Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d4ab8a0-c0aa-38f9-ad5b-c323d1f220f7.roa
File:                     2d4ab8a0-c0aa-38f9-ad5b-c323d1f220f7.roa (raw, json)
Hash identifier:          ZHkOKVP94NnaI6D4qdPiouRmkNxHHQVdwTVCaSWfpKY=
Subject key identifier:   B1:51:90:0C:F2:65:92:E6:49:D4:8E:A6:C7:FE:CF:4E:10:17:C6:50
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6402FECE72E9F0E7D040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d4ab8a0-c0aa-38f9-ad5b-c323d1f220f7.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11955
IP address blocks:        2607:fcc8:afc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:64:02:fe:ce:72:e9:f0:e7:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=6d207e90-c056-49d6-86fc-df0884443250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:ef:12:50:bd:17:32:e3:c6:18:e4:07:ff:
                    18:f6:14:5a:40:94:b5:b6:b1:01:27:14:71:49:43:
                    32:05:40:33:74:ae:5a:15:93:ad:01:d4:cf:d7:ae:
                    15:df:10:ae:83:be:42:49:6e:ff:8f:13:3c:40:da:
                    59:3a:02:a7:f1:8f:d4:90:d6:0c:a2:e6:d9:99:92:
                    2b:01:55:cb:70:c6:c9:b3:02:04:7a:d8:2d:70:a2:
                    85:1d:4e:3e:da:c1:0d:69:b9:8c:2c:a4:63:ee:aa:
                    5b:ef:ac:2a:67:35:ee:61:5e:b7:da:e8:8d:3a:41:
                    1b:22:09:35:29:ac:88:b6:a5:1a:73:8a:b2:92:eb:
                    e1:98:78:79:3a:68:0e:55:26:e1:e2:5a:a1:12:d7:
                    81:1f:cc:18:c6:67:c8:1c:f8:53:5b:7b:cc:bc:51:
                    6f:5d:6f:6c:ac:99:ff:73:d1:65:14:06:04:8f:3d:
                    f6:0a:17:a1:d6:c5:74:73:0d:0c:9f:ad:2f:a8:b2:
                    6f:08:20:8f:83:f6:eb:3b:ea:d5:fb:41:2f:f7:7f:
                    2e:9b:9d:62:12:ec:c7:1c:34:99:bc:88:52:71:6f:
                    ff:c1:e1:57:69:90:1d:f9:2b:bd:44:18:31:4f:50:
                    fd:24:13:ad:4e:d2:c3:28:57:24:11:5b:58:5d:22:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:51:90:0C:F2:65:92:E6:49:D4:8E:A6:C7:FE:CF:4E:10:17:C6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d4ab8a0-c0aa-38f9-ad5b-c323d1f220f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcc8:afc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:be:e4:cd:e8:cb:3b:d4:ce:81:36:63:58:a0:bf:0e:53:96:
         19:cf:4f:45:82:c3:f8:35:d9:1a:17:d6:f5:b3:e4:4a:e9:f8:
         c0:f3:36:78:49:0a:9b:e2:e5:1c:75:67:0e:4e:1c:fc:b6:bc:
         d9:46:fd:21:f7:a3:ef:ae:2b:d3:28:5f:46:e6:dc:21:db:f1:
         19:f0:f0:f2:0a:a0:4e:42:63:ac:9a:d7:df:70:52:74:f6:35:
         16:93:ab:1e:a3:de:a4:03:30:6e:80:22:b2:85:17:11:24:14:
         b8:55:4d:bc:c6:69:7c:b0:28:e2:1c:54:f1:22:ee:f7:55:d3:
         c4:f1:03:a7:28:10:02:f7:15:b5:c4:17:38:3d:e7:70:e7:a9:
         c9:5b:93:89:68:07:79:87:eb:9d:38:4d:27:d3:d6:f5:c3:08:
         6d:c5:12:5f:73:11:0d:79:4f:42:07:8c:b0:b0:1a:b8:42:85:
         07:65:36:12:92:15:85:25:c4:ce:31:06:73:14:cc:fc:8e:4d:
         25:fb:60:94:10:03:87:49:50:e9:22:59:9e:34:07:f1:9b:87:
         39:97:10:ae:7d:8b:ca:66:d1:14:46:02:a6:3b:a5:64:e3:1c:
         b7:27:d3:b5:c6:dd:d8:71:30:82:6b:2d:9c:16:2d:9b:59:ed:
         29:36:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:44 2024 by rpki-client on console-fra.rpki-client.org