Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/551f35f7-5d8e-3618-a7ed-38593736b8d8.roa
File:                     551f35f7-5d8e-3618-a7ed-38593736b8d8.roa (raw, json)
Hash identifier:          ng1MlWksY5nJChbOPpwljBkOsChtuPBaaKdIl4yhyok=
Subject key identifier:   BB:C6:E4:A6:BE:43:A4:DD:C5:20:8C:87:8D:72:F8:D0:CC:53:32:3F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DA780144AC99CC9920780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/551f35f7-5d8e-3618-a7ed-38593736b8d8.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        67.52.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:a7:80:14:4a:c9:9c:c9:92:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=96cfa60c-2b57-4cdf-ab6c-9a5b2797127f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:df:c0:ad:fb:6d:2e:ea:4d:94:61:d7:b8:
                    58:41:fe:7b:c0:cc:71:d2:2a:ab:c0:49:32:fc:b9:
                    cd:0b:f5:06:2d:21:e3:d0:b2:f7:1c:79:aa:ec:b5:
                    30:2a:3f:82:ee:dd:eb:92:e8:32:a7:84:fd:f2:83:
                    37:be:83:e7:ae:ec:bb:3e:6c:2b:12:7e:1f:34:1a:
                    b0:bb:6a:b1:31:48:49:9e:dc:f9:c1:f3:8e:e0:39:
                    51:f5:c4:05:2a:2d:16:95:00:27:80:92:16:8c:7c:
                    48:76:5d:66:4e:8f:f8:fa:2c:af:73:72:ca:0d:94:
                    c7:a6:13:1b:09:68:79:d0:ae:5f:0e:f1:4f:d9:65:
                    48:79:7b:4c:ea:e7:d7:ec:31:fc:ba:37:2a:82:67:
                    5d:0f:3f:0a:5d:58:e9:75:43:3f:2a:b6:13:29:22:
                    f7:e0:3a:61:e9:10:61:d8:0d:4f:aa:73:71:77:a7:
                    d9:f9:f8:9f:0b:48:28:9d:00:27:0c:28:c7:13:3b:
                    8b:7f:f1:f2:64:36:e4:5f:8b:f5:6c:49:73:d2:49:
                    9c:d8:24:1c:d1:d2:fb:31:56:a4:de:56:6b:11:91:
                    6d:cc:98:6e:8f:34:a1:c6:ad:b1:35:7e:59:09:3e:
                    31:c4:d4:6c:fc:64:c3:53:c2:6b:a6:35:46:f5:1e:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:E4:A6:BE:43:A4:DD:C5:20:8C:87:8D:72:F8:D0:CC:53:32:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/551f35f7-5d8e-3618-a7ed-38593736b8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:0e:a1:72:a1:55:c2:a4:fb:31:6f:72:c3:88:14:c3:0a:
         21:a7:f1:38:8e:85:d2:eb:af:7d:28:c2:e8:b0:42:f9:f4:94:
         90:00:22:99:b4:d9:b0:6c:f6:f9:f5:c9:3e:47:91:01:de:73:
         d5:84:fa:8a:5a:40:6e:a5:b7:8a:35:b5:26:91:72:f8:b9:68:
         87:b0:cd:29:13:5e:4a:a4:cc:8b:92:bc:47:11:9e:9e:6d:d0:
         70:26:ae:29:a5:c1:b4:83:5e:d3:25:ae:43:b3:73:91:4c:93:
         80:96:af:b8:02:ea:6c:57:cb:53:4a:c1:ac:d1:23:f3:84:37:
         87:4d:dd:9d:77:f4:72:95:db:11:92:09:65:ef:9c:40:ac:81:
         0f:76:1a:7b:15:dd:0b:b8:86:7e:9c:5d:91:0a:ff:04:62:b9:
         90:59:23:ab:36:33:96:91:89:9d:ba:54:c9:9d:dc:67:d1:b8:
         3b:99:0c:5b:cd:04:ff:f3:40:9a:aa:1a:43:ea:90:f5:bf:af:
         0b:7a:2a:1c:c5:41:7c:1d:ee:8c:32:5f:31:56:88:9f:88:37:
         7d:8e:aa:3e:05:5e:c9:75:00:45:b5:bc:bd:0d:a2:17:f6:ab:
         eb:4d:9b:e1:82:2a:aa:39:ee:c9:fe:81:49:c3:4a:3b:d6:be:
         73:1b:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:20 2024 by rpki-client on console-fra.rpki-client.org