Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/63ed63b1-e14d-3302-90fe-82cd0a7a23d3.roa
File:                     63ed63b1-e14d-3302-90fe-82cd0a7a23d3.roa (raw, json)
Hash identifier:          RXrNNbmouBinbIvqBjPbDTtH1sZ6xnX+psKmg4qb6Aw=
Subject key identifier:   7A:11:45:6A:61:4A:61:6D:54:A1:26:78:14:DE:73:92:D9:51:3E:FC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCFC53E6306DF1E3F3377C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/63ed63b1-e14d-3302-90fe-82cd0a7a23d3.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     11427
IP address blocks:        65.28.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:cf:c5:3e:63:06:df:1e:3f:33:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=90ef505a-6ea7-44b4-8109-63dc4e886a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:9a:5a:1c:fb:13:2d:2a:78:74:0f:73:c6:
                    70:63:42:b3:2b:6a:f6:92:8b:2b:50:51:fd:23:c2:
                    cb:c7:33:f9:1c:4f:d8:47:a1:16:c8:79:54:b3:f3:
                    a1:62:f4:c8:41:8f:e6:c3:e2:36:80:ec:f8:98:be:
                    c4:33:14:43:38:8d:64:47:0a:f9:3f:58:3f:98:29:
                    ff:52:22:ed:a7:2c:9e:08:1b:95:6c:99:bd:2b:ab:
                    28:c1:23:31:1c:a3:2c:ec:91:3b:13:73:d3:81:a1:
                    ff:dc:ca:9d:3d:43:46:7a:ac:1a:19:24:bd:b8:5a:
                    8e:47:85:1c:f8:2e:44:fd:cc:b8:b8:ee:b3:02:de:
                    8c:cc:09:18:e0:58:36:52:bd:da:39:a8:c6:2f:16:
                    d1:ca:00:15:7b:1f:a8:e9:37:d9:72:68:bb:84:3b:
                    b0:2b:c3:2c:7c:3c:0b:ba:cc:97:98:6c:08:19:fc:
                    02:51:9f:39:90:62:c1:30:c9:22:48:f6:e1:f1:b6:
                    50:d9:ed:54:80:28:79:87:b8:3c:0f:c0:cd:13:17:
                    72:6d:a0:08:e2:73:27:71:46:67:75:c1:2d:cc:46:
                    7f:d5:2b:9e:09:67:d9:c0:69:2f:bd:ed:f9:1c:8a:
                    85:b7:36:11:0b:aa:66:81:9b:c4:d5:f1:96:0f:82:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:45:6A:61:4A:61:6D:54:A1:26:78:14:DE:73:92:D9:51:3E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/63ed63b1-e14d-3302-90fe-82cd0a7a23d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:74:f9:c0:f6:a9:43:8b:50:5b:b4:7d:85:c1:25:e0:ee:
         6b:8b:9a:c9:42:92:24:da:32:6c:b4:48:d6:5f:5a:21:ec:42:
         dd:5c:79:e9:8e:6c:8e:92:96:3e:ed:06:63:a7:13:f4:c0:91:
         b1:8f:39:f6:b5:7e:97:10:15:23:b0:58:b1:89:74:81:e9:8e:
         44:a5:be:d5:3f:12:81:52:86:1e:b1:cd:5d:9e:7b:98:57:18:
         61:3e:bf:ed:05:6a:d8:ad:df:da:c0:6f:87:71:f4:a1:90:30:
         ce:ef:c5:82:cf:e2:72:41:96:c5:f3:aa:c0:d3:55:83:b4:dd:
         82:cd:ca:00:51:55:fc:ef:5f:0a:c9:f0:1e:9f:cb:47:70:4e:
         6a:0c:cf:55:88:c1:86:86:f4:db:c9:47:66:ca:d1:fb:19:05:
         47:da:24:74:89:29:d2:ee:ff:b3:2b:2d:4d:4b:b7:e7:80:d8:
         2f:5e:9d:db:f1:a2:2d:35:72:41:76:85:43:42:9a:25:87:98:
         b3:12:07:53:75:04:f8:7f:a5:6d:53:46:62:3b:fc:77:c7:ef:
         80:71:1b:32:84:d0:ba:15:72:18:db:f9:aa:8c:c0:51:74:a3:
         cf:51:66:ad:5d:13:6f:a6:d4:59:16:55:22:7c:86:8b:54:c1:
         b6:a5:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:28 2024 by rpki-client on console-fra.rpki-client.org