Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/72fb906e-1b6d-34f0-a81d-eec03f0210eb.roa
File:                     72fb906e-1b6d-34f0-a81d-eec03f0210eb.roa (raw, json)
Hash identifier:          OditaEm8xkGppuSOdNK71r79nzgvjFhBD0TSvwrxtXw=
Subject key identifier:   92:70:7A:63:73:C1:71:0F:6E:1D:CC:E1:90:6C:FF:30:87:33:10:DC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF25BC498E433770DD49040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/72fb906e-1b6d-34f0-a81d-eec03f0210eb.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        68.202.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f2:5b:c4:98:e4:33:77:0d:d4:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=5121b63c-c2e2-4896-a054-cd8f14d23039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:bb:01:7d:e5:69:4c:d3:02:03:cf:a2:71:
                    03:98:3a:1e:68:b3:8e:7f:d8:01:a4:cb:d7:7b:42:
                    8e:5d:c0:b5:63:e3:16:55:27:2f:84:39:13:e7:69:
                    ff:fb:5b:4e:46:53:52:4b:f3:2f:5b:f1:62:6e:ca:
                    b0:f7:a0:da:73:0e:8d:d9:a7:bd:79:f4:cf:fe:67:
                    09:9e:3c:f0:fc:b9:3a:2d:87:b7:7b:cd:9c:6e:f0:
                    de:8c:d7:2a:cd:f9:2d:2c:19:ce:c6:a5:b0:b3:96:
                    15:43:9f:ef:dc:ea:71:b0:28:6c:0d:4d:d8:d1:64:
                    bd:24:05:bf:c3:4a:e0:a9:f7:8e:0e:a1:a4:6e:95:
                    78:c3:47:16:ae:87:be:87:ad:21:2b:d0:fe:0a:cf:
                    3e:8a:f4:5a:c4:93:3b:46:21:66:9f:d5:27:fb:ab:
                    fe:43:fa:63:49:f6:af:7f:97:8e:4a:fd:74:ae:23:
                    4b:e8:45:f5:88:a2:7e:e6:0c:1f:46:32:3b:d3:f8:
                    85:e9:3c:92:3b:c3:96:fa:88:2b:75:0c:e3:97:94:
                    0e:cf:d5:9c:7a:f5:5f:5b:1d:8f:90:43:aa:51:c9:
                    3d:b1:4a:d1:f2:5e:d3:4c:8f:d6:51:1c:34:02:1d:
                    81:74:71:73:3b:68:63:46:70:a3:38:40:ce:48:a5:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:7A:63:73:C1:71:0F:6E:1D:CC:E1:90:6C:FF:30:87:33:10:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/72fb906e-1b6d-34f0-a81d-eec03f0210eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:2b:25:ba:ea:fc:7f:56:93:d7:1b:50:69:f6:a7:35:84:
         ea:bd:e5:e5:04:7c:16:61:92:cf:37:f7:e7:39:f3:7d:33:c2:
         ed:46:8c:d5:ce:5d:38:13:5f:72:57:c6:1f:55:9c:06:9f:b3:
         84:3a:07:3b:d4:76:a7:2a:c7:00:0d:d3:56:e9:3d:69:90:0b:
         60:60:cb:36:9e:a7:13:d9:3a:31:a7:be:5e:5b:23:e5:cb:b4:
         e0:44:bb:32:88:5e:e1:36:38:7a:bb:59:1f:62:eb:0c:72:bf:
         28:a0:3e:99:e6:5c:52:47:9a:c0:98:29:6e:5e:1f:a2:1a:21:
         41:01:4d:28:bd:63:85:ad:d5:7e:6e:c1:7f:59:f6:8a:47:9e:
         da:67:4c:8a:c1:09:cd:d5:4e:4b:9e:55:df:21:0c:e3:ba:65:
         2d:78:18:3a:89:d5:40:39:d4:c7:7c:d6:a6:f4:2c:f6:c1:d6:
         e1:0a:f4:ea:7c:52:3c:e8:6c:f8:1c:0b:6f:50:7e:bb:bb:f4:
         8e:46:4a:bc:7c:7a:ef:89:fc:a2:51:d4:f0:ac:5f:de:17:f7:
         6e:b2:90:26:e4:c9:6d:e2:fe:b4:51:9b:d2:52:b9:a8:24:a0:
         05:d4:2b:d3:f7:3f:6f:cd:25:0d:11:69:7c:7e:71:8f:30:57:
         fe:e3:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:16 2024 by rpki-client on console-ams.rpki-client.org