Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/312fd4e8-917b-3bac-a78b-97fc9d62a77b.roa
File:                     312fd4e8-917b-3bac-a78b-97fc9d62a77b.roa (raw, json)
Hash identifier:          7J4A9pIVeuB5f4uxECqR2v/vYMtfn7/vTNXUl5MSMlo=
Subject key identifier:   AB:BD:5E:1E:CA:93:AE:27:05:7E:4D:93:C3:B7:D1:66:F2:C9:2D:16
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1445EEB2C2A000ED86480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/312fd4e8-917b-3bac-a78b-97fc9d62a77b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        74.218.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:44:5e:eb:2c:2a:00:0e:d8:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=47df7e28-db7f-4919-8e0b-df6b3f8401d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:10:c5:9a:38:06:ee:12:c5:98:95:1c:55:
                    cf:65:90:fd:5c:6f:c1:5b:ae:e6:eb:c0:74:9d:f7:
                    85:50:dc:1f:99:64:59:31:9c:c6:5c:7a:4f:5f:fb:
                    0f:b4:06:a7:22:db:8d:6e:c2:1f:4a:ed:6f:ac:62:
                    49:81:62:58:8e:51:e4:93:1b:58:07:01:bc:44:bb:
                    db:9d:2b:94:cd:71:84:5b:e3:da:5b:27:48:b2:d9:
                    a5:55:c4:ab:0d:ab:f2:8f:09:b4:c2:0c:8f:4a:44:
                    c1:0d:79:4b:d4:8b:32:7c:50:fc:f7:e8:da:61:1c:
                    d5:7f:e5:eb:92:f1:09:ff:98:91:1e:c2:92:ae:15:
                    33:35:1d:9f:93:21:53:52:df:f6:92:d1:a2:1b:25:
                    b7:df:fa:2e:68:6c:0d:dd:fa:ce:d3:99:7d:ab:e6:
                    ed:9b:a6:27:e9:ca:9e:1e:7f:68:9b:b5:63:e0:5e:
                    e5:9a:c9:4c:ca:8d:f6:9e:26:a5:52:57:b1:e0:44:
                    a8:fe:ff:9a:fe:4f:f9:76:ed:da:67:52:f6:17:e7:
                    b6:68:49:98:18:97:10:6e:55:b7:a3:75:fc:dd:0c:
                    f6:c5:21:3b:d0:67:d7:7a:f5:54:9c:d9:96:8c:a0:
                    57:71:ae:66:ba:b5:4c:9b:75:bd:59:6b:fc:c6:7f:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:5E:1E:CA:93:AE:27:05:7E:4D:93:C3:B7:D1:66:F2:C9:2D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/312fd4e8-917b-3bac-a78b-97fc9d62a77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c7:78:6c:56:dc:22:34:de:b4:cb:df:3c:f2:18:5a:bb:db:
         c0:1c:93:be:c0:15:df:83:a4:01:bd:0c:b9:b6:ef:29:71:e3:
         f9:36:b8:12:ff:c0:2d:7e:03:b7:7d:69:a8:a7:7a:98:ae:8c:
         cc:c5:e1:ec:f2:a1:2d:aa:82:22:a2:01:05:98:3b:21:ea:d5:
         da:a8:7e:f7:08:c0:6b:05:99:db:fa:c3:d6:6c:7a:7f:af:9e:
         bf:cc:38:45:2b:ab:27:62:ce:da:ef:28:3f:32:ab:fe:a9:d9:
         86:40:e6:ae:48:56:66:14:06:78:18:94:05:a3:d4:fa:67:0c:
         1f:21:a2:37:8e:79:cf:7c:34:3c:7e:2b:f7:d8:64:7b:f2:49:
         ad:b8:a2:b8:93:87:c6:ee:6e:43:2e:41:9c:1e:f2:8b:d6:90:
         3e:91:72:88:1f:6b:c1:59:00:ba:9d:a4:3f:52:ed:d2:6a:b4:
         63:61:68:fe:8a:60:c1:a5:4d:4b:0c:f1:14:a9:ab:89:95:da:
         fa:08:41:09:b2:0f:f7:95:e0:2b:9e:32:a2:73:b0:63:4b:5e:
         0c:a1:1f:11:88:74:db:a5:a7:a6:a5:35:c3:f7:75:51:9d:05:
         de:b7:26:3f:02:6f:2c:c1:2f:37:0e:06:bd:9e:c7:95:a2:64:
         55:9a:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:24 2024 by rpki-client on console-fra.rpki-client.org