Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecb28d2-1727-3106-83d0-37075fca4682.roa
File:                     3ecb28d2-1727-3106-83d0-37075fca4682.roa (raw, json)
Hash identifier:          6sneJLLYeiNrebxOhJH7q+A836sPo7FxuoI/ZHTEdcY=
Subject key identifier:   3E:DE:E7:17:C8:28:11:F3:60:3A:57:AD:AA:22:20:60:EC:C3:16:2B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A123828DC4702DE4DA9240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecb28d2-1727-3106-83d0-37075fca4682.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        65.29.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:23:82:8d:c4:70:2d:e4:da:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4ca5140a-93f0-48a9-ae24-c5337f637f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:36:7b:7b:0b:80:bb:3d:3d:05:c9:6d:14:
                    78:7c:18:36:1e:98:d8:77:f6:c2:c5:bb:31:6d:64:
                    de:e3:56:0b:92:6c:9c:23:04:97:a5:fd:9e:ce:5b:
                    8c:3d:4d:df:a3:4b:96:0f:36:37:8c:6e:32:78:40:
                    bb:09:dd:a1:5c:b1:9a:cf:6b:1b:8c:3f:43:ee:0d:
                    b6:12:18:89:ed:cb:19:fd:7f:32:be:3a:e5:8a:9f:
                    a8:0c:63:4e:4f:18:3c:3e:fb:fa:54:b2:15:86:b6:
                    af:fd:7c:64:16:56:f9:41:c7:13:79:b4:90:2a:9a:
                    32:04:51:0b:4c:ae:56:e7:eb:19:56:b3:ec:a9:12:
                    a5:bf:b1:23:f1:3b:67:b6:a4:94:57:70:81:b7:b5:
                    be:77:d8:92:e9:b9:9b:6e:aa:6d:76:f4:ca:2c:70:
                    c3:9e:e7:07:2d:6c:40:b7:e8:de:fe:b7:4a:b0:af:
                    09:1b:84:88:9b:d7:54:be:cd:cd:c4:31:6b:8b:34:
                    00:07:f7:73:16:af:df:95:56:aa:65:13:08:63:46:
                    5a:57:64:0f:46:28:f7:48:62:fb:b2:e5:c8:f5:79:
                    c9:9b:42:9a:b7:8c:ce:a5:0b:3c:73:4f:ec:f5:4c:
                    05:8e:db:b7:23:e1:27:d8:dc:25:08:5d:b4:93:8e:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DE:E7:17:C8:28:11:F3:60:3A:57:AD:AA:22:20:60:EC:C3:16:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecb28d2-1727-3106-83d0-37075fca4682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.29.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:1f:c8:51:0f:01:08:52:b0:25:0b:41:be:65:4d:24:eb:
         60:70:68:42:27:5a:82:17:37:d3:ef:7c:15:13:e1:72:6c:58:
         ad:42:b7:01:a9:64:fc:d8:3a:89:a5:3e:b0:a7:fc:68:3b:08:
         9a:e1:f9:6c:b1:ec:bf:e4:e3:01:f8:1a:63:78:c6:bb:2f:30:
         e3:68:54:0f:6c:db:58:29:e8:ed:7b:70:7e:55:77:6e:88:0f:
         9b:29:b0:95:f7:1c:72:61:e6:4d:8d:82:f8:5a:2e:a7:3f:7e:
         a4:0f:f9:40:e9:d8:ed:d3:ef:0d:5f:5d:31:15:11:36:e0:64:
         19:d9:1d:1e:d8:19:01:23:3d:ee:8f:09:f9:3d:29:7f:23:e0:
         7a:d3:d3:39:39:7f:9f:8c:20:bb:29:bb:44:a9:2c:99:0d:81:
         a9:4d:dd:aa:b4:fc:60:27:ad:40:dd:b1:45:eb:69:08:14:bc:
         11:4e:60:d9:d0:0d:4e:e4:72:49:94:f8:fb:05:2e:7e:f7:69:
         e0:73:4c:23:42:22:9e:ca:de:9c:d3:f6:0b:08:3e:05:18:9d:
         a3:4b:2c:f0:00:0f:96:d4:fe:ec:80:28:19:79:81:b8:31:5e:
         aa:27:21:5d:f2:ff:50:45:95:f9:88:b9:1d:62:78:cd:00:bb:
         7f:51:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:25 2024 by rpki-client on console-fra.rpki-client.org