Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42747091-c1e9-388b-bf34-1573d02361fa.roa
File:                     42747091-c1e9-388b-bf34-1573d02361fa.roa (raw, json)
Hash identifier:          Sk0GaUGPsLV+Z2lq7FH1i9L2SMMhGLEgIvtuQlWdmWA=
Subject key identifier:   3C:44:17:7F:8F:34:97:6E:D5:42:6D:8F:F0:AB:EA:C8:7F:10:F4:A5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A11AD9607756436833B340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42747091-c1e9-388b-bf34-1573d02361fa.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        107.9.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:1a:d9:60:77:56:43:68:33:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d3785480-39cd-4acb-bc62-570b78417284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:b2:62:dd:57:92:2f:a9:c8:8c:f0:56:03:
                    1d:44:ab:d6:f1:e7:75:30:df:05:5a:79:03:66:3b:
                    fb:1e:78:29:90:eb:76:5d:11:2e:67:9a:e3:2c:35:
                    47:b0:a4:a4:0a:68:4d:cf:a5:0c:77:b1:75:ba:2e:
                    1d:c4:fb:a4:68:a0:ce:83:fa:8d:29:0c:86:a3:ce:
                    af:72:16:57:b4:ca:52:a2:26:2f:6c:50:38:57:45:
                    71:46:14:db:82:fc:15:8b:55:3c:77:15:bb:77:7a:
                    62:56:59:66:ec:e0:4e:a7:92:07:5e:f5:da:e2:65:
                    b7:3c:44:63:44:78:49:52:8c:cd:0c:d9:ca:bb:2d:
                    65:a5:30:c8:1c:c2:0e:e1:6b:67:25:59:9f:b9:ba:
                    84:49:de:91:6a:51:4b:bb:b2:bc:03:ff:9f:58:9a:
                    56:e7:45:79:3f:ee:e0:3b:90:dc:54:e7:7c:84:10:
                    f1:41:bb:54:36:9f:d4:5a:1f:8b:07:e6:87:ad:d6:
                    55:a7:e7:a2:f5:7a:21:5f:23:f0:a1:c2:c2:4b:d9:
                    aa:27:98:9c:32:4e:b4:49:02:38:06:3f:6c:b2:38:
                    94:76:70:75:c2:05:39:91:4b:19:3d:d0:42:af:33:
                    0d:84:c9:1c:96:ce:df:b9:4f:56:bf:f5:37:84:59:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:44:17:7F:8F:34:97:6E:D5:42:6D:8F:F0:AB:EA:C8:7F:10:F4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42747091-c1e9-388b-bf34-1573d02361fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.9.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:37:d6:58:20:c6:80:b6:f6:64:3d:19:28:80:e8:2a:8d:
         e0:9f:d3:ef:54:ae:11:38:c1:54:3c:27:9e:01:b7:3f:41:d2:
         dd:48:32:81:5d:7d:04:8e:00:ff:ed:4b:a1:53:12:e2:be:0b:
         5b:0f:56:0d:f6:05:55:3d:ee:e6:b0:f5:b8:83:7e:4d:ac:ea:
         f3:00:fc:43:6b:1a:5c:6a:9b:23:08:7e:b5:88:4a:d6:cc:0c:
         9b:f6:06:5e:22:6e:53:d0:b2:61:13:f0:5c:12:af:48:ff:70:
         0f:6d:d7:14:60:60:2a:ff:db:44:5f:26:3e:bb:c7:dc:23:78:
         61:0b:b7:b5:b3:8b:ef:dd:35:1b:7f:db:52:ac:bb:e3:f5:99:
         f0:f8:5a:b6:cf:fc:71:1f:a0:79:cf:45:6b:97:3c:da:cf:f7:
         e0:b9:68:4d:6a:cb:fb:3f:49:51:42:54:f9:48:56:53:4d:3e:
         a1:3c:d8:c5:86:7a:d2:9c:35:ef:ce:ef:86:03:0b:14:a2:40:
         46:d1:7a:5d:9c:14:1c:0a:79:79:f7:93:0e:51:96:5c:79:4e:
         49:c8:f3:65:86:ff:13:04:c1:f3:72:b2:be:b5:bf:e3:7b:9b:
         38:8d:e4:01:f4:e6:26:62:f6:f5:c0:04:f9:a0:63:43:1e:2d:
         83:c0:ce:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:25 2024 by rpki-client on console-fra.rpki-client.org