Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4637d573-0c19-3fe2-a7f5-45d2d0d3f919.roa
File:                     4637d573-0c19-3fe2-a7f5-45d2d0d3f919.roa (raw, json)
Hash identifier:          Tv4jGzkNq9U0dpN84DvpAscTh4y1ECj/iEWD5XSW6r4=
Subject key identifier:   0C:94:C3:4E:34:69:08:02:2F:25:60:E4:BF:28:D9:77:B4:B5:F6:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A14511CDDB619E9A320600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4637d573-0c19-3fe2-a7f5-45d2d0d3f919.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        68.207.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:45:11:cd:db:61:9e:9a:32:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=19d3570e-9a5c-40df-9a4f-377e2b861fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:51:14:b5:6b:fc:7d:86:07:c7:13:ba:a1:
                    4a:67:da:cc:0d:e3:de:aa:25:51:eb:b0:5e:79:54:
                    1c:24:81:f4:3c:d0:90:c0:fd:5d:fe:45:93:94:56:
                    5c:fb:87:01:56:64:57:54:e8:f6:61:eb:7c:aa:cb:
                    2e:fe:33:7d:80:90:70:fc:b5:c5:51:19:b6:3b:7b:
                    da:89:e5:25:89:ec:2b:32:b5:77:eb:66:61:b7:e3:
                    b1:b3:23:1f:2e:2d:82:e2:df:e7:b2:f4:8b:bc:29:
                    a5:cf:55:c9:77:ef:b5:cb:1a:b2:7b:0a:5c:4f:90:
                    9b:65:d5:6d:67:68:0e:1f:1c:88:d6:3f:1c:95:56:
                    88:4e:c5:64:da:45:81:85:0f:6e:73:c8:29:f6:df:
                    87:47:c3:a0:d1:93:8f:18:26:d0:c1:f6:5e:43:20:
                    1f:f3:03:4d:59:e8:25:be:71:93:bb:41:d6:2d:9b:
                    63:b2:5e:55:e7:8a:e8:b0:87:ca:dd:90:53:c7:04:
                    d6:94:2f:18:8c:3b:08:03:78:aa:53:dc:03:89:43:
                    7f:53:0c:3a:ec:c1:f6:34:80:84:5f:2c:32:a1:f6:
                    df:cb:c7:60:ac:a3:fc:a1:c1:0f:2a:04:50:35:38:
                    b6:23:d7:b1:cf:e9:29:b3:3f:f9:12:78:b3:8a:08:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:C3:4E:34:69:08:02:2F:25:60:E4:BF:28:D9:77:B4:B5:F6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4637d573-0c19-3fe2-a7f5-45d2d0d3f919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:c2:c4:e5:4e:29:fc:10:c4:93:d2:49:63:7c:e6:27:19:
         92:09:96:ad:c6:30:8d:2a:41:17:86:c5:cb:fa:69:53:2f:4b:
         dd:3b:1f:a4:c6:7f:6a:26:c0:83:bc:92:c7:9f:31:10:34:72:
         6e:8e:25:0b:8c:b7:93:fb:e7:9f:f2:e6:da:3c:78:85:e8:e2:
         24:da:9b:64:4f:a1:01:4f:80:0f:48:dd:7f:ea:74:a3:5e:70:
         83:84:5f:ed:2d:76:b3:d7:d4:e7:cf:69:20:f9:84:3a:db:2d:
         bb:5f:83:03:cd:b3:f0:ba:59:aa:9e:8e:64:5f:42:cc:65:3f:
         ef:de:17:50:d4:6c:5c:f8:6a:b5:24:6d:5f:0a:d1:5f:83:bd:
         99:a7:d2:5d:6e:9a:5c:81:f6:50:a6:d5:c0:19:1e:0c:2c:64:
         42:50:03:6f:51:26:c8:e5:71:3f:bd:84:58:0d:09:07:90:23:
         65:6d:0a:61:1b:13:2a:b5:16:6a:93:36:86:f3:b2:0a:77:81:
         7b:45:bb:1d:9a:39:1c:17:39:26:f2:ec:50:c4:34:31:a0:53:
         9f:d9:7b:b3:3d:1e:fe:ce:c9:e7:a7:35:db:ca:00:9d:c1:3b:
         45:a5:09:6f:a8:22:fd:da:9c:f3:61:4a:08:bb:8b:27:90:a2:
         72:d1:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:26 2024 by rpki-client on console-fra.rpki-client.org