Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/40b63e36-9365-30fc-abec-fcf13393b3a8.roa
File:                     40b63e36-9365-30fc-abec-fcf13393b3a8.roa (raw, json)
Hash identifier:          k0CdajKZpT3pxcAtPo/ecDZQzaES0ai/B1x7utBnGVw=
Subject key identifier:   B3:9C:13:D0:AA:6A:28:7B:62:B7:4B:71:C2:E2:25:AB:17:1A:2A:70
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCE86C8560EC9EF3A0721F0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/40b63e36-9365-30fc-abec-fcf13393b3a8.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     10838
IP address blocks:        65.28.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:86:c8:56:0e:c9:ef:3a:07:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=f2b6515f-7301-4bff-9c75-beac606a83b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:2b:cb:eb:65:df:bd:2e:b0:64:32:87:b2:
                    5d:cc:23:2e:3e:3d:fd:44:17:7f:09:4e:97:f8:e2:
                    fa:a4:6c:54:12:77:75:91:8e:d8:41:79:ee:f1:a1:
                    a0:81:4a:91:ca:49:64:80:33:61:ee:cd:c9:18:87:
                    32:17:cf:f2:ac:e4:1f:63:59:54:43:b3:f7:61:8f:
                    18:40:2b:b2:28:97:dd:90:1c:9a:2a:2f:30:6d:54:
                    48:1d:86:81:97:12:1b:15:e3:78:68:24:f8:dc:e3:
                    45:10:f2:64:23:2d:a9:f8:97:a1:66:8d:b6:3f:0d:
                    3c:67:a9:5d:ab:a8:85:97:48:84:05:cb:1c:e4:de:
                    9d:05:f1:f0:87:bc:c6:5c:b6:62:ec:60:4c:fd:3a:
                    53:d5:fd:10:9c:46:f7:c5:cb:6d:47:ce:cb:5a:82:
                    ae:14:e6:e5:59:1f:a4:44:4d:c4:01:17:e8:46:b8:
                    69:4b:09:0b:09:07:dd:59:c2:2d:6f:33:7b:f9:b4:
                    de:48:ab:14:aa:d2:63:aa:22:f3:79:00:69:16:10:
                    3c:21:79:f8:1b:2e:2a:3c:f9:51:ec:a3:9b:db:3c:
                    c5:95:18:9a:97:a5:e4:90:38:c7:8a:41:96:23:e0:
                    16:56:09:48:e9:00:66:8a:34:8a:d9:5b:dc:84:fd:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9C:13:D0:AA:6A:28:7B:62:B7:4B:71:C2:E2:25:AB:17:1A:2A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/40b63e36-9365-30fc-abec-fcf13393b3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:12:0a:b1:0e:33:5f:13:45:af:eb:7e:9e:1b:b9:2c:e1:
         83:ee:ac:56:3a:a1:93:4c:1f:bb:13:58:20:6e:73:96:b5:e9:
         7e:29:51:d9:df:bc:ca:cf:bb:63:42:bd:49:71:42:21:fb:30:
         68:91:8c:d5:fb:47:40:e7:f1:de:97:bb:c0:0a:ca:74:32:85:
         68:20:b9:28:cd:21:dd:2e:df:81:d0:1e:32:52:56:4b:2e:d3:
         27:1b:25:e4:29:43:53:90:12:df:ac:e3:e3:07:24:29:b4:96:
         57:95:ac:e1:92:e0:c7:ec:9d:e0:86:c0:b3:de:50:9c:4e:13:
         5d:0f:43:5f:49:db:32:d8:45:85:5b:08:06:87:1b:e3:c6:68:
         15:4e:90:fb:16:ac:c0:68:43:a3:77:1f:af:e1:77:bb:fd:99:
         06:33:8b:fc:bb:3d:ed:86:4a:ba:63:25:d9:90:c0:58:b6:22:
         e7:d0:c7:62:cf:82:78:ea:cd:74:c0:17:8b:3f:a4:04:42:98:
         da:64:9a:4b:87:80:b8:b0:00:31:67:11:05:b1:98:c7:b2:d8:
         5b:b1:3d:af:f4:e1:00:bd:86:c1:57:c4:3f:80:54:59:e0:be:
         60:97:79:d9:26:b4:c6:94:c3:14:63:80:b4:93:f8:eb:8a:75:
         dd:85:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:25 2024 by rpki-client on console-fra.rpki-client.org