Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8341951c-2aa8-3945-b411-f2b793965bb2.roa
File:                     8341951c-2aa8-3945-b411-f2b793965bb2.roa (raw, json)
Hash identifier:          4GJgbIaHmzrf++wUQGPFIXANh2BKdHhUezgiTq2XjFU=
Subject key identifier:   02:AE:CF:ED:D3:07:A5:F8:54:70:97:2B:98:BA:D2:FE:4F:3C:F8:B8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858393219BDB581AF4EBF38C41CC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8341951c-2aa8-3945-b411-f2b793965bb2.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        70.60.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:bd:b5:81:af:4e:bf:38:c4:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=5cd540e1-a03e-4c09-9e70-d37ae628fadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:b3:ea:51:9a:5b:01:ee:df:f8:e7:6c:13:
                    c2:4f:c0:d3:52:4c:4f:c7:16:00:9d:1a:72:58:42:
                    fb:37:48:08:2e:05:ad:35:8d:ea:e2:07:71:17:6e:
                    13:1e:8b:ed:cb:28:df:99:91:16:75:12:6b:7e:20:
                    bb:90:11:0d:82:71:f5:84:43:7b:e5:13:9b:c2:03:
                    9e:69:4b:4e:ec:c0:45:6f:d7:c2:48:6c:06:4f:8b:
                    3f:28:79:d9:bb:bd:84:59:9d:14:c7:84:8f:87:5d:
                    e7:b0:23:7d:e4:74:0f:0e:f3:ff:95:43:fb:38:bf:
                    96:f9:39:5e:49:5d:ee:b3:bd:16:1b:44:5b:af:04:
                    8d:a9:a9:ed:22:1e:e7:6a:d2:38:b5:c8:bc:72:5e:
                    28:32:94:ce:e7:4d:5b:ed:b5:8f:d9:b0:d8:ed:df:
                    af:3d:bb:41:7e:77:a0:9c:fb:3d:ca:02:37:3e:b8:
                    f0:6d:80:30:85:d5:95:87:82:92:36:08:fa:c6:c3:
                    65:19:c8:d4:3f:81:3f:96:d5:e1:ea:75:0f:bb:63:
                    9c:be:c5:f4:e1:1f:a6:e4:c9:6b:c2:7f:03:9e:d4:
                    fe:d0:20:3b:f5:ba:ff:d2:01:22:e7:9b:80:95:4f:
                    3d:98:a7:b9:8b:6e:58:8f:ed:51:ec:3f:11:ca:03:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:CF:ED:D3:07:A5:F8:54:70:97:2B:98:BA:D2:FE:4F:3C:F8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8341951c-2aa8-3945-b411-f2b793965bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:92:03:c5:bb:e4:a1:5c:cf:5c:b9:80:f7:89:17:70:a5:16:
         84:8b:12:48:d7:57:1f:02:f7:bc:e4:15:37:ac:01:03:aa:9d:
         28:a8:97:86:05:4d:38:9b:cc:f7:fd:e8:97:50:d4:5b:14:b9:
         33:88:8d:6b:04:1a:f2:21:42:52:98:c0:46:c2:80:86:77:e8:
         a6:6a:22:53:88:b4:19:3f:09:28:81:09:87:0e:11:24:bf:21:
         8d:63:27:52:18:01:0d:c8:47:3c:6d:a2:e9:24:22:f3:4a:1a:
         df:29:e7:65:20:02:bc:94:8a:e5:b9:70:26:51:76:a0:0c:99:
         6a:eb:fe:e4:5d:dd:13:57:95:08:60:e1:3e:cc:92:c8:d2:4b:
         ac:af:59:32:ff:3a:9c:d9:ee:8d:67:21:a2:da:a9:7d:ad:32:
         98:f2:ef:1a:02:39:4a:05:a0:9f:ab:bf:18:43:d3:91:ef:9d:
         ab:2b:90:79:00:c7:4d:6b:42:67:bc:e4:c2:45:66:1b:a2:34:
         ed:07:72:c6:e8:0c:c9:37:b2:79:ab:04:15:49:dd:6f:2b:11:
         8f:fd:32:c0:1c:2a:96:00:27:cc:5a:a3:9e:07:f7:88:45:4c:
         ec:31:eb:e5:f3:41:aa:86:eb:0d:0a:7e:eb:ba:20:d0:83:a0:
         af:84:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:51 2024 by rpki-client on console-fra.rpki-client.org