Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b25ae30-e2c2-35f8-826b-6906e2f53248.roa
File:                     8b25ae30-e2c2-35f8-826b-6906e2f53248.roa (raw, json)
Hash identifier:          /3Cg9crf0IQ1Twx+s+I9x4vPy3AMB41HuV0ipZpacT0=
Subject key identifier:   66:C7:ED:A2:1E:C2:CD:90:47:4E:0E:F0:C6:10:7E:D2:DA:53:51:96
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E64E849CAAFC944D85AD0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b25ae30-e2c2-35f8-826b-6906e2f53248.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     12271
IP address blocks:        72.227.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:64:e8:49:ca:af:c9:44:d8:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=be378cc9-70a6-4abb-ba9b-f838cd87b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:b1:2a:fd:58:7e:96:ac:17:64:2f:43:5d:
                    2d:c3:f4:4b:25:6c:58:5e:3d:da:27:c8:fb:7e:d4:
                    f0:03:65:cb:ba:ab:f0:7f:17:e8:a6:23:e5:32:7f:
                    a2:f2:d1:6c:ae:b4:25:cf:1d:f4:f6:c6:0b:3a:5a:
                    5a:b9:98:17:ea:fa:e8:cc:2c:5f:8d:70:9d:0a:58:
                    41:36:83:08:69:b2:35:a8:7a:42:2f:15:9d:a6:2e:
                    c9:bb:0b:f7:b7:80:35:2c:ac:8d:0b:71:b6:d0:8f:
                    0c:42:2b:45:21:68:1b:cf:58:61:cb:b6:97:33:21:
                    33:97:23:84:89:fd:fc:bb:a0:58:86:d8:0b:62:ec:
                    ca:d6:b9:09:5e:7e:a4:4f:74:da:fb:66:75:6e:62:
                    74:dd:e0:ce:a3:72:7e:47:c3:a4:aa:9c:05:84:78:
                    d0:35:04:ec:14:7f:0a:63:23:87:ff:8b:5d:e5:20:
                    16:8c:a2:44:75:3f:42:de:7c:f2:9f:af:5f:eb:89:
                    10:69:f8:a3:71:43:89:2c:bc:e2:e8:0d:63:64:21:
                    61:d0:6f:84:f5:39:de:65:7b:f8:5d:fa:c7:b1:05:
                    27:5a:ba:98:6b:ea:28:6f:1d:b7:64:38:0e:eb:c7:
                    0b:04:b4:92:85:e7:8b:ba:90:c6:19:ba:98:e3:a1:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C7:ED:A2:1E:C2:CD:90:47:4E:0E:F0:C6:10:7E:D2:DA:53:51:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b25ae30-e2c2-35f8-826b-6906e2f53248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.227.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:60:7a:0e:db:1a:f3:a6:ab:7e:5f:a1:8f:58:30:39:f3:6a:
         ba:7a:28:39:7e:ed:58:c5:6d:20:00:85:82:4a:7c:64:6c:8a:
         b8:40:e6:58:8e:f5:27:29:50:5f:8d:94:00:08:cb:e3:58:af:
         45:23:d9:4a:e7:3c:f2:84:ee:4f:cb:11:c3:59:e7:64:7c:c2:
         c8:e5:7c:5e:5e:01:e8:eb:6a:92:68:eb:16:83:dc:65:0c:9c:
         79:74:05:55:ea:b0:fd:85:2e:bb:2f:5f:03:f7:1c:bc:d1:0f:
         16:53:9b:58:59:1e:ce:ec:f6:66:b1:71:21:26:69:ef:f5:e3:
         12:28:d2:38:bd:50:ea:92:56:98:5e:f4:da:c3:60:29:3a:3e:
         cc:d1:6e:d5:69:fd:67:f0:53:be:e1:7f:7c:dc:33:bf:5a:12:
         a3:5d:e0:a5:b1:89:de:d9:21:70:b2:44:65:df:ed:dd:2c:4c:
         15:9f:a0:ce:69:1c:42:fb:22:2a:50:8e:b3:eb:20:7e:48:37:
         06:dc:8e:7a:7d:86:5b:75:45:8c:db:2b:b0:12:61:07:89:c5:
         72:e2:e6:ae:d2:67:db:c8:02:c3:ed:fa:64:a3:10:50:46:df:
         e4:4f:8b:ed:ee:ff:14:de:83:6d:dc:16:55:23:7f:b6:75:5d:
         86:0d:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:14 2024 by rpki-client on console-ams.rpki-client.org