Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33ddd6ac-6b72-3237-b1f3-64d317d429fb.roa
File:                     33ddd6ac-6b72-3237-b1f3-64d317d429fb.roa (raw, json)
Hash identifier:          6qZV/kO89lGIEWjOSVHJRFjhbIWg/HnFKC0zt4yTNcM=
Subject key identifier:   84:F8:68:CC:D5:A9:79:12:12:7D:2C:EE:38:2A:24:A3:6A:B0:9E:D6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321A6360C2480498198DA1F1
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33ddd6ac-6b72-3237-b1f3-64d317d429fb.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     20001
IP address blocks:        67.49.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:1a:63:60:c2:48:04:98:19:8d:a1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=7b57453b-5f31-4d68-b155-aa7ee4d1f243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:45:dd:3d:f9:a6:37:67:7d:ca:1d:ec:50:
                    5a:7f:f0:94:0f:b2:c8:b4:79:00:3d:64:3d:23:3d:
                    80:35:ad:e6:1b:3e:82:cb:55:c3:6f:5c:d7:bd:8e:
                    86:1b:9c:c8:7b:ad:cc:4e:47:47:b8:0a:a8:6c:86:
                    57:25:44:83:59:66:e4:c0:57:d1:e4:72:7f:25:a3:
                    6f:36:a4:15:4b:09:fd:cb:df:85:22:a0:c1:54:a8:
                    be:b1:2c:30:b6:44:3d:c3:34:b4:8a:61:6b:36:74:
                    4c:12:39:67:20:b4:5c:13:16:23:9a:b5:fb:e4:ff:
                    10:04:1e:af:dd:06:f7:6a:df:f8:44:85:0e:9f:4f:
                    9c:80:5d:c6:6a:4d:6e:a8:ba:d7:01:1f:12:6f:c3:
                    75:df:94:3a:fa:9d:18:1a:e9:3e:19:17:9e:ee:cb:
                    ae:29:ce:8c:3b:49:6a:58:fa:a3:f7:9e:1c:7b:62:
                    25:ef:93:c3:26:0a:05:7b:24:47:4d:a8:f0:9c:9a:
                    f9:21:66:d6:8a:6c:cd:01:df:5c:4d:6a:d5:7c:9d:
                    fb:3a:5e:6c:3c:fc:bb:02:25:28:f6:5d:b2:a0:69:
                    b2:45:47:4e:b7:c6:21:9c:6a:20:95:4c:f3:c1:3e:
                    79:93:ff:55:47:2b:3d:e4:e1:82:02:a7:92:c4:b6:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:68:CC:D5:A9:79:12:12:7D:2C:EE:38:2A:24:A3:6A:B0:9E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33ddd6ac-6b72-3237-b1f3-64d317d429fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.49.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:62:0f:ed:ac:b4:44:59:16:ff:25:ca:57:bb:95:12:50:63:
         b0:1a:5d:5d:fc:0e:67:72:96:05:07:35:3f:3b:0b:84:f4:33:
         b3:da:69:29:f5:92:78:22:2c:15:fd:00:7f:65:00:ec:85:ca:
         ae:b4:95:64:35:d6:ea:ae:11:34:b2:85:c4:39:7c:46:fd:0b:
         47:53:84:56:1e:c2:42:a0:00:15:d9:2a:aa:de:a1:dd:e1:da:
         8d:2d:56:a6:c4:b1:1a:83:32:f3:30:e9:33:81:92:79:93:16:
         57:93:3e:56:c7:75:17:9b:7b:0e:6e:ee:c0:0b:8b:52:43:85:
         81:a9:c9:f0:fc:ac:29:a8:42:b6:6f:6d:c8:07:42:cb:42:c1:
         71:f6:7c:51:02:b4:e8:21:85:b6:ef:b9:b3:a1:50:67:1f:80:
         07:ae:18:d5:1e:40:49:07:04:69:52:ed:7d:89:fc:55:81:e5:
         fe:bb:a7:e5:97:a5:34:0a:07:6c:ce:d0:42:ea:f2:4b:1e:03:
         af:57:44:d3:da:c5:52:64:4b:ce:b5:f2:42:14:25:f3:68:34:
         59:cf:c8:61:64:18:ce:21:ab:67:d1:8b:13:b7:a2:03:19:62:
         10:ee:95:87:c2:09:65:e1:87:5a:03:18:d1:6b:e5:8a:19:10:
         4f:de:e7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:24 2024 by rpki-client on console-fra.rpki-client.org