Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7405b5a6-4a46-39d4-9279-17501040be9b.roa
File:                     7405b5a6-4a46-39d4-9279-17501040be9b.roa (raw, json)
Hash identifier:          p0IkRpJPMiBBQcEDe1aapEsdz8Hctfd0d2RZiR95E9k=
Subject key identifier:   AA:6A:78:6E:66:6C:33:22:6C:3D:39:9D:9E:D3:1B:49:CE:56:4E:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1448088A7828E0E710180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7405b5a6-4a46-39d4-9279-17501040be9b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.78.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:44:80:88:a7:82:8e:0e:71:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d73aa466-ecc3-4441-8ea2-12f2f748ee9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:71:a1:46:15:61:43:70:6a:91:6a:c7:67:
                    8b:22:37:9c:64:1a:f6:d0:37:be:3d:dd:ad:42:90:
                    55:f9:b3:c3:c7:09:08:05:6b:c6:eb:0e:87:79:72:
                    22:b6:8c:99:7a:f5:95:34:31:5d:30:f8:ef:a6:60:
                    58:90:4d:bb:3b:de:2e:41:c8:15:38:1e:8c:7b:26:
                    8b:32:bc:7b:2a:cc:5e:b8:eb:5f:ca:cc:9c:3c:4c:
                    30:68:1d:50:2e:ec:f5:70:ce:cf:94:3c:df:45:84:
                    53:e2:08:5e:49:b1:ee:0d:ff:7c:04:21:10:7c:54:
                    b2:dd:02:bb:51:26:45:81:fd:af:ef:a8:b3:48:4c:
                    60:3e:e3:c8:a3:f6:99:31:15:dd:e3:5e:9a:c6:e1:
                    84:a8:2c:10:34:88:a7:36:d0:8b:64:2d:6b:00:c4:
                    9b:7e:08:79:02:2e:78:03:16:5d:c8:0d:7b:7c:e3:
                    1c:d9:20:16:c5:0b:45:26:21:f3:4d:fe:e0:0b:61:
                    ea:a9:4c:c3:33:6e:a2:2a:52:c3:08:76:27:46:f6:
                    5b:7e:ba:98:37:98:43:66:3a:73:95:de:40:48:91:
                    01:58:31:e8:8b:3e:3d:f4:be:a8:26:1c:96:cc:40:
                    17:b2:49:6f:e6:43:c3:33:24:f6:54:f1:4e:3f:16:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:78:6E:66:6C:33:22:6C:3D:39:9D:9E:D3:1B:49:CE:56:4E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7405b5a6-4a46-39d4-9279-17501040be9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.78.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:eb:36:94:f2:7d:1a:9c:d0:f5:c1:b6:95:7e:82:c0:d7:
         ff:8d:a8:eb:e5:56:08:10:fd:5c:3c:8b:2d:ee:f8:ac:ad:a4:
         cc:ea:d4:93:f7:c1:90:1f:3f:a7:21:7f:6a:d4:02:e5:bf:79:
         e1:7b:60:38:50:d4:d8:0a:13:d0:d3:5b:ea:ab:e0:8a:29:34:
         57:39:a5:42:a9:c8:9e:7b:76:de:6c:c3:fb:87:49:a1:b2:ef:
         0e:97:0a:3c:17:6f:f9:8c:fc:04:aa:55:39:8f:22:d7:cc:45:
         8a:5b:eb:33:64:a8:46:fc:48:d6:2b:1e:4c:8b:d4:02:24:a2:
         27:df:76:5f:78:3a:bd:ba:d0:87:9c:01:dd:2a:93:d8:01:41:
         73:2a:31:0e:89:f6:77:32:c0:24:4f:e1:11:0f:02:df:38:b6:
         01:c3:65:a0:90:a4:b3:7d:eb:1c:ed:4d:4b:84:1c:ce:b0:7f:
         05:b5:88:4a:e3:89:b4:c7:a6:4d:ca:3e:ab:29:de:f8:1d:52:
         bd:1a:2a:c3:ed:6d:16:b0:35:96:2c:6d:30:b7:7b:f0:f5:b5:
         29:5a:ba:4b:8f:9c:88:77:af:6e:59:00:75:9f:8e:b8:ad:9d:
         5d:f3:97:c7:a9:e7:ae:ee:13:d5:f6:08:45:1a:a7:0f:08:af:
         b8:97:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:29 2024 by rpki-client on console-fra.rpki-client.org