Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d7e0327-fe22-38ec-aeaf-1526396014f6.roa
File:                     3d7e0327-fe22-38ec-aeaf-1526396014f6.roa (raw, json)
Hash identifier:          /nuiG459GBZffMnlNFwsgUud9DO4JGmwX0LQTXIWyZE=
Subject key identifier:   17:6D:68:A6:2F:43:53:63:7A:EA:55:57:D7:8C:49:77:E3:32:FC:21
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D94FFB68F7BE337395FA3
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d7e0327-fe22-38ec-aeaf-1526396014f6.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     7843
IP address blocks:        76.85.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:94:ff:b6:8f:7b:e3:37:39:5f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=c5ea7abb-6395-4cf6-8165-788e954eac4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:1d:28:d8:ea:c3:62:70:18:2a:f6:8e:4a:
                    5c:06:30:f0:94:33:3f:b6:99:11:d8:bc:ab:b4:46:
                    f2:76:24:f6:ed:a6:a3:52:d7:87:50:76:82:83:58:
                    bc:db:2d:10:56:f3:e3:26:98:db:21:a5:b9:a6:c3:
                    94:d2:93:eb:cf:41:00:cd:a1:7a:90:6f:e3:95:c8:
                    57:69:17:4f:03:46:d7:ca:b8:43:4d:2f:f0:ee:33:
                    c1:2d:78:b5:58:d8:ee:f9:5e:07:20:2f:58:38:61:
                    bd:63:bc:86:41:d5:60:e5:95:ea:68:54:81:4c:62:
                    4e:1a:06:2e:b2:74:1e:f2:ae:63:83:03:3f:64:13:
                    e6:d4:71:90:b4:15:2c:16:13:2c:8b:6e:01:dd:34:
                    e7:0f:78:60:48:b2:3c:be:96:3a:f6:8c:e4:b2:69:
                    d6:58:6f:87:d4:7a:87:1f:dd:e7:7b:f6:04:47:85:
                    07:b4:fd:de:b2:ce:0c:a3:2a:dd:f6:6b:c7:6c:40:
                    c9:0b:c5:1d:ba:3f:04:96:5d:e0:d3:d1:be:f2:a2:
                    86:ac:d3:52:2a:0a:fe:95:99:f8:e4:0c:6d:73:83:
                    a5:5f:db:0e:f0:cb:5b:89:bc:59:7e:8e:11:b7:b9:
                    f2:d7:b6:d2:c7:ce:ff:52:b5:19:21:88:a5:01:e5:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:68:A6:2F:43:53:63:7A:EA:55:57:D7:8C:49:77:E3:32:FC:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d7e0327-fe22-38ec-aeaf-1526396014f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.85.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:24:ea:88:c5:41:a2:ca:9f:36:4d:84:b0:c7:cf:40:f9:
         3b:aa:d8:38:81:e7:82:21:f4:48:d1:bf:d8:a5:b8:f6:bb:4a:
         27:d4:22:58:ab:1b:ad:ba:c6:36:71:ae:8b:1b:46:5f:63:44:
         98:a3:00:f9:d7:a8:a0:aa:28:42:f2:c5:af:ef:b0:96:b7:81:
         0a:0f:b6:76:5f:2f:7c:07:a3:9a:bf:b6:e4:03:33:e6:1b:0a:
         5a:a8:21:b7:f6:ec:bb:65:9a:41:54:56:54:0f:a1:06:d8:f1:
         6e:14:12:0e:0f:c2:4e:31:ca:b8:0c:45:20:c8:f8:27:f7:f8:
         c5:c2:97:ac:95:4f:26:e1:41:df:da:d6:27:fe:97:36:e6:c2:
         a2:03:0c:b9:24:c0:72:b3:41:8a:f4:3f:2a:78:59:7f:2f:05:
         af:1b:41:50:df:5b:e2:2a:7a:88:73:38:38:3b:5f:2b:43:cd:
         93:5a:cf:ab:bc:b7:f6:63:b6:51:fc:57:53:c6:83:15:9b:eb:
         22:9b:03:ab:0d:41:82:df:4a:32:4b:ee:b0:4c:01:6f:d9:cc:
         33:e0:e1:7c:4d:25:ff:d5:5c:d5:bc:14:a8:39:f7:4e:de:f9:
         b3:12:92:23:0e:fb:9d:8e:d5:02:7e:67:84:36:03:ae:3e:b9:
         61:bc:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:56 2024 by rpki-client on console-ams.rpki-client.org