Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e601270-cb83-33ad-a14c-27b51a20af07.roa
File:                     8e601270-cb83-33ad-a14c-27b51a20af07.roa (raw, json)
Hash identifier:          w7Bw91/PN3vclELOT8J0Fi1W5d2j6PwXVwqlzNWmGts=
Subject key identifier:   87:C9:2B:A8:11:05:43:E8:95:DA:E3:B1:ED:FE:43:8B:7A:53:EA:B8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858393219DDB6D845CAA503332300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e601270-cb83-33ad-a14c-27b51a20af07.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     11427
IP address blocks:        67.48.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:dd:b6:d8:45:ca:a5:03:33:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=60274fbe-e724-42aa-95c1-cc14d06c8ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:59:90:96:7d:eb:1b:9c:4b:6b:e4:4e:44:
                    86:a3:ac:14:d8:0d:3a:43:89:78:f4:98:6d:11:82:
                    52:81:ac:11:f7:6c:2e:b5:1a:ae:eb:eb:98:ae:5d:
                    8c:f8:7a:09:c4:3f:a3:c4:10:c7:5e:2a:70:21:b5:
                    50:74:20:40:a8:06:f2:61:e8:84:92:7d:f1:35:87:
                    a5:58:26:2e:f4:e8:4a:c9:e2:e7:dd:35:1a:e1:b9:
                    0e:d7:d3:97:7d:14:da:41:8a:b7:de:9a:7c:ed:90:
                    13:3b:a3:c3:ee:6e:fc:2b:04:36:09:f0:ed:f1:e5:
                    31:04:b2:7e:cf:ed:a0:69:84:bc:e0:a6:eb:67:18:
                    03:0e:47:ef:23:da:6b:ff:35:47:77:fa:6d:32:ab:
                    44:6a:ed:d4:c0:7c:48:c5:6d:bc:74:02:8d:54:bf:
                    a6:09:54:ef:bb:68:f9:15:84:e4:24:78:97:e5:19:
                    a2:9f:4d:1c:a5:3b:ad:4b:cd:96:ba:43:12:16:d3:
                    c6:f8:e7:c8:da:5b:cb:b9:82:41:1f:4a:d2:cc:b3:
                    a1:bf:6d:c9:4b:0e:cf:da:45:fc:f2:05:49:36:31:
                    b4:24:14:f0:a6:6e:2d:a2:7c:da:f7:4f:74:6e:d7:
                    73:e6:96:b7:53:6f:47:d3:d2:86:a1:cf:ce:f1:df:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:2B:A8:11:05:43:E8:95:DA:E3:B1:ED:FE:43:8B:7A:53:EA:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e601270-cb83-33ad-a14c-27b51a20af07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.48.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:57:33:66:41:75:ad:9e:c7:18:2d:26:56:3a:d1:d2:2d:da:
         19:cc:ee:c9:63:62:7b:6f:28:b0:21:c2:f4:67:85:b6:5d:79:
         6c:65:2c:2f:6a:3e:f4:81:4b:20:f5:82:be:1b:ea:03:7c:ec:
         c1:6e:85:4c:b5:90:7d:f3:42:5d:9f:54:9e:ef:17:ed:2a:ec:
         28:15:65:f0:38:5f:5d:ea:d7:2a:db:e4:31:d0:07:d8:e3:49:
         25:93:36:bf:b9:8d:61:e2:23:12:85:de:73:57:6d:66:71:c3:
         68:77:44:e5:c1:e5:6a:9e:54:f5:cc:50:a2:c2:ec:03:2a:51:
         e4:34:01:7a:cb:66:1b:13:5e:40:d3:63:d8:ed:c5:41:62:43:
         7d:af:c6:c2:04:f2:1a:06:32:0b:f7:46:85:6b:d8:1c:c2:7d:
         1b:71:cd:c7:a5:9f:cd:68:1f:76:ea:ec:48:c6:02:c4:de:15:
         c1:9d:c5:b2:7f:54:76:13:04:7b:7b:04:c5:53:ad:c2:52:b6:
         e1:fa:99:aa:0d:35:0e:57:0d:1b:98:1e:17:cd:ab:ee:0d:c4:
         30:f5:88:c5:ef:94:bf:6f:cc:a9:bf:2b:ca:6d:a0:e7:54:57:
         94:67:d0:b0:6c:39:c2:d3:a0:56:e3:1e:12:14:24:1c:b6:28:
         93:eb:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:24 2024 by rpki-client on console-fra.rpki-client.org