Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a18806c-26fd-3212-908f-1ce90fa336b9.roa
File:                     5a18806c-26fd-3212-908f-1ce90fa336b9.roa (raw, json)
Hash identifier:          qxxIlIhzVN92VSeLTrT2fXZJJykazyx7Z7ejQuMYoXk=
Subject key identifier:   A4:F3:E1:9B:EF:13:23:92:AE:06:58:81:0E:68:16:08:E6:2A:D7:CD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E684B1D06B515AF689AC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a18806c-26fd-3212-908f-1ce90fa336b9.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     14065
IP address blocks:        68.168.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:68:4b:1d:06:b5:15:af:68:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=52e84a68-c5d9-49d9-8d6f-25498c5dcc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:58:39:c3:70:5a:b1:8e:66:f1:fa:a1:66:
                    78:1b:dd:85:d5:67:ce:f0:67:68:d8:b9:f9:df:c8:
                    da:00:e2:d7:58:45:de:7e:f4:7d:36:98:2e:b6:77:
                    06:ae:da:44:04:1f:ac:38:81:d2:59:b2:8e:d3:cf:
                    e9:c5:e1:84:f1:36:09:5d:42:b0:3e:c3:28:c1:fe:
                    5b:2e:29:17:2d:1f:f0:5a:49:6e:cb:1a:2e:82:70:
                    fb:35:0f:07:c9:3c:50:43:05:81:b7:ea:dc:3c:01:
                    37:4f:f1:d9:1a:4a:a8:d2:cf:9f:12:f2:6e:e4:89:
                    6f:2f:10:8c:ba:54:fa:c7:c9:4c:50:d5:33:75:ca:
                    88:02:fd:96:8e:e7:91:86:a2:41:20:9b:bd:4c:15:
                    2a:4a:57:6a:01:6f:35:cd:f1:3c:5e:ae:7a:37:36:
                    29:ed:93:29:9c:ce:bd:f6:48:7f:1f:40:ff:ea:41:
                    fd:7a:1a:3e:6f:db:8a:44:04:b7:dd:32:2d:56:98:
                    6c:83:e9:8b:04:81:82:8d:0e:00:53:ab:7d:34:ce:
                    bd:66:d8:37:a6:75:33:67:2b:4e:8c:a7:24:a7:01:
                    b3:0e:0e:b6:71:6a:d6:a6:68:26:e4:41:8d:0f:f6:
                    1b:26:ff:39:f7:04:44:58:96:42:6d:a3:94:bf:60:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F3:E1:9B:EF:13:23:92:AE:06:58:81:0E:68:16:08:E6:2A:D7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a18806c-26fd-3212-908f-1ce90fa336b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:39:ed:31:20:57:d7:61:8f:05:16:05:28:20:02:99:43:
         85:6d:70:bd:61:a4:3d:15:59:90:4f:dd:ed:6c:da:e7:47:f6:
         e8:9a:36:46:57:70:58:0e:57:1c:a1:1d:04:85:32:ba:11:5c:
         61:49:72:7c:06:78:7a:40:f6:ef:bb:a6:eb:72:e3:49:82:28:
         8a:af:5f:d0:31:b1:41:5c:87:a9:76:11:70:5c:69:bf:05:54:
         42:3e:b5:da:8d:54:04:29:4a:ce:9c:b6:90:53:df:cf:f1:af:
         70:42:45:13:48:30:67:a3:00:83:64:ab:1d:24:e3:8c:03:4d:
         1a:dc:8a:1b:56:fd:8c:5d:07:90:6a:cb:2c:65:7f:6c:04:d2:
         20:fe:ac:4e:8a:35:b1:5f:42:d2:5b:da:46:18:8c:c6:31:e9:
         ea:30:5c:e5:a4:4e:8d:9c:d1:f5:84:fe:4a:9f:50:fc:ad:4e:
         62:fd:fc:a9:5e:12:90:be:a7:8e:32:dd:b2:f0:24:14:3a:d5:
         80:3f:80:f4:7c:35:83:9d:8f:89:fa:52:f7:c2:65:18:30:62:
         c2:f3:29:c1:c3:04:98:25:c4:fc:59:ff:60:b1:c0:14:8f:9b:
         1e:bd:93:39:97:8d:d8:2e:74:11:e4:ae:73:22:f3:04:c1:ed:
         19:95:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:52:29 2024 by rpki-client on console-fra.rpki-client.org