Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
File:                     436c452c-7620-380a-b414-78245a407ccc.roa (raw, json)
Hash identifier:          0cEyLCiV8e2pt7pMPuacn7oHRWmIhFjZvWdHvZSdxU4=
Subject key identifier:   BE:11:98:22:9B:3C:7F:27:85:F1:BF:7F:B6:D7:59:B6:48:3D:E9:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858478026451EF7DBE7439DE86C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     11351
IP address blocks:        2603:70bd::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:45:1e:f7:db:e7:43:9d:e8:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=555c9718-8ca8-4521-af60-13110121f82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:00:75:41:36:46:fe:b7:6b:22:30:df:c2:
                    66:0a:bc:0f:db:1f:2f:42:c8:f2:ad:d3:e3:29:8c:
                    ab:62:4c:0b:89:a9:98:64:8c:ab:c9:bf:ec:72:3f:
                    8c:1f:dc:2c:d1:d7:d9:63:b7:93:85:4d:df:f7:20:
                    6d:06:b6:32:c3:5c:c6:5f:b9:78:b8:9a:dd:50:40:
                    e0:89:e6:5f:38:8e:28:a4:e2:c6:d3:16:17:b0:3d:
                    b5:a6:fa:a9:5e:d5:2e:92:a8:27:04:eb:2a:3d:b9:
                    70:bb:58:ce:54:85:7b:36:36:0a:2b:eb:6b:76:dc:
                    38:af:32:5e:54:1a:e6:75:51:c6:bc:41:e9:09:c2:
                    d9:3a:a8:29:73:47:82:51:d3:9b:33:44:70:d3:7e:
                    82:aa:90:e6:8e:fe:50:94:93:35:30:03:17:cf:44:
                    86:21:b5:c4:89:14:23:01:a9:38:8b:c2:3c:23:8f:
                    d4:ca:d6:b9:5b:11:b9:d4:18:23:f0:9e:a1:7f:31:
                    cc:e2:86:8f:fe:73:9d:fa:9a:56:4c:d7:2e:6e:9f:
                    3b:74:62:3e:04:8a:e7:5b:f0:a1:66:0b:6f:a7:7e:
                    96:77:6e:8d:27:32:9a:78:57:05:f0:da:d2:e1:f0:
                    d6:19:56:0e:e2:e6:83:79:03:c3:c7:fc:6c:8c:e6:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:98:22:9B:3C:7F:27:85:F1:BF:7F:B6:D7:59:B6:48:3D:E9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:70bd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b4:e4:fe:a0:4f:27:00:3d:e9:07:a6:f5:0c:42:66:1f:e5:
         a4:77:fd:3c:d9:68:c5:83:f4:e4:a6:ac:d7:69:24:f2:6b:c2:
         79:4b:84:b3:f9:34:5a:7a:b5:d5:11:66:b4:8e:d5:82:69:0c:
         ad:a4:b1:7c:90:7f:67:9c:4d:73:c8:fc:fd:6a:9d:06:13:bc:
         9f:5a:e6:d8:d2:87:da:8c:d9:b8:58:50:bd:fd:b9:c8:0a:12:
         f3:aa:9b:8e:42:a7:17:0d:a6:10:b1:e5:38:50:6d:bd:4e:ed:
         7c:32:42:4b:5e:6d:fb:de:a0:0f:ce:4d:52:45:30:d0:f3:63:
         6e:7f:e8:ea:54:1e:d9:ef:0b:bd:5d:93:c4:f9:95:15:6f:3a:
         ef:08:9a:08:30:5d:30:0b:71:18:56:6e:f8:c6:31:df:77:08:
         40:51:bf:92:21:7c:c1:e1:2e:16:64:d2:6c:08:f9:80:a8:d4:
         f3:e8:1f:56:33:d1:93:da:b6:05:7c:1e:c7:7f:62:e4:20:7e:
         d4:56:88:e3:31:cf:5b:49:71:3c:16:42:62:6a:45:c2:83:20:
         fc:67:a5:45:02:14:28:db:dc:c2:7a:3c:57:97:e0:55:d1:43:
         06:4a:b2:69:83:99:6e:f2:aa:5d:e6:4e:53:b3:82:cb:cc:22:
         27:8e:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:25 2024 by rpki-client on console-fra.rpki-client.org