Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85325988-a3b1-3b3d-9b1e-76db0c0ff2b9.roa
File:                     85325988-a3b1-3b3d-9b1e-76db0c0ff2b9.roa (raw, json)
Hash identifier:          Rz8+Zl/HNV9jM+QNH3rQ/9IN7D2tYKQu1/iHThFfiUQ=
Subject key identifier:   72:7A:82:FF:D3:DC:81:0E:58:A6:7A:4F:FE:D0:57:7D:EE:6A:03:D2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A12A539E950D09F7011700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85325988-a3b1-3b3d-9b1e-76db0c0ff2b9.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        2600:5800:f627::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:2a:53:9e:95:0d:09:f7:01:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e9a1dfbf-901e-44ca-abc0-48b4e4831a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:ce:66:1a:7d:31:41:52:a6:ea:6f:b9:c0:
                    fe:8c:2f:37:96:d9:9d:01:b7:e0:16:bb:67:1a:c5:
                    84:2c:68:e5:e7:18:71:fe:e8:0e:b5:26:4f:f7:a5:
                    3d:82:5d:47:95:89:40:31:f1:ac:31:2c:6b:6f:52:
                    b7:54:c2:ef:9a:a9:ab:77:44:c5:e5:ea:ee:33:6c:
                    e8:0a:08:52:34:68:00:a7:1a:cf:9a:7b:3a:a4:d4:
                    68:40:5c:3b:08:75:8d:ca:0d:42:5a:8f:ed:f9:59:
                    ca:de:be:a4:cd:51:89:0d:26:17:ca:6d:4d:64:9f:
                    c5:1e:74:a8:f0:a4:75:af:10:fd:5c:89:84:7c:a7:
                    de:37:b2:c8:57:b3:f4:a3:00:4c:e6:cc:c7:84:f8:
                    22:f5:a3:40:9b:52:ea:8b:e3:ce:2f:ea:de:e3:8e:
                    71:d7:d3:31:6e:d2:90:80:18:77:23:3d:89:99:65:
                    58:79:bd:ca:37:77:94:11:d7:fa:be:a4:74:57:22:
                    96:61:1c:18:93:b6:79:99:08:09:97:1d:08:6f:ea:
                    1d:7c:85:cf:7e:98:e0:a1:da:c6:24:eb:25:ae:da:
                    61:a3:9a:68:65:af:49:5d:ee:53:be:b9:a4:9c:3a:
                    1c:41:55:be:f4:1f:2c:a5:da:ee:55:90:a2:fa:d0:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:82:FF:D3:DC:81:0E:58:A6:7A:4F:FE:D0:57:7D:EE:6A:03:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85325988-a3b1-3b3d-9b1e-76db0c0ff2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5800:f627::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1a:08:1c:8e:06:9c:b1:f7:43:89:bc:ad:90:3f:3b:f7:c3:
         b1:b1:de:87:2f:ba:cc:c8:d9:f5:82:23:c9:2a:dd:9a:73:7e:
         f8:74:f0:08:fa:0f:be:b0:05:ad:0a:b2:17:36:5c:0e:d8:09:
         70:b1:53:bb:75:df:d4:e5:7f:83:57:f5:b6:5e:ff:a0:2c:cd:
         a5:85:01:73:ad:6c:8c:ce:06:4b:6d:5c:a0:05:db:8b:df:53:
         09:a4:93:fb:c8:9a:5f:69:49:f0:d6:87:56:b2:d6:b4:17:5c:
         9d:86:d9:02:f2:e5:16:79:ba:81:8f:35:bb:81:21:4c:74:01:
         7e:35:c9:a3:fd:47:d2:be:33:6d:c1:b6:f4:1e:8c:38:0f:f2:
         9c:9d:c6:06:99:b7:b0:f2:50:4a:a6:03:06:35:7f:e1:fc:d8:
         f4:7e:57:c3:5d:7a:33:ed:64:5e:10:00:b0:72:50:ce:0c:eb:
         9a:0b:1c:60:57:02:a3:fd:6b:3d:8e:e3:2a:4b:2a:84:73:74:
         7c:11:87:dd:7d:5d:05:e6:4a:48:66:78:67:a6:d8:00:ce:1f:
         1a:e5:f0:23:db:0c:24:2a:2d:94:75:05:fe:f0:5f:d6:8d:6c:
         8e:e5:2c:ae:17:7c:29:af:4c:5d:24:2d:55:5e:90:9b:d2:7e:
         41:97:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:31 2024 by rpki-client on console-fra.rpki-client.org