Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/88ab7969-b72e-3e28-9ea5-ad90a6819377.roa
File:                     88ab7969-b72e-3e28-9ea5-ad90a6819377.roa (raw, json)
Hash identifier:          i+eMFtA7cLQ05VaYVAE4LLwEurYUlaVVT8b8OivWdYA=
Subject key identifier:   57:D3:E3:31:88:02:F6:64:34:8E:8E:67:91:51:F8:E8:18:CD:C7:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A1B3C848F80B47078B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/88ab7969-b72e-3e28-9ea5-ad90a6819377.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        70.60.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a1:b3:c8:48:f8:0b:47:07:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=016d3982-7d66-4416-9439-0b15855970d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fe:40:dc:a4:3f:a6:47:c7:a0:a6:09:19:ec:
                    c7:9c:16:b8:e5:3d:8c:fc:af:24:04:6b:4c:bd:cb:
                    a5:61:b1:e9:a4:56:13:69:7d:82:59:ab:1b:53:d9:
                    90:cf:cb:d6:f7:6d:26:e1:07:ec:c4:9a:cb:7a:2a:
                    2f:02:2c:95:fd:eb:73:de:db:58:88:cc:4b:96:33:
                    79:72:5e:b2:c6:0c:8e:b5:69:f5:f6:f6:9a:76:78:
                    dc:11:f7:c0:3d:e3:ee:9c:99:00:a9:d6:24:24:04:
                    05:d4:e1:b7:bf:af:6d:37:2e:b8:96:03:4e:37:d5:
                    e4:ec:c6:12:13:2a:67:cc:e1:fd:f5:1b:ce:22:d3:
                    78:6e:b0:53:59:1d:91:a9:8a:29:51:f3:5d:4f:fb:
                    55:ea:65:e8:7f:e6:16:d3:c1:06:74:58:1b:5b:be:
                    b1:4e:af:6e:26:ec:f9:a3:e7:a7:f8:52:2a:d5:c6:
                    aa:71:0e:bf:ac:38:fe:c3:47:f9:08:f6:f5:8c:62:
                    23:a7:e1:e1:3f:0e:31:42:cd:b6:b0:a9:d1:bf:50:
                    92:56:74:ec:e6:e6:57:88:57:70:f1:05:e0:89:ea:
                    8a:17:d4:3b:3f:02:c9:b6:72:d1:a4:ba:d7:5f:4c:
                    47:89:db:61:d6:ca:19:ca:fd:84:87:d3:b9:df:0d:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:E3:31:88:02:F6:64:34:8E:8E:67:91:51:F8:E8:18:CD:C7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/88ab7969-b72e-3e28-9ea5-ad90a6819377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:26:8e:e8:8f:2a:f6:ff:64:b9:02:05:cc:0c:9a:dd:b9:
         ab:7b:57:60:90:ee:70:47:9d:cd:55:6f:e3:67:8e:9d:59:f3:
         72:8e:85:17:6e:cd:4b:40:1a:7d:06:4f:5f:c8:0b:14:15:21:
         8f:7d:f6:e1:a6:31:19:1d:5b:64:19:c0:fe:46:c4:fa:c1:e9:
         90:9a:e1:16:f1:f4:5f:70:bf:b1:5f:e3:49:9e:b5:50:a9:f0:
         d2:8a:0d:8b:a7:c5:9d:99:1d:14:d6:14:14:0c:e0:b1:aa:3c:
         e0:de:26:18:c0:65:99:ef:2f:39:ad:45:a8:3f:47:84:7a:8f:
         83:e0:29:f5:b4:b9:e2:d3:0f:b0:33:2c:a8:57:51:f1:cb:af:
         73:9a:3a:4e:4e:b8:70:2e:39:11:3f:08:c1:11:47:45:48:11:
         f3:c4:c2:9e:7d:3d:4a:35:d4:1f:16:fe:3a:9d:1f:06:b2:a3:
         cd:8c:c4:0c:b2:61:2f:0c:76:be:93:c8:a1:d6:18:50:3c:33:
         c7:ec:c8:a7:27:f0:07:d6:99:80:d0:bc:a3:83:40:9b:af:ca:
         f1:19:d0:80:7f:a4:79:e6:22:7f:81:69:8d:06:1e:c9:f9:6d:
         cc:e1:09:c0:3f:9c:cb:ca:c1:8e:00:0e:23:52:97:fc:60:9e:
         f1:95:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:44 2024 by rpki-client on console-fra.rpki-client.org