Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa
File:                     742d443f-44dd-3da9-98ba-c84b2553e62a.roa (raw, json)
Hash identifier:          bei+6Z7vvDnXrvM3OoQlVBL0B8ol4vyspWo/EPa1PFg=
Subject key identifier:   BD:5D:58:8A:C7:54:C3:98:9C:B4:67:24:58:C8:77:03:D8:26:23:CB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E610E3977538412B8B140
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        67.52.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:61:0e:39:77:53:84:12:b8:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=03dce699-05ae-4ef8-973d-1f96dcc327bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:87:77:97:e3:d8:2b:e4:34:57:a8:c2:43:
                    6f:c6:f6:4a:59:1a:74:16:ed:87:78:82:f2:be:e1:
                    34:15:20:21:9f:ab:0b:a0:d0:b5:03:16:25:d6:63:
                    b3:ba:27:f3:a8:f5:ae:c1:e5:32:da:b7:9c:89:df:
                    7d:1c:f1:00:19:ce:2c:68:ad:a0:25:82:b6:f8:03:
                    96:00:e9:fb:c4:97:00:9a:7f:97:2f:83:92:e5:f7:
                    0a:31:e0:ef:58:ab:f5:14:31:51:0c:37:c2:a2:24:
                    bc:2f:cd:f1:2f:4b:62:e9:2e:c9:5e:da:c7:2d:51:
                    75:50:4c:47:d8:33:70:b1:78:91:82:5b:7d:09:4d:
                    83:a7:87:c9:de:21:7b:4c:f2:25:a4:76:aa:54:aa:
                    34:b2:8f:65:af:0b:4b:0b:7a:1a:aa:58:1e:8a:ee:
                    4c:cd:10:85:c3:ab:f3:d1:34:dc:d1:31:9d:ea:d6:
                    22:a4:1a:b2:ec:a7:df:d4:5a:c6:a6:36:98:b6:70:
                    a1:94:03:21:32:de:26:05:7a:44:3e:5d:05:11:52:
                    cf:22:b7:93:19:0f:6a:85:2d:86:18:b1:a4:6b:0a:
                    92:3f:20:6e:14:2d:9e:92:7a:ec:e8:08:c4:6f:b6:
                    08:b5:09:b1:39:64:12:92:ed:0d:9d:6a:06:28:7d:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5D:58:8A:C7:54:C3:98:9C:B4:67:24:58:C8:77:03:D8:26:23:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/742d443f-44dd-3da9-98ba-c84b2553e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:65:1f:2b:92:5b:f1:e9:64:a2:fd:10:2d:d9:73:0e:ca:9d:
         26:5c:8d:d3:46:51:90:04:e1:d9:e4:e1:f0:c1:58:2f:a2:0f:
         f2:de:f6:50:35:b1:c1:6f:45:8c:e1:53:ec:39:1d:46:d9:74:
         70:d8:a9:5f:6a:59:dd:5b:6b:84:bb:00:ae:06:0d:be:b1:9a:
         e4:d1:f1:a1:e7:72:41:5d:99:cc:11:fc:4c:03:51:d7:09:21:
         47:00:f1:25:27:16:5c:88:29:36:25:27:27:84:e8:f7:19:b1:
         75:cc:2f:0e:62:c2:c7:8a:99:7d:4c:61:fd:7a:c1:df:01:e5:
         c6:86:e4:0f:ff:12:b3:44:01:36:ef:6e:86:54:41:c2:44:5f:
         c9:0a:90:63:a3:e6:10:06:0f:71:5f:7a:50:09:e3:e8:e5:76:
         70:6a:c3:01:6f:05:46:22:b2:26:6f:b3:b5:e2:d4:59:77:74:
         0b:2d:3c:02:26:a1:40:91:21:0f:b8:be:5c:d6:01:a5:63:54:
         20:c2:7d:c1:49:71:b1:5e:2e:da:63:47:ac:ce:a6:9a:e4:06:
         fe:93:ac:e5:e5:0f:0f:27:49:06:c8:3f:13:74:04:a6:b2:ef:
         4b:b9:81:92:b0:62:f8:15:13:63:70:06:9d:8c:8c:a3:16:a2:
         93:71:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:22 2024 by rpki-client on console-fra.rpki-client.org