Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cf98b39-46f0-32e6-8926-568e8684c207.roa
File:                     4cf98b39-46f0-32e6-8926-568e8684c207.roa (raw, json)
Hash identifier:          BoBAJ+AhA6x5sZjLtMNpGtiTHlKAaKQ682lUfn+rOFQ=
Subject key identifier:   84:04:C1:45:A0:8F:4B:F8:AC:AB:34:34:E4:F4:D0:B5:65:1F:7B:3A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF25BB9BCE2844C9CEA5F50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cf98b39-46f0-32e6-8926-568e8684c207.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     11427
IP address blocks:        68.206.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f2:5b:b9:bc:e2:84:4c:9c:ea:5f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=a83ad6d5-20b4-486b-82cb-d9e7b64bf901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:91:f6:36:ff:d4:03:6e:dc:dd:9d:f4:b8:4a:
                    00:76:48:6c:3c:f6:75:e2:1c:82:81:1c:4c:80:46:
                    3c:23:a8:7d:37:19:04:d2:2b:56:ab:de:c9:72:d6:
                    29:b3:7a:ba:88:ea:cb:93:33:d5:31:4e:b0:66:6a:
                    0d:d3:fd:5e:0a:8e:6b:90:e3:66:23:8a:ee:81:9c:
                    28:83:ad:bd:ff:f4:61:f3:5d:04:69:c9:33:09:94:
                    a0:ba:ef:9c:24:58:23:0a:ca:5b:57:49:11:2f:bc:
                    b8:c6:14:40:53:cb:f1:81:fa:5e:e1:7c:0e:60:c1:
                    a1:de:59:55:84:eb:c7:5b:a3:4f:3c:2d:41:27:67:
                    3d:69:5d:dc:2c:7e:42:0f:65:bc:cc:60:dd:a3:e2:
                    42:5c:0e:b3:60:76:32:bf:bb:f6:bc:1c:8c:65:71:
                    08:59:0a:d2:a4:86:cf:39:9e:f3:50:aa:48:a5:53:
                    18:ff:ae:71:9a:d8:7e:da:5a:1b:23:84:09:2e:b5:
                    c7:34:df:b8:c0:c7:79:50:00:9a:47:8e:55:61:ce:
                    67:24:6e:cc:df:ae:72:12:50:58:ce:81:73:ae:8b:
                    58:c1:18:ee:30:88:fe:f7:00:de:e4:4f:72:20:0f:
                    71:91:9d:aa:90:98:b1:b2:fb:be:2b:5e:c2:5c:b4:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:C1:45:A0:8F:4B:F8:AC:AB:34:34:E4:F4:D0:B5:65:1F:7B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cf98b39-46f0-32e6-8926-568e8684c207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:4f:db:d9:7a:80:a0:fe:88:60:89:84:a8:57:cc:f5:cc:
         81:22:ce:0f:23:09:50:7b:12:28:5e:44:11:fa:50:5b:ac:0d:
         1c:9a:42:56:26:e9:51:b0:f7:41:7f:4f:16:3f:0d:2c:c7:22:
         0b:0e:cf:bb:0e:ef:22:65:db:72:60:9d:2d:f3:9e:fa:23:51:
         d8:e6:a5:0b:d3:f0:65:72:b2:ff:9a:ae:8a:e1:f3:c9:bc:32:
         8e:54:f5:63:7c:76:5b:6a:11:1a:7d:a8:d3:13:b9:3a:dc:34:
         1f:8c:e0:07:65:d9:87:d4:ba:02:da:53:78:be:69:87:e9:b1:
         2b:2d:c6:cf:99:62:9b:fc:1c:17:3a:71:c8:8a:cf:83:5c:43:
         7a:9e:04:cb:b7:d3:29:24:f0:d2:28:ee:76:8c:af:b1:b1:4e:
         64:25:e4:8c:99:8a:4b:d4:d6:27:ad:0e:39:6b:7b:b2:d4:70:
         a9:92:fe:ee:1e:16:83:67:a3:9f:62:c7:63:aa:17:d1:5f:12:
         12:20:5d:1a:4e:b9:03:10:ba:27:53:6f:4e:ac:f7:1a:f8:3b:
         9a:54:0f:98:f8:dd:06:ed:f1:af:97:1c:5f:36:3e:b9:4c:a6:
         45:52:00:00:68:85:00:52:54:d4:61:89:24:83:88:1f:fa:d6:
         0c:27:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:06 2024 by rpki-client on console-ams.rpki-client.org