Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32c4ca6e-4f26-3c9a-92dd-7094208b04df.roa
File:                     32c4ca6e-4f26-3c9a-92dd-7094208b04df.roa (raw, json)
Hash identifier:          nB1z/wny5Zvan10Y6ni/ghlbNe4GuSNtwiznbbpOHI8=
Subject key identifier:   FC:D7:49:70:5C:1D:6D:4A:7A:90:91:13:3B:EB:E3:CC:5D:9F:D3:59
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A143F30B07C0284B939F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32c4ca6e-4f26-3c9a-92dd-7094208b04df.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.76.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:43:f3:0b:07:c0:28:4b:93:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c6a55c72-6a75-4cec-ac00-fbed5644b2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:cf:c8:1c:6e:fb:d1:c0:23:f2:1f:0c:02:
                    3a:83:e7:dc:ff:9b:1d:4a:dc:ec:cd:35:c6:e0:71:
                    70:dc:bb:73:d0:fb:45:20:34:7f:dd:1b:b0:3b:45:
                    13:55:50:cc:c7:b1:a7:2a:ca:ba:41:3b:0a:9d:0e:
                    ed:14:59:44:01:bd:99:35:6a:3b:e8:d2:f2:99:ae:
                    ca:ea:5d:cf:30:18:48:e1:20:33:91:33:6a:58:2e:
                    d9:19:d6:fc:6f:7b:49:4d:45:93:7d:d0:f1:8a:de:
                    84:75:3c:4f:5c:cf:4d:b4:ba:43:9d:f4:a5:69:9a:
                    78:05:13:01:97:a2:51:58:82:b7:e2:fc:5e:fe:bb:
                    41:8d:21:c0:2e:b0:e8:7d:19:e4:8c:47:b5:17:3a:
                    8d:b5:0d:02:d8:fb:da:5f:57:f7:82:60:c2:9d:17:
                    1f:4c:2e:48:36:56:64:d3:a3:e2:01:b9:d6:62:da:
                    0f:9b:e2:7a:b9:f0:7a:6f:5b:67:72:1b:8d:dc:70:
                    a9:c2:81:c9:56:39:3f:1b:f5:4a:93:c8:74:7d:d7:
                    05:af:3f:13:13:12:23:44:f8:74:53:c1:bb:b7:a6:
                    6c:c4:5a:99:3f:b2:82:7b:f4:18:f5:8a:74:66:37:
                    e3:d7:ab:1c:b1:ae:24:25:04:91:34:b5:3e:8c:ad:
                    df:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:49:70:5C:1D:6D:4A:7A:90:91:13:3B:EB:E3:CC:5D:9F:D3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32c4ca6e-4f26-3c9a-92dd-7094208b04df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.76.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:4b:8e:47:38:bb:d6:af:9c:e1:90:4f:2c:e1:76:b3:2a:
         1d:0a:d3:31:2b:88:26:79:14:2e:6d:64:ae:79:08:5d:29:07:
         b9:2b:f1:9f:08:0c:c0:b6:3e:dc:c9:30:f6:11:58:c2:65:bd:
         1c:84:92:20:de:a2:2e:8c:6c:f5:78:3e:6e:33:2b:53:01:76:
         94:7f:4c:73:13:4e:11:37:ff:cf:11:ea:60:f9:14:fd:1b:96:
         ef:28:95:65:3a:41:ce:21:ff:d2:22:a3:89:c9:b9:6c:60:58:
         20:01:ae:fe:d4:4d:ca:dc:a1:00:c7:66:f7:ad:30:62:b8:51:
         2d:d7:3f:a2:b5:36:6f:4b:24:91:45:e6:54:bf:7b:ce:6f:83:
         f0:db:21:e4:60:c1:e1:12:cb:4a:b0:c5:a4:ee:61:da:f0:a3:
         4d:aa:4b:df:da:cc:0b:9d:c0:e3:e7:b0:57:7c:31:09:1f:a7:
         b0:e0:e1:84:55:8d:19:33:01:28:fa:75:af:28:d0:3d:5a:c4:
         4b:d4:c4:3b:99:23:05:01:76:14:98:f6:b5:87:a7:92:4b:d9:
         a1:b0:24:8e:f6:de:b7:86:ba:d5:12:42:f6:17:f3:74:ed:03:
         3f:ea:8d:bf:c0:f8:76:bb:63:36:6d:88:51:f2:0c:2b:bb:68:
         fa:31:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:00 2024 by rpki-client on console-ams.rpki-client.org