Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b934b6c-881f-324d-929f-f36d20fd7e10.roa
File:                     5b934b6c-881f-324d-929f-f36d20fd7e10.roa (raw, json)
Hash identifier:          KD6vQ0knkhmCDZHY6/RIquImgHLqg5ZR4qp0L49hMHk=
Subject key identifier:   04:B5:A9:F7:9C:4F:1C:BA:D1:8A:F8:D9:66:3A:CD:24:F2:CC:51:79
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A9F340185920162F3F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b934b6c-881f-324d-929f-f36d20fd7e10.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     12271
IP address blocks:        142.254.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a9:f3:40:18:59:20:16:2f:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ac9de198-3758-4350-93ed-a933f01abf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:18:33:95:ba:c5:50:b7:8a:d9:7c:66:f5:
                    8e:d5:a9:34:4c:e0:fd:85:7b:a1:2a:6d:f9:cc:81:
                    42:02:c3:b1:84:6a:dc:7e:d1:14:16:c6:13:32:37:
                    8a:60:b5:f8:9b:14:13:b0:61:1e:18:8f:6b:41:ad:
                    dd:3a:61:5a:4d:ff:7c:05:d4:41:db:b3:df:17:d5:
                    c6:09:f8:bc:e6:68:e4:0f:94:f5:1a:dc:91:28:08:
                    9a:48:97:ce:eb:c4:e5:b2:98:b5:8e:a4:ef:a8:70:
                    f3:dd:65:00:58:12:61:12:f4:e5:1c:93:d7:20:89:
                    5a:0a:65:e6:12:39:e0:e9:ab:a5:20:9d:2e:a1:80:
                    85:c0:05:01:68:81:64:4e:0e:98:7e:78:cb:2e:13:
                    83:00:ce:fa:02:20:e2:5f:a0:8d:ad:ae:28:5e:31:
                    c2:4a:ae:c5:ce:31:a2:e4:17:22:8a:3b:66:72:33:
                    21:dc:89:69:29:7a:5b:9a:72:eb:f3:3c:b9:20:1d:
                    8e:1b:66:44:1a:e5:54:88:9a:24:4b:5d:65:a8:dd:
                    71:7d:8e:e9:40:68:ec:4f:95:fd:22:8f:1a:2f:6f:
                    5f:d6:22:14:7e:cc:15:eb:1e:c4:c7:5c:fe:d6:a8:
                    f5:77:ea:80:ed:ea:77:66:b3:d6:eb:2f:8e:ce:3e:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B5:A9:F7:9C:4F:1C:BA:D1:8A:F8:D9:66:3A:CD:24:F2:CC:51:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b934b6c-881f-324d-929f-f36d20fd7e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.254.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:47:67:5e:53:58:ca:f6:86:00:eb:81:21:d8:8d:9d:eb:
         44:76:62:05:fd:9c:a5:2f:1f:72:03:30:5c:bc:f7:c8:50:ba:
         be:14:82:09:9f:34:0d:e2:d4:93:fa:c7:20:e4:3f:fb:c1:69:
         8b:b2:02:c7:81:ea:23:b9:f4:a9:7b:55:b5:2d:fd:6f:34:a8:
         ef:eb:44:2f:32:c1:73:27:66:c6:85:e2:3d:fe:a7:70:34:b2:
         c7:ee:cb:c6:ca:9a:7b:e3:ec:be:81:b8:80:54:28:d1:bd:e4:
         cb:a6:92:8e:77:d0:e5:7b:c7:40:fc:de:37:79:d4:dc:a4:5f:
         f7:0d:af:8a:40:1d:97:ab:72:bd:8a:6a:24:48:f1:bb:1c:28:
         a8:92:6f:42:03:d4:63:8b:34:39:40:23:f4:8f:18:09:b8:12:
         19:b0:a8:50:20:d6:b4:1e:e4:d3:eb:cd:88:80:6a:cf:7d:fd:
         80:82:5e:b9:14:c0:57:ae:67:30:c8:52:f3:6a:82:29:d8:b3:
         dc:ac:db:a3:58:6f:64:9f:79:0e:28:0f:31:99:58:47:bc:4d:
         86:de:32:f8:7f:f5:43:6e:fe:43:4c:fd:37:01:43:c3:e1:ec:
         50:55:69:96:08:62:a6:42:63:f6:46:98:b2:ad:ac:80:67:f0:
         53:0c:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:27 2024 by rpki-client on console-fra.rpki-client.org