Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/81185160-701c-38c4-94f2-739555b8a4ec.roa
File:                     81185160-701c-38c4-94f2-739555b8a4ec.roa (raw, json)
Hash identifier:          5hxYj27/7SrqbfB/hR96PBcnx5oCu6U8hZdfAESVE9E=
Subject key identifier:   B2:00:5F:04:BB:2A:8F:20:AE:FA:17:B7:F4:1E:79:4B:E3:3A:A8:71
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E4A73D7FED75C20332780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/81185160-701c-38c4-94f2-739555b8a4ec.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        71.67.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:4a:73:d7:fe:d7:5c:20:33:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=02bf385c-4364-4a72-9cad-c91001f411d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:1f:f9:ae:cb:8d:9b:7d:c1:62:af:f6:a1:
                    3e:3d:34:8b:cd:c8:c1:3a:f0:69:03:93:9f:6e:25:
                    3d:48:5b:58:5a:77:17:c2:7f:47:74:64:f7:11:08:
                    76:9e:4f:5f:b9:25:67:7f:b8:2c:69:ea:ad:53:20:
                    26:b8:06:bd:20:e4:43:c2:8b:65:cb:f2:76:bf:39:
                    9e:72:99:5a:62:03:d1:ae:bd:77:4e:e7:1e:bc:6d:
                    a3:39:c5:de:69:b4:58:bd:2d:f0:d7:d1:e8:cb:b6:
                    6f:56:d3:b4:fa:0e:c0:3c:5f:ff:ec:8b:d9:d1:c4:
                    16:ab:a5:96:f7:7f:44:2b:38:a6:69:22:4a:61:18:
                    38:d6:2e:4f:67:3a:c2:44:29:11:50:18:fd:82:a4:
                    75:45:5b:d7:51:6b:63:f8:09:b9:65:e7:e5:ea:c6:
                    f3:26:5e:2d:4a:3a:28:7f:db:e2:ec:dc:b3:af:f0:
                    61:02:79:45:fd:7f:a3:f3:98:82:69:a0:ff:f1:f5:
                    c0:e7:21:b5:85:52:d7:dc:a7:b0:9a:9d:98:fd:44:
                    96:fd:97:d3:8f:95:51:b6:99:ee:36:ab:4f:5d:ce:
                    b9:46:ab:f0:85:f9:9d:c4:61:c1:8e:22:22:0c:61:
                    d4:83:b0:2e:b8:cd:a5:2a:59:5b:8e:66:4b:68:e2:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:00:5F:04:BB:2A:8F:20:AE:FA:17:B7:F4:1E:79:4B:E3:3A:A8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/81185160-701c-38c4-94f2-739555b8a4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.67.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:87:f4:53:dc:40:e2:8a:a3:fd:a9:55:78:f3:ac:72:8e:
         57:92:2d:35:0b:0b:9e:39:33:82:40:df:56:d3:01:e0:7b:34:
         98:3d:f3:6d:aa:db:b8:3e:bd:a7:68:cf:01:d6:3b:e5:d4:35:
         b1:5a:f2:80:05:b5:2d:b3:4b:44:e9:84:47:bf:cf:95:55:7b:
         f3:63:14:20:48:6e:03:f0:f5:38:e8:14:a6:a5:49:b9:82:a8:
         d3:46:72:0a:03:6f:4a:7a:54:93:16:8d:c6:68:c2:65:54:37:
         0c:34:5a:af:f2:92:fc:57:58:83:f3:d4:a9:96:cf:6f:55:bf:
         88:ad:40:17:2f:05:3a:a0:98:c0:e6:ac:1e:4e:86:39:d2:0f:
         97:3c:ec:35:ec:85:ee:72:8c:37:45:15:5d:5e:53:cb:27:75:
         60:24:ee:da:64:b0:ba:ae:c1:87:4e:33:13:c1:b9:a9:58:45:
         b2:50:eb:e1:1d:fc:05:9e:77:5c:55:2e:d9:d6:e3:46:b0:37:
         66:fc:1f:05:3a:5b:ff:05:bf:5b:f9:f2:1b:a3:f1:27:f4:81:
         94:31:e9:8e:53:9c:9a:5a:74:fa:6c:4e:ad:75:40:2e:34:86:
         5c:3f:cc:93:69:50:24:06:42:f8:85:a5:53:5f:c5:02:11:e0:
         57:e8:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:39 2024 by rpki-client on console-ams.rpki-client.org