Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b8cc6b4-2026-36a0-bf0e-e158a3dbc95b.roa
File:                     6b8cc6b4-2026-36a0-bf0e-e158a3dbc95b.roa (raw, json)
Hash identifier:          fwgLYS70v09A9IWVKPzr2EPGtm9TS3bp7xwTTUkxQ78=
Subject key identifier:   1A:E5:40:83:FE:74:83:E3:DF:7C:38:80:D5:A6:6A:7F:09:63:75:4A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584434CDC8136DB7138EDB043880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b8cc6b4-2026-36a0-bf0e-e158a3dbc95b.roa
Signing time:             Tue 12 Dec 2023 12:00:00 +0000
ROA not before:           Tue 12 Dec 2023 12:00:00 +0000
ROA not after:            Wed 05 Feb 2025 05:00:00 +0000
asID:                     20115
IP address blocks:        173.40.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:34:cd:c8:13:6d:b7:13:8e:db:04:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 12 12:00:00 2023 GMT
            Not After : Feb  5 05:00:00 2025 GMT
        Subject: CN=76fd3491-86aa-41f8-b5c1-ea8e2cebef8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:08:30:c9:9e:02:54:f0:fb:32:e0:f9:d7:
                    8e:30:15:32:3d:06:c1:c8:23:42:6c:43:f0:b9:d5:
                    a0:e6:0b:ec:85:df:03:35:31:00:8c:eb:c0:32:51:
                    1f:af:9a:9b:1f:04:fa:8a:9e:d6:42:ee:3d:a6:a7:
                    4a:2c:7a:bf:5b:70:44:cd:f1:de:89:12:32:5a:aa:
                    e1:1c:f5:1c:b5:95:ba:bd:8d:ee:1a:23:3d:cf:4b:
                    66:ed:eb:bd:2d:e8:0c:e5:28:a3:cd:83:5e:b1:e3:
                    25:a5:f7:85:6b:79:20:43:22:aa:2d:ad:50:c1:2d:
                    83:ea:f0:58:b7:9b:45:e7:52:2e:6b:fe:d5:f3:75:
                    a4:72:ce:3b:b2:0a:ef:2d:10:b3:80:e2:f3:59:c0:
                    4d:31:c7:18:80:fb:d8:6d:b3:bf:1d:93:d4:56:19:
                    35:fe:90:33:c8:7a:0c:53:0f:83:83:9a:34:3b:3a:
                    d1:2a:d8:66:18:09:ad:e8:ae:39:95:28:ca:20:d5:
                    7b:cc:e9:c3:ad:f4:72:4b:31:73:12:2f:e1:4c:9c:
                    fe:ae:55:8f:d0:d3:e5:e0:bd:c5:06:98:da:41:8e:
                    c9:de:20:de:99:aa:6e:54:43:c8:3e:81:c3:14:73:
                    f1:f4:9a:db:bd:b0:41:ab:b6:fb:ff:0a:9f:15:8e:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:40:83:FE:74:83:E3:DF:7C:38:80:D5:A6:6A:7F:09:63:75:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b8cc6b4-2026-36a0-bf0e-e158a3dbc95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.40.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:16:11:ae:18:df:2f:e5:f0:f4:de:9c:f7:3d:f3:c5:99:9f:
         35:58:9c:f3:7d:ce:de:1b:57:92:8d:0b:f2:20:25:ea:e7:eb:
         5d:be:ae:69:f3:7a:04:51:39:0e:dd:56:aa:21:25:6d:c9:04:
         23:41:de:c9:9c:f7:23:d4:e7:98:28:ab:5a:44:25:aa:74:a2:
         7d:df:94:41:5e:10:09:37:e4:37:40:67:4c:af:b2:79:5f:6c:
         df:49:6d:8f:56:9f:54:6d:03:53:7f:aa:cc:b6:b7:9e:29:35:
         ce:80:f0:86:aa:91:55:61:6f:39:88:87:75:7e:fb:34:d5:6b:
         b3:b3:d0:1f:47:da:83:b5:9d:d3:52:b5:b4:af:02:0c:60:61:
         ca:3e:2b:c2:30:c1:84:5d:08:1d:67:e5:c6:76:9d:c1:de:a7:
         98:bb:eb:56:be:90:40:99:9e:1d:e5:07:81:ca:0d:93:74:8c:
         f7:2c:74:46:99:55:ea:6d:01:0b:92:ba:1c:fb:47:b6:6e:5e:
         0f:93:3f:a7:a1:3f:40:c2:93:7d:f8:98:ee:95:67:70:fd:dd:
         0e:88:9f:04:c2:58:3c:2e:db:c3:4b:d5:7e:c5:b8:27:ad:24:
         60:58:48:20:b6:19:9a:49:43:0b:d5:6b:03:f9:ff:c0:ab:2e:
         ab:1b:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:28 2024 by rpki-client on console-fra.rpki-client.org