Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f2cb1ad-c9d0-3a34-ac70-cca7624e051d.roa
File:                     3f2cb1ad-c9d0-3a34-ac70-cca7624e051d.roa (raw, json)
Hash identifier:          prWnKRGmYnP8SXk0LER4eXHL5kA7MHN8KKP/VYnOYz8=
Subject key identifier:   7A:4A:18:75:A1:6A:2D:2A:C8:A1:51:D5:04:43:BC:17:9E:D5:62:B4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A093A5DB5A0BB99A295900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f2cb1ad-c9d0-3a34-ac70-cca7624e051d.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        98.100.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:93:a5:db:5a:0b:b9:9a:29:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=bb6630a5-de59-4b4f-a118-62429ab089a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:77:e8:24:00:28:32:bc:02:c4:58:fd:ad:
                    c6:3e:43:a5:00:04:89:ea:f4:7e:d6:0d:3d:95:19:
                    f7:91:bc:e2:e8:1f:b2:16:c8:69:e5:75:a0:c0:3e:
                    5b:98:08:da:6d:35:d5:bc:1c:d2:44:2c:f7:b7:dd:
                    07:0b:ce:45:05:85:77:c6:47:d1:57:2b:23:10:fd:
                    b6:44:19:de:32:70:f3:cf:a7:87:4a:df:9a:46:32:
                    3c:a4:27:c7:33:cf:b3:11:15:ca:73:58:24:b1:65:
                    9b:4e:a5:8d:d2:68:10:86:19:ec:dc:26:9c:1f:4a:
                    d9:d2:82:dd:c1:90:cd:ad:81:67:eb:63:45:2e:9a:
                    70:98:65:c6:8d:79:40:e9:0e:20:51:19:80:87:ea:
                    21:5a:c3:2a:70:16:4c:1a:e6:36:00:b2:67:02:b7:
                    5f:fb:8f:60:2b:78:94:af:de:1d:6f:8b:75:5f:be:
                    5a:ac:fc:90:d8:ab:5a:28:3f:56:fb:1c:bc:ce:ef:
                    85:de:cc:4c:c6:57:32:e7:17:2e:4f:79:14:b0:35:
                    c7:6b:38:12:51:ed:d6:48:43:75:b7:4d:b0:be:17:
                    19:1f:03:82:75:81:a1:f8:1e:2a:fa:53:91:f2:8a:
                    68:95:6a:c5:6d:5c:2b:0e:6d:84:5b:34:ab:3c:5c:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4A:18:75:A1:6A:2D:2A:C8:A1:51:D5:04:43:BC:17:9E:D5:62:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f2cb1ad-c9d0-3a34-ac70-cca7624e051d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fc:66:a7:46:e7:e4:4d:78:91:fe:1f:32:0e:40:58:83:13:
         d6:10:df:d4:e1:4a:b8:26:26:c6:a5:d6:1d:45:7b:9b:0d:60:
         6b:02:bc:62:d1:62:44:82:19:4d:77:8d:3c:50:45:f8:69:88:
         0e:3a:e6:7a:ce:2d:92:59:53:f9:cc:ac:f4:1d:78:d0:a8:ea:
         d5:8d:f4:2f:d4:d7:5e:84:a8:e0:49:55:95:f1:05:38:7f:7c:
         76:85:e5:a2:88:6d:02:02:84:66:35:6a:92:09:90:02:94:91:
         cf:91:0c:8b:f1:36:4f:fc:db:43:6b:76:d8:16:0f:2a:87:9e:
         cc:a3:4f:85:94:6b:9e:f3:ac:72:d4:c8:1f:49:b3:72:7d:ca:
         e2:d2:64:ea:61:59:b8:18:b8:28:b2:fd:a5:74:d9:19:ce:71:
         ab:d1:47:d7:b9:55:58:52:f9:97:42:7e:ae:1a:24:70:67:62:
         50:92:34:a7:f1:60:0b:73:19:3e:d4:49:a1:d3:6b:df:03:f5:
         0d:aa:2d:2c:a9:d9:6e:a8:d0:42:5f:82:e1:72:a1:f9:40:89:
         0e:2f:51:b0:6a:42:6b:45:b2:68:5b:f6:c6:22:b8:ed:1d:c3:
         f1:fa:65:44:da:11:2c:b6:b8:89:00:ce:63:4b:73:31:08:20:
         a9:2a:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:03 2024 by rpki-client on console-ams.rpki-client.org