Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a357791-acb3-357a-bca4-ac1f8021e62c.roa
File:                     7a357791-acb3-357a-bca4-ac1f8021e62c.roa (raw, json)
Hash identifier:          kbDvqLfWK9xrTyXVBb2ccd3G7B0IsUgdBJK3DqJSoCw=
Subject key identifier:   CD:A9:76:5C:C8:80:A4:0A:A1:59:2E:08:42:F2:AF:CC:15:FB:D7:C9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321872ED8BF93F1076476E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a357791-acb3-357a-bca4-ac1f8021e62c.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        67.52.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:18:72:ed:8b:f9:3f:10:76:47:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=d21599ec-c839-43d7-82ba-1b2a75dab021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:36:25:d0:75:44:8f:b4:99:49:56:cd:7b:
                    66:f6:45:2d:42:3e:92:49:89:3b:3d:28:04:c1:55:
                    67:ab:4e:37:3b:5d:c1:37:4b:24:54:6f:20:b7:03:
                    00:5d:4a:22:88:33:e8:72:cb:61:5b:51:bd:36:a3:
                    f2:f7:86:ae:64:f7:3b:a7:7c:c5:54:aa:cc:ae:77:
                    bd:6d:e4:f7:27:d9:30:f6:9f:2e:d8:cd:b0:a1:ac:
                    a9:46:2b:52:c4:20:d4:d9:f3:63:12:04:ac:c6:db:
                    dd:3a:5e:89:c2:c8:72:ed:ae:24:a4:de:62:61:09:
                    68:57:7e:83:a2:d0:65:8c:e7:f0:7c:9c:f5:4b:57:
                    c2:ea:99:0f:97:c4:c1:80:d8:f0:c6:72:b3:f4:0a:
                    2d:e1:44:e2:22:48:b1:a7:dd:28:d9:eb:83:af:df:
                    c2:38:1c:15:5b:97:29:af:8b:09:f0:a9:7f:f9:62:
                    14:9a:94:6d:f9:74:46:22:99:30:cc:b8:e3:6e:35:
                    a5:a7:91:4e:41:b8:af:ce:7d:0a:b6:1a:e5:02:7e:
                    f4:bf:fa:04:4b:cc:ba:f2:67:dc:e7:60:31:e6:d3:
                    12:1d:03:c9:c3:ca:8b:e6:49:8a:09:93:23:5d:23:
                    d8:24:6e:b6:8e:05:8c:28:db:c0:a3:37:38:f2:e3:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A9:76:5C:C8:80:A4:0A:A1:59:2E:08:42:F2:AF:CC:15:FB:D7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a357791-acb3-357a-bca4-ac1f8021e62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:13:02:2d:d6:83:c1:7a:50:f7:12:70:ae:6c:11:b2:ae:
         e0:f7:d6:01:19:5e:e4:52:78:4e:d1:37:60:55:5c:28:bf:55:
         25:6c:c9:5e:3e:13:3f:73:0f:3f:04:57:40:d6:22:19:b4:54:
         2f:8d:b0:e9:23:47:53:d9:23:fe:1f:dc:8f:e2:51:59:16:35:
         1a:f7:f7:7b:05:6e:01:42:04:97:e1:65:93:21:aa:91:79:2f:
         e8:06:fd:3f:44:87:00:02:8e:7f:7b:82:b5:27:12:5e:1b:11:
         92:2b:18:41:55:5b:e5:05:1c:60:cc:56:87:56:5e:72:2b:18:
         23:65:85:b5:9e:cb:b6:71:e0:70:0d:68:8a:b7:b4:12:39:ee:
         08:4a:ba:94:85:69:fb:d9:14:bb:91:79:da:25:62:c3:b8:b3:
         04:98:26:17:ff:08:6c:c3:aa:f2:8e:bd:4f:ec:90:46:4f:78:
         c7:27:45:37:a7:ea:e2:29:06:1e:05:03:08:67:a2:77:64:6f:
         a4:37:e8:c1:03:1c:82:01:7f:8a:dc:ac:4b:50:f3:a5:d1:00:
         8a:c6:3a:0e:a5:7c:8d:f3:75:f4:fc:e7:66:5b:0f:be:8c:d7:
         c4:5e:64:16:ed:55:00:ee:1b:d8:12:14:e7:80:f0:9e:10:7c:
         99:82:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:30 2024 by rpki-client on console-fra.rpki-client.org