Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c5eb127-8905-30c4-b533-4a94de726fa2.roa
File:                     8c5eb127-8905-30c4-b533-4a94de726fa2.roa (raw, json)
Hash identifier:          t2N03n6zlE8F22SOxGi1XtPZB4yHqCCi8oNiXp2NrpU=
Subject key identifier:   0E:49:F1:4F:6F:2C:F5:5A:0B:A4:3A:D6:21:D1:B5:8E:9C:51:65:AB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD30810233A9416502700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c5eb127-8905-30c4-b533-4a94de726fa2.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        65.28.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d3:08:10:23:3a:94:16:50:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=97652a23-3529-4d7e-be94-ce1b03c244f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:d3:59:63:b5:97:0f:f5:72:f5:e5:6f:9b:
                    d8:b7:3b:6f:d9:54:3e:81:8d:d9:de:44:7a:52:96:
                    c9:a6:10:09:f5:55:6d:9c:ff:f6:f3:2f:39:e5:0c:
                    af:d2:4b:dd:7c:3b:fa:0e:c4:a4:cb:4c:4c:54:3b:
                    c1:7a:0b:57:a9:49:8a:31:b6:28:66:3a:0f:10:51:
                    d5:1f:c6:99:88:e7:d6:ed:1f:59:6d:57:3d:ef:a6:
                    a1:a5:21:3e:66:6a:e0:a9:85:a0:28:69:40:e6:0d:
                    9f:49:9e:95:58:2a:b7:da:42:73:ba:fc:bd:da:8f:
                    35:3a:37:5e:e3:9f:cf:a9:12:87:83:3f:ba:b2:85:
                    ca:d0:60:ba:ae:05:6d:7e:ff:dc:1f:69:f8:d1:98:
                    2a:64:53:4e:f7:4e:83:c9:82:23:ad:55:61:c4:ac:
                    94:79:e4:7f:cd:58:7b:4c:54:8d:59:20:8d:90:44:
                    d5:4e:b8:89:b7:85:c5:c8:a3:34:95:88:4a:fd:ca:
                    4f:f9:f0:ac:9b:82:0c:a3:2c:19:43:77:23:34:f9:
                    db:2e:7b:ad:82:d5:2a:3a:fc:f7:d8:b4:7b:30:fb:
                    8e:4a:12:a7:ea:82:93:21:97:a0:b6:97:d7:c4:8b:
                    33:84:21:b7:f6:c9:82:fe:5b:e2:e0:c5:99:80:c5:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:F1:4F:6F:2C:F5:5A:0B:A4:3A:D6:21:D1:B5:8E:9C:51:65:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c5eb127-8905-30c4-b533-4a94de726fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:22:1c:b6:37:ca:45:05:15:b9:2e:7d:6e:7e:36:5f:7d:
         c0:4b:05:1d:b3:3f:7a:29:43:e2:86:e6:1e:e5:13:c3:a1:a6:
         02:14:cb:00:9d:2f:de:06:83:9e:0d:62:4a:0d:16:16:d2:74:
         a4:92:56:79:07:fe:c2:c6:5a:9d:53:56:7e:19:99:c5:0a:4e:
         80:ef:c3:01:be:be:1e:b5:5f:ed:0f:54:54:c6:99:75:7a:5b:
         2a:f5:4f:ce:f6:0c:b1:11:e0:91:d8:26:cf:3c:a6:9a:0b:54:
         92:2f:8a:0f:a9:6d:ae:96:5c:49:24:9c:e8:bf:18:7b:4e:51:
         e5:1e:87:2a:29:5e:3b:4c:48:5d:f1:e0:d9:fe:22:11:bd:27:
         71:b0:2f:e9:14:a9:06:0b:d0:c7:41:53:ab:36:bf:d2:d9:a2:
         0b:73:da:5a:21:3e:87:22:a0:b2:2c:b1:ea:6e:d4:25:b2:9a:
         93:77:41:fe:89:1c:37:5d:95:58:05:ef:27:bc:90:ee:33:68:
         92:49:ec:ab:3a:44:17:a8:53:be:b8:7d:bb:33:22:63:06:3f:
         03:62:4a:03:09:15:6c:f5:b4:0b:55:2a:32:e9:aa:f8:8e:6d:
         a1:d2:32:80:31:4e:88:76:84:2b:f3:fe:18:5b:3c:73:73:ee:
         18:93:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:24 2024 by rpki-client on console-fra.rpki-client.org