Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69f7b2f8-5a4e-3039-902c-5910582e0549.roa
File:                     69f7b2f8-5a4e-3039-902c-5910582e0549.roa (raw, json)
Hash identifier:          BdNsp1+ZzXH9wt7jzuhCQi7DzyjiAVcsfVpSmSonX3o=
Subject key identifier:   C0:4F:46:4F:18:09:70:54:4F:DA:1F:1D:CC:17:5A:B5:74:DB:BD:63
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321A433391794045E1E79000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69f7b2f8-5a4e-3039-902c-5910582e0549.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     11427
IP address blocks:        72.128.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:1a:43:33:91:79:40:45:e1:e7:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=85009ddb-5251-4afb-8a55-b639bcbcf78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:7d:4f:20:dd:50:62:b3:a5:a1:b9:84:4f:
                    0c:fb:85:2c:bf:c1:7e:ea:23:e5:21:6e:c2:3b:52:
                    35:c0:61:02:15:09:3f:a3:29:c4:95:3c:3f:1a:9b:
                    ce:99:2d:88:13:2b:0c:a2:59:76:29:ab:a7:85:30:
                    fa:26:83:ff:b0:82:10:91:b5:56:ba:22:9f:3b:37:
                    8d:74:0c:29:e9:21:e4:e4:c9:ea:3c:8e:bf:42:92:
                    d7:16:25:45:74:9e:55:39:46:9a:0b:d0:26:23:ba:
                    47:3a:e3:fa:b2:a2:28:f0:2d:30:33:22:f5:3a:c7:
                    96:d0:da:83:3b:48:79:a3:42:2c:be:2a:be:97:65:
                    f4:ad:54:0e:d3:1d:ad:e1:d3:76:83:43:72:6e:88:
                    74:b3:f0:4d:03:f7:b1:3b:8e:76:f6:09:ad:4b:9d:
                    cc:90:13:fc:72:60:3c:38:3a:bc:35:4f:77:df:f3:
                    12:40:6c:76:67:0c:d3:c9:87:38:c6:c4:4d:6d:89:
                    18:02:e7:67:11:e2:25:47:d2:f9:47:e6:d1:59:37:
                    25:6a:eb:87:ea:c5:07:e3:dc:5c:b6:fe:74:b0:fa:
                    b2:72:a9:66:f2:56:21:dc:89:6d:d9:54:01:ec:be:
                    dd:91:31:d2:ed:b0:c0:f8:26:40:58:10:98:02:e9:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:46:4F:18:09:70:54:4F:DA:1F:1D:CC:17:5A:B5:74:DB:BD:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69f7b2f8-5a4e-3039-902c-5910582e0549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.128.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:d1:98:6e:17:b0:ad:70:90:f0:77:5f:4b:4c:c1:18:ca:
         af:33:96:5c:cb:65:9e:1e:da:9e:a2:25:94:f7:b5:4a:ad:24:
         c6:7b:59:bc:19:5e:d4:2e:e9:33:d3:3c:62:78:6a:46:5e:ea:
         9b:9c:68:46:ab:a0:e3:40:d1:eb:0d:d3:da:c6:0a:ac:8f:d5:
         15:e0:73:6d:16:d9:b8:d3:74:f2:a4:b0:e6:5f:c1:ae:c9:0f:
         dc:73:ef:d5:ad:aa:bb:e0:c2:3c:bc:ae:8f:62:15:9f:a6:61:
         32:77:a5:5d:c1:69:76:7a:25:ac:6d:82:f9:ab:7e:d9:84:a9:
         f3:a3:bc:68:29:4f:9c:32:07:a2:a7:13:06:03:16:51:1e:2c:
         5f:80:22:00:fc:9b:6e:f7:db:ad:d4:4a:c5:ee:d5:3e:67:ae:
         66:f3:ea:fc:40:76:44:54:31:61:be:be:cc:c2:06:3a:7c:34:
         31:6a:95:f4:d3:a0:90:66:33:3d:d5:43:57:c1:37:06:7e:c3:
         49:0b:a2:5b:2b:78:37:11:ea:e9:73:6c:2e:b4:24:15:51:cc:
         6a:74:15:81:10:06:c1:60:31:f8:ed:db:33:a8:44:63:f3:7a:
         a1:1b:18:ed:f4:ee:e3:26:8d:65:ee:49:fb:5b:09:c2:91:3f:
         2f:ba:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:38 2024 by rpki-client on console-ams.rpki-client.org