:52:b9:8c:41:76:2d:a4:94:ae:0a:24:dc:
         f2:71:68:d0:9d:c0:97:cd:3a:7c:84:72:9c:f9:63:36:89:a9:
         e2:44:1e:b8:42:3a:fd:99:d8:47:30:bc:ff:cf:94:85:bc:95:
         c1:e9:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:23 2024 by rpki-client on console-fra.rpki-client.org