Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bce9ee6-9463-376d-ac09-46bb269e71e7.roa
File:                     8bce9ee6-9463-376d-ac09-46bb269e71e7.roa (raw, json)
Hash identifier:          x8ua9uKwxx2F30cbQBHC7E/8Zp/Ud+qvd6wLGijx/Zg=
Subject key identifier:   9F:B5:BE:22:47:71:83:65:AB:1C:33:0F:3D:ED:81:B3:7B:B9:FA:BC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09823197A390D41E7FDC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bce9ee6-9463-376d-ac09-46bb269e71e7.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        108.176.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:98:23:19:7a:39:0d:41:e7:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f1e4872c-e4ba-4280-8aa3-acd88b8e0061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:3d:0c:ec:e2:89:aa:d9:f1:cf:7c:0c:0b:
                    e8:12:e8:83:2b:00:9f:ed:09:1b:b1:e2:5c:62:23:
                    9b:cb:1c:ed:a2:0d:c2:52:53:03:13:f8:b2:52:ed:
                    ad:4c:af:af:4e:13:1b:8d:b9:a7:93:3f:5f:e0:b1:
                    1d:8c:12:97:d4:55:24:65:9d:13:05:69:a5:93:31:
                    25:29:30:72:d1:a3:89:dc:cf:56:12:a6:92:55:9a:
                    eb:69:e4:81:ae:8f:9f:2a:65:b6:92:7c:ba:22:d4:
                    ff:f7:7c:c9:54:ec:36:79:57:8b:ec:65:a2:37:b1:
                    c6:27:75:d5:64:b0:e4:69:f4:0a:28:ef:06:86:b7:
                    9d:2e:0a:fe:aa:fb:b2:5f:da:f6:65:fd:0e:86:48:
                    bb:08:06:7c:40:ae:b7:86:40:a7:dd:cb:92:71:d5:
                    9c:d8:ed:d5:4c:b5:b9:6d:40:52:62:ad:be:21:56:
                    f2:a0:f7:54:80:c7:38:91:b6:80:d4:5d:db:f9:c2:
                    6a:79:f0:5a:58:4c:72:de:f2:89:da:fe:78:0e:e2:
                    3c:83:bc:d3:da:90:81:ff:42:a1:4c:e3:19:0e:b3:
                    e4:94:45:29:bb:c0:8c:50:ac:7d:99:c0:28:3a:f3:
                    cf:b0:b1:14:85:3c:9a:d7:6b:37:04:87:44:1d:62:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B5:BE:22:47:71:83:65:AB:1C:33:0F:3D:ED:81:B3:7B:B9:FA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8bce9ee6-9463-376d-ac09-46bb269e71e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.176.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:60:3d:63:48:12:71:83:1c:8f:a8:1d:85:e6:1d:a5:d9:
         61:71:87:f2:aa:5b:31:79:1a:e6:49:b0:f8:12:88:a4:74:a3:
         b5:79:fc:2d:ee:80:ee:9e:3c:31:16:5b:a4:9f:c4:dc:e6:21:
         a6:40:81:28:64:86:46:6f:e4:76:1e:64:75:42:8e:6a:88:18:
         39:98:03:71:d5:e9:f2:53:b8:57:5f:42:58:31:28:f1:b3:ee:
         02:84:b2:9d:fb:0d:26:02:b8:f9:fd:ae:7a:3f:5e:65:33:78:
         86:0d:46:65:93:3e:ef:78:9b:be:e1:f8:2c:20:bd:38:1e:d8:
         82:a3:b6:85:e8:14:3e:bb:77:44:68:c5:11:e0:34:b8:eb:f4:
         ac:05:83:98:c1:f6:c1:62:b6:2d:7b:68:7c:3c:65:0b:7a:00:
         42:9d:ce:fc:b4:8e:a1:59:73:a3:34:30:84:c0:34:3f:7f:63:
         12:96:0f:69:e9:c3:cd:5b:58:40:8b:6c:33:94:01:e9:97:87:
         cf:b8:a7:75:08:fd:db:55:5e:a5:27:be:17:12:ee:15:db:c0:
         b6:b4:42:84:62:61:ca:d9:46:61:78:b2:5d:d0:2e:54:6a:65:
         19:da:12:41:b8:71:47:d6:5d:65:0a:c6:80:c5:d2:b6:bd:07:
         c9:d2:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:22 2024 by rpki-client on console-ams.rpki-client.org