Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7474f5f7-4b8a-34fb-83cd-e6e958fcf9e2.roa
File:                     7474f5f7-4b8a-34fb-83cd-e6e958fcf9e2.roa (raw, json)
Hash identifier:          37C+Fr47kdsDaV7pl4DP+srzMViIpny8K/PswdkY7uk=
Subject key identifier:   8E:F7:4D:E7:7E:98:15:E1:F2:F3:05:21:E8:9A:B3:12:50:86:EB:9B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DA5B00EF3B4C8A72E9780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7474f5f7-4b8a-34fb-83cd-e6e958fcf9e2.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        65.28.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:a5:b0:0e:f3:b4:c8:a7:2e:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8f2c7071-8384-4c4e-aad2-d4d8e9014faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:2b:04:60:af:67:b5:4d:4c:b1:f4:44:5d:
                    05:49:19:66:9f:c2:ab:bf:0f:96:aa:20:d5:d1:57:
                    1d:2f:87:e7:2b:dd:36:20:45:e5:a2:9d:d1:fb:c4:
                    f4:6a:ef:34:18:4d:c5:b8:27:69:8e:7b:1b:63:99:
                    a2:39:18:0d:4f:e3:83:18:b9:f8:3f:da:b7:7f:eb:
                    93:5b:b8:c8:ea:18:bf:e9:9f:76:65:ab:b4:a8:07:
                    52:08:b6:09:d4:cd:5c:12:12:6d:e6:ce:68:2d:18:
                    ad:2e:4a:2a:77:e2:78:1b:16:36:3e:ac:ef:6c:df:
                    b0:59:86:fa:43:52:a4:24:21:21:86:8b:89:71:26:
                    44:71:fa:29:5d:81:d1:7e:6f:d7:2b:c1:4a:85:93:
                    ab:a0:43:2e:a7:e9:3a:e1:73:ca:45:41:65:3a:23:
                    f8:35:7a:b1:cd:86:20:6a:c5:71:f0:19:90:e6:ff:
                    ee:c9:34:69:a5:a2:fc:35:e1:fb:1f:3d:66:1d:8f:
                    15:ea:81:20:94:e0:2c:02:7d:08:32:34:67:d0:37:
                    e1:1f:1a:fd:42:b3:ca:76:8f:ec:71:ea:79:bf:11:
                    41:c2:0c:21:20:b9:da:97:8a:b8:a6:c4:3a:b4:ea:
                    a4:00:e3:2e:4e:f1:00:a4:f8:00:91:8e:16:85:ad:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:4D:E7:7E:98:15:E1:F2:F3:05:21:E8:9A:B3:12:50:86:EB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7474f5f7-4b8a-34fb-83cd-e6e958fcf9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:32:af:04:fc:cf:87:de:83:f2:14:f7:17:61:1c:7f:05:
         2c:94:39:14:68:3a:b1:6b:de:2f:15:3a:45:e8:6b:8e:a0:0c:
         9c:93:00:b3:17:16:df:5f:ab:cf:28:4e:d0:b1:39:74:61:2f:
         de:32:ec:31:56:df:bd:34:f3:78:93:0b:34:68:af:ef:50:eb:
         43:65:0b:68:09:d6:11:54:e4:a9:63:1e:75:d5:fd:8f:e0:11:
         2b:91:6b:ae:fd:98:b1:7f:ac:ba:03:06:53:7a:26:6d:03:2f:
         79:24:9f:e6:d1:f7:c8:19:50:c3:52:9d:f3:0b:0a:3f:e7:c3:
         a3:1d:f7:bb:c1:f2:c6:67:c3:fc:d4:d3:d2:f0:27:95:fa:e4:
         cb:f0:71:91:77:2b:75:ae:49:91:c4:0f:e9:b9:14:89:3e:14:
         87:f0:0d:92:1a:19:eb:68:49:47:50:66:97:4e:12:34:a6:01:
         c1:ed:c5:80:eb:22:6c:e9:6c:aa:d1:db:b9:e5:40:33:0b:8d:
         c3:d7:81:39:8d:c9:12:eb:3d:2c:4e:1c:9e:7b:b0:d7:a6:fa:
         1e:24:1d:7a:5a:c4:5d:eb:4b:bb:08:62:7d:4b:70:00:ae:23:
         f6:e0:e2:d5:0d:85:dd:c7:f3:2d:61:b5:2c:4f:79:3c:64:39:
         06:05:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:14 2024 by rpki-client on console-fra.rpki-client.org